Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File:                     owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier:          4oPAq4EDCJObKzUtsaPNW7dCjzmLrmX9HvNmfLRu/9o=
Subject key identifier:   C3:13:D7:B7:94:9F:31:EE:CF:95:AA:60:88:23:6C:36:D2:ED:3C:83
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer:       /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial:       01962F74BE83A0D0A571CBCB363E3E90CA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number:          0686
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=)
                          2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: 35uQxp5o7qaqNtWN9X/p0k4TEvfBQhUQsEgdppla1c0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:83:a0:d0:a5:71:cb:cb:36:3e:3e:90:ca:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=c313d7b7949f31eecf95aa6088236c36d2ed3c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:46:96:c0:dc:6b:e1:71:99:93:22:1d:8d:
                    2a:fa:9b:79:71:c7:fb:46:a8:e5:9c:ca:04:a8:2d:
                    46:4e:45:99:a5:02:cb:d5:e5:ab:d8:9b:9d:e0:2e:
                    73:82:9c:5a:9f:3e:3c:2d:be:a3:de:65:f3:ac:ae:
                    c1:e3:14:6b:28:94:ac:7e:e9:a6:86:82:a8:c5:aa:
                    a5:a5:39:8c:a0:71:ce:1b:dc:bd:5c:e1:10:73:65:
                    e8:2c:cc:fa:50:69:a5:3f:f8:09:79:f7:bd:74:44:
                    24:68:16:ca:1e:40:79:64:3f:14:13:b7:50:59:5e:
                    ae:c0:cb:58:2d:14:59:35:36:35:6f:4c:41:07:d0:
                    de:db:cb:06:36:8b:ff:8a:30:37:64:ab:83:04:4f:
                    86:85:10:fa:f2:e6:a2:50:b0:32:e8:9a:4e:17:f1:
                    4e:74:a3:b7:ff:6b:45:04:26:2b:d9:1d:18:91:f5:
                    32:b2:64:c4:57:4d:cb:b2:51:70:8b:d1:75:cf:b2:
                    1a:8d:5b:0d:8a:9e:5a:d1:a2:b7:9e:45:7b:e1:36:
                    d3:91:0c:b0:65:ca:d1:38:e9:60:84:76:a5:c6:88:
                    6e:b3:52:23:07:e8:db:c8:ea:7d:e2:c2:3c:af:4e:
                    14:e3:9c:8a:66:96:89:d5:cd:4a:e5:ac:dc:ac:b7:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:13:D7:B7:94:9F:31:EE:CF:95:AA:60:88:23:6C:36:D2:ED:3C:83
            X509v3 Authority Key Identifier:
                keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:f7:30:a2:1f:b6:4d:aa:1a:44:32:b2:ff:2f:7b:06:fe:6e:
         d8:61:55:a6:31:13:d1:f7:25:96:fe:8e:d3:ed:8d:7f:36:23:
         1c:7e:77:2b:3e:ab:76:db:69:2b:f2:68:ea:c3:88:41:16:85:
         f9:95:81:0e:d9:ad:55:04:f0:54:cd:8d:2e:1a:da:7a:66:d2:
         f4:63:e5:51:82:9b:79:27:a2:91:eb:9c:6b:7c:9e:f0:54:72:
         44:ed:92:98:58:dc:bb:b6:e9:fc:9c:4a:9a:0c:15:bb:94:ab:
         ce:16:aa:a9:f3:99:dc:b9:b2:01:61:28:10:b6:06:ae:0c:c0:
         af:b8:d8:fd:d1:ca:44:16:88:3b:ce:e3:31:00:8a:0c:7c:5a:
         d6:4e:5b:fa:e5:13:fa:77:56:c2:f7:a7:21:d0:30:03:14:98:
         94:35:99:65:ac:9a:b6:c2:f6:27:82:7e:8b:f7:88:6e:5f:5e:
         15:dc:ed:f9:5b:4a:f5:fa:b6:2c:b1:63:db:dc:8e:be:e3:5a:
         15:f7:46:ae:19:11:ef:29:2b:96:04:79:9e:31:ac:04:01:70:
         05:70:26:91:28:1a:56:91:55:a7:91:a6:a4:1d:6f:cb:05:b3:
         25:14:82:b4:2f:1f:39:7b:14:70:ac:15:c8:00:4b:d2:5c:14:
         ae:c9:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----