Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          ZTXtWKtyHwNJ2esw5ORI5Kl7X2KfXQG5nsuXLL7GA2M=
Subject key identifier:   7E:04:56:C1:AE:CE:B0:7F:8B:8A:8C:E3:1C:FB:6E:99:9D:E3:84:D9
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       01962F7440F139D908D5C408A2446CF237EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
                          2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
                          3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
                          4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
                          5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
                          6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
                          7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: HQO+9gKtBrr20/AhlWB2kjq9Z5jE6thOI/9iTgQzkgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:f1:39:d9:08:d5:c4:08:a2:44:6c:f2:37:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=7e0456c1aeceb07f8b8a8ce31cfb6e999de384d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:6a:69:c6:ef:8f:b2:b9:ad:4a:31:15:4d:
                    4a:ad:66:45:56:70:bd:7d:e9:b8:d9:09:03:f4:05:
                    60:5c:7a:b1:65:3a:4f:d3:d4:d8:a5:d9:bb:01:2c:
                    77:72:3a:4b:03:8b:80:f0:1f:86:23:59:89:76:7f:
                    dd:6b:d5:1b:76:ec:1f:42:1c:ae:2b:9e:3e:52:86:
                    40:e7:2d:c2:25:30:d0:67:31:67:cf:ae:f1:a8:e7:
                    31:95:2c:f8:fa:99:5b:85:35:75:8f:fd:f2:27:4e:
                    c7:59:76:3c:7e:cf:37:3f:90:97:b4:f0:b6:f6:7c:
                    0b:a2:94:5b:fc:23:86:c9:62:e1:7a:0d:e4:d8:45:
                    17:46:bc:65:38:d4:9c:9a:3f:66:98:c3:13:0a:dc:
                    0d:e8:f4:59:b0:f5:72:1b:0a:63:39:20:5c:73:d4:
                    ab:a0:54:6f:33:05:42:8f:f4:e3:10:ac:ad:56:24:
                    be:d0:1e:3f:bb:c9:e0:77:ef:de:2d:c9:f6:73:2f:
                    a5:89:df:de:6f:b7:86:5f:68:22:32:2f:5f:6a:95:
                    d5:8b:6c:cf:ef:39:4e:35:a4:9a:62:49:52:7e:92:
                    2e:34:5c:8a:2f:88:ea:f1:9f:ba:20:12:f8:c6:e5:
                    5c:6b:91:17:e7:4d:0a:2f:ab:68:90:3a:81:36:a4:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:56:C1:AE:CE:B0:7F:8B:8A:8C:E3:1C:FB:6E:99:9D:E3:84:D9
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:04:8d:71:48:8f:13:d3:41:f1:6b:08:64:53:9d:2a:45:
         ae:cf:f9:3e:85:aa:13:45:30:7f:cf:d9:1a:3a:c0:e3:46:74:
         b9:d5:ca:36:ba:9c:85:07:28:81:c7:a7:91:cd:8f:e1:62:21:
         b5:52:48:e3:91:bb:d5:44:d3:2e:07:bf:02:a6:4f:f3:81:fd:
         8f:b1:00:e4:65:f4:b6:fc:5a:1c:77:4b:45:60:fd:3d:61:b8:
         14:9c:2c:4b:ca:13:38:75:d6:3a:5b:da:5b:4b:e9:6b:09:52:
         3e:2e:71:03:6f:20:f0:14:40:4e:ed:cf:d4:fc:3d:a8:c8:0a:
         5e:07:a2:5d:7e:bb:55:34:cd:b2:ee:69:ed:74:93:be:23:e6:
         44:67:fa:8f:e5:5c:1b:9b:3e:85:89:95:f3:bf:b1:b8:da:46:
         73:56:66:7a:e7:69:c1:19:1e:e2:79:d9:09:01:d4:f7:da:af:
         31:3b:60:82:21:28:48:74:5a:20:73:04:43:80:a6:b0:77:76:
         2f:26:cd:ef:46:e1:e7:bf:97:9a:75:a9:c8:29:f3:ac:57:d8:
         cf:3a:3c:0a:34:99:4a:7c:c6:cf:bb:fd:18:6b:9a:17:78:6f:
         55:c7:75:85:b6:b2:b5:79:fd:93:a0:78:6c:41:27:34:6e:2c:
         de:11:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----