Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File:                     OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier:          cXsADYH5u0knreRxAwmSQjrb//Vy10B2R+xP3l8wtzQ=
Subject key identifier:   32:38:FB:CA:D7:B5:44:54:87:1C:30:2E:C6:67:B4:E5:CF:98:2C:16
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer:       /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial:       01962DF3B71620AB39322A75E2B324EE9DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: 5yIdrwXb8Hwo7l9QgPL/ISngH9qCOWqSq/9zKMkkOl4=)
                          2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b7:16:20:ab:39:32:2a:75:e2:b3:24:ee:9d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=3238fbcad7b54454871c302ec667b4e5cf982c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:8e:c3:14:9e:3b:6b:21:2c:eb:e3:99:c1:
                    9e:7d:40:68:1f:8b:e5:25:22:f5:ab:f1:fe:23:fc:
                    42:62:9b:69:4a:b5:14:5a:59:f7:d3:13:7f:3b:78:
                    41:e6:51:e6:7b:15:78:00:bd:2c:60:a8:10:55:36:
                    6d:54:68:f0:38:fa:78:53:a1:c2:5e:5c:a7:b2:e4:
                    d0:ef:58:4c:21:c1:6b:fb:24:78:be:5a:28:d0:f9:
                    a0:60:f3:e4:9f:99:26:f5:3d:93:37:76:05:6d:5d:
                    c7:13:65:58:ad:aa:3f:8c:76:ff:66:e4:42:ec:bd:
                    c1:c2:48:19:28:6c:c4:3f:d3:94:f8:ca:9b:9a:b6:
                    19:16:f7:6c:53:6d:98:6d:23:3e:73:1d:3f:28:be:
                    fb:08:6b:6e:d2:d6:32:60:d7:e8:9c:45:25:04:e7:
                    79:62:f4:56:72:8a:39:4f:39:45:2e:68:43:e0:3f:
                    39:a8:fd:37:a5:42:8a:2f:ea:f1:97:e2:8e:68:d2:
                    9a:10:37:bf:b3:5d:00:73:66:1e:7e:2f:ea:20:1b:
                    c8:92:69:92:05:0d:cb:bc:50:52:06:86:05:3d:a3:
                    b1:79:b4:cf:af:48:66:5c:fa:c0:02:62:18:66:40:
                    dc:e9:08:d4:f4:e8:88:fc:93:9c:66:33:df:38:8c:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:FB:CA:D7:B5:44:54:87:1C:30:2E:C6:67:B4:E5:CF:98:2C:16
            X509v3 Authority Key Identifier:
                keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9f:e9:9a:80:38:77:6b:42:cd:76:c2:7b:d3:99:94:ec:e4:
         d5:64:9e:d1:d6:8b:81:e1:9c:9d:e5:5a:cb:5d:65:e7:3c:c0:
         f0:b8:a8:72:43:c7:30:ec:dc:d0:9f:11:87:2b:a1:d5:73:5f:
         78:e8:e6:2a:b8:2d:44:71:cc:f1:2e:b7:20:b5:1f:b1:46:27:
         79:2c:04:65:bf:90:06:2f:99:2f:79:94:75:65:65:7a:a3:a4:
         64:7f:da:28:39:1d:35:19:07:75:7b:b0:84:00:06:4c:76:a9:
         64:b9:13:33:31:1b:89:2c:d1:c7:01:ab:d3:49:c5:d2:5d:4a:
         87:e3:a7:36:6a:92:57:21:2a:28:39:2d:b9:f6:2b:12:ba:a5:
         08:38:08:4c:79:7d:df:d2:b0:0a:77:3b:9e:d8:79:f9:de:6a:
         fb:69:7d:30:a5:73:80:c3:d2:08:d1:0a:95:8b:3c:ae:48:41:
         80:45:7b:0a:da:34:4c:dc:89:fb:24:51:31:cb:56:dd:4e:2a:
         ca:41:ec:55:43:8e:87:88:c2:d3:20:c8:d1:45:37:f9:66:36:
         cb:1d:a3:19:e2:0d:bc:07:56:17:7e:0e:96:05:91:67:75:20:
         9d:02:a8:d4:e3:8d:3e:bd:61:72:12:6f:0c:83:47:c0:bb:da:
         0b:01:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----