Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File:                     OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier:          LbsNNAXGM1miUvyR8Qy3r/v3b07blmyDiap3CGxLLeQ=
Subject key identifier:   84:18:58:E7:62:E0:F8:41:9E:BD:69:82:30:E9:0D:CA:A1:AC:55:68
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer:       /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial:       01962FABA28246AF8872462C9A404683007B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number:          0C6D
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: f9ipx+fPyNzKMi5fipnl7bX+a+KhsZSS/ZaImh+5DpE=)
                          2: m3UPJQ_Zh7wapyw5537rzzPo3os.roa (hash: EUy+4/7WXUAZtQJhe/6fh4vD4Ks9aUtYKkwAIbRuQrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a2:82:46:af:88:72:46:2c:9a:40:46:83:00:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=841858e762e0f8419ebd698230e90dcaa1ac5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:62:30:47:30:1d:60:6a:f0:a7:a1:64:fc:
                    e6:02:35:99:35:87:b4:62:33:0d:e4:42:7e:a1:11:
                    2d:ab:c2:05:1a:9d:8f:ed:b7:aa:80:6a:24:a7:27:
                    a9:f8:c0:7d:1f:2d:d1:76:4d:52:f2:ac:3c:7c:2b:
                    f9:bb:f7:43:78:fe:65:58:f7:b2:e7:ff:b5:a4:90:
                    e8:57:e3:52:af:81:56:59:52:42:0c:08:52:08:b5:
                    ba:90:64:82:ca:69:df:6e:44:9c:2c:15:52:d0:a5:
                    10:e6:83:8b:46:bf:b3:f0:ab:b3:46:94:00:29:df:
                    6d:46:6f:30:8d:02:12:76:7b:75:4d:32:06:db:8b:
                    24:24:a8:0a:99:9f:e0:93:57:a6:d5:1b:74:68:b6:
                    b2:d9:f5:a6:5d:58:a7:ad:30:00:5f:c6:f4:bf:a0:
                    6c:79:1b:be:91:a3:c2:71:73:fb:37:63:86:3c:8d:
                    80:be:cd:bc:17:22:be:a4:bd:7d:f7:69:55:ce:2d:
                    2c:26:af:a7:3b:28:59:d9:9d:1e:dd:8b:9b:c2:0f:
                    66:80:41:a5:cb:04:73:7d:de:34:19:a1:89:b5:4d:
                    a7:2f:8c:27:c1:7c:f6:e9:d4:28:78:a5:ab:8a:22:
                    a7:4d:d6:fc:9a:82:1d:af:f2:e7:b6:02:27:79:a3:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:58:E7:62:E0:F8:41:9E:BD:69:82:30:E9:0D:CA:A1:AC:55:68
            X509v3 Authority Key Identifier:
                keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3d:bf:e7:40:ba:c2:6a:9b:67:cd:a7:59:16:03:6b:19:db:
         f5:4f:99:bc:6c:de:c2:f6:85:c4:9b:c9:2e:24:3f:33:74:a1:
         7c:b6:0e:50:f6:a5:f3:21:78:db:e7:f7:d2:f9:16:9b:d9:67:
         f0:e4:90:d1:01:05:b2:50:96:6d:54:af:75:37:4c:ec:e2:b4:
         63:da:55:bf:46:d2:bf:c0:16:14:bb:6e:95:e2:84:0f:69:6f:
         e8:e4:77:6f:8d:79:e5:7c:d0:d0:2d:36:2e:08:6f:e8:07:4a:
         96:a2:8a:a4:0b:05:eb:66:1a:56:9d:a2:b0:cf:c0:d5:ff:2a:
         53:47:db:6a:9d:7d:2b:1d:4c:bb:78:7e:df:22:02:98:34:37:
         8f:5d:c6:f9:9f:f3:8b:84:c9:82:34:45:6b:79:3c:a7:59:21:
         cf:70:17:0d:50:22:2c:ce:11:03:76:12:fc:a0:9d:3a:23:a1:
         17:b0:da:76:50:59:9d:49:58:50:d6:bb:1c:76:ab:fb:b4:fd:
         8b:56:8c:d0:e6:12:72:44:5d:5b:79:66:49:58:9b:54:8d:f8:
         be:78:75:40:0d:66:f1:11:f0:f4:49:31:8f:f1:12:7c:e3:f2:
         ff:08:db:83:53:0a:7e:a7:fc:d8:0b:e4:c5:4c:3e:47:31:70:
         a1:f4:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----