Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File:                     ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier:          f9cwMbDGMPIqKm9OuvOvLsR0n64uhF1UhdQm9KVxiQk=
Subject key identifier:   DA:D2:08:DE:40:D1:93:27:D7:A6:F1:84:03:C6:28:CF:89:75:94:16
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer:       /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial:       01962FAB67DF240B84CAF9AE2DED877CF4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number:          04A3
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
                          2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: Ud6kOhOmCALIJFcsICVxMa/lB1le1TARNOGPfiobzaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:67:df:24:0b:84:ca:f9:ae:2d:ed:87:7c:f4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=dad208de40d19327d7a6f18403c628cf89759416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:ec:a0:d3:d8:07:a9:a1:3b:77:9a:5c:39:
                    b0:99:da:f6:05:86:19:e4:91:67:fe:8c:a2:c8:c0:
                    42:89:bd:23:4f:e8:9e:0e:ad:80:fa:17:f0:d6:e5:
                    ce:b4:56:1c:79:45:f1:e0:89:20:23:e6:f6:83:36:
                    35:b4:96:69:04:cc:b6:46:f4:cc:19:5b:c5:5d:7a:
                    43:ef:16:24:24:7a:3e:c0:4d:08:56:9e:d6:2c:15:
                    ef:56:ad:fb:a9:00:73:cf:95:de:e8:72:bc:b8:84:
                    a7:2e:af:30:ec:dd:c0:04:59:06:15:af:2c:1a:ce:
                    59:57:0c:32:86:7e:e2:f6:db:29:69:d0:40:fc:24:
                    cb:58:20:c1:1f:9d:e2:8c:7e:54:e6:f9:08:35:07:
                    35:cd:95:bb:f9:58:5a:fd:d3:ba:cf:3e:1f:81:73:
                    e2:89:40:e4:cf:a9:41:88:38:4d:8c:5c:f3:90:69:
                    d6:f1:ec:89:9c:02:5a:b6:7b:8d:50:cb:7b:d3:af:
                    d7:63:46:15:48:8d:ab:68:da:f8:6f:b9:9e:50:d6:
                    ce:b7:07:ea:ea:80:bb:7d:32:f3:27:92:23:cf:e8:
                    70:b3:b6:b1:a4:15:40:a8:c9:13:1f:cb:1e:94:c4:
                    2e:07:fd:4f:28:8a:03:c7:63:83:42:c0:72:b0:06:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:08:DE:40:D1:93:27:D7:A6:F1:84:03:C6:28:CF:89:75:94:16
            X509v3 Authority Key Identifier:
                keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:09:ea:62:0a:8f:7f:d9:2a:c5:96:47:d8:4a:5c:fe:0c:f3:
         c0:55:d7:1b:8e:d5:6e:23:38:e0:b4:52:43:9f:72:fb:56:ee:
         0b:c6:fe:fb:b0:f5:01:95:48:e7:a0:5d:59:01:d1:48:e0:6a:
         bd:15:d2:dd:b2:56:b0:0f:1b:35:cc:1f:9d:b5:6a:38:86:bc:
         ea:25:dd:83:6e:44:24:e1:3b:82:76:1e:f9:b3:81:18:ae:97:
         59:0c:9f:7f:59:35:56:38:8a:c3:70:89:95:4d:2c:14:69:e2:
         49:bb:dc:c6:bf:b3:77:41:4a:67:df:8e:d5:62:2f:b5:56:7d:
         b5:d6:46:6d:0c:c6:4f:0b:35:77:05:4f:d2:97:29:23:7f:e4:
         42:79:24:5f:e4:b1:c8:e7:ed:27:fb:cc:4d:79:55:b9:22:f8:
         25:ae:3f:fe:6c:ec:02:27:72:5a:8e:d9:a0:74:25:ba:29:94:
         01:4c:b5:e7:02:ea:8d:8f:f7:26:8a:d3:4b:34:17:b3:93:a2:
         7a:a8:f5:b1:4f:8a:84:32:cc:23:13:bd:d3:ca:dc:70:1e:63:
         7e:41:23:9e:3a:c8:71:03:e3:b6:5d:3c:24:ee:98:94:9a:3b:
         b6:e7:8b:89:e6:07:64:99:81:f8:b6:dc:b6:61:81:a4:6a:d8:
         1c:94:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----