Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File:                     osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier:          /v66k6+1nx1OGXQdyGhE64cH0qT34u+OGW8kgRu6tWc=
Subject key identifier:   AD:B3:24:E2:84:59:4A:5F:F6:3A:75:BB:6E:83:10:C9:10:27:BB:3C
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer:       /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial:       01962E2AD0F3A8C36016C13D353CC9BAD694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number:          0CDB
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
                          2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: dBPs2/hEZMSmGF6TMCwNQ9XoIHsYX13WHsN6bAvXbFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:f3:a8:c3:60:16:c1:3d:35:3c:c9:ba:d6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=adb324e284594a5ff63a75bb6e8310c91027bb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:a2:24:0b:df:dc:cd:5f:c9:81:c2:1b:84:
                    f4:56:fe:9c:41:1f:80:fa:8a:ac:ed:e8:cb:7b:7b:
                    01:48:46:88:fa:f8:23:ca:e5:fc:65:39:d5:43:b2:
                    d3:a9:ba:93:b3:81:c1:df:3c:d1:d5:3e:fd:44:c3:
                    cb:86:50:14:2e:93:5b:b4:3d:e4:32:a7:43:24:9b:
                    cc:31:d5:b0:33:74:f7:94:5f:a1:f5:82:61:29:1c:
                    15:6a:59:55:44:4a:09:5f:16:ce:b4:f9:86:18:b5:
                    b3:70:67:4c:b8:b1:a8:0e:e6:d5:ef:0f:54:5b:df:
                    1c:90:a4:b2:cb:26:82:0a:96:78:0f:a5:31:10:a3:
                    b3:bf:f2:cc:32:cc:2a:0a:5b:3a:f4:b6:0d:f2:8c:
                    e4:77:65:6f:d8:ad:a2:b7:ee:65:3c:24:d1:60:ab:
                    2d:b3:9c:81:1a:c7:d6:7f:26:90:d8:c8:7d:34:6e:
                    dd:cc:f0:e4:f0:f6:80:12:6b:75:1f:69:32:11:5a:
                    dd:f8:4f:80:d7:ee:b8:10:4b:8b:a4:82:ce:67:d6:
                    cb:fc:82:ca:96:e7:0a:7f:b5:8d:e4:6d:ca:8e:68:
                    25:8b:4a:bc:c9:a0:09:1b:f1:19:d2:dc:a9:80:57:
                    84:a0:79:d8:39:13:9f:2b:e2:55:db:92:8a:31:fc:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:24:E2:84:59:4A:5F:F6:3A:75:BB:6E:83:10:C9:10:27:BB:3C
            X509v3 Authority Key Identifier:
                keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:87:8a:e1:94:1d:96:0a:92:a8:fb:7c:6f:05:70:4d:93:
         4b:2c:cb:c6:89:1d:1f:70:cf:a8:b7:44:8d:36:34:cf:ef:e0:
         26:3d:f5:54:3f:ce:db:a5:49:0d:88:cf:a9:e9:9c:3c:d6:10:
         06:09:fd:bb:9a:bf:92:ed:3d:03:bf:49:02:d5:2c:73:6c:75:
         30:50:97:9e:4c:38:ef:12:1b:c3:47:4f:4f:d6:0b:2f:66:4e:
         4d:85:6e:e1:40:42:8a:98:76:fe:9f:e2:0a:33:6f:16:60:87:
         a3:b3:a0:e5:01:6b:55:eb:aa:f5:6f:ca:61:00:65:37:39:5d:
         69:f1:a8:82:0e:e2:f5:19:5a:eb:86:5f:e7:5a:19:da:79:0b:
         d3:5e:0e:72:1c:90:17:88:82:70:ec:00:9b:e7:42:5c:92:1e:
         ee:bf:d8:1a:08:d7:24:ba:b7:01:d7:f9:fc:ef:95:0d:0e:22:
         86:c7:e6:a0:6c:68:e9:4c:c8:6c:c5:59:91:f7:ef:5f:ff:f0:
         32:48:2b:c5:83:d2:da:52:70:a6:1d:f2:78:76:0c:71:2e:e3:
         d8:45:ee:34:6c:68:c4:1b:ee:39:3c:52:56:9e:73:f2:a8:6f:
         b9:97:36:7b:64:98:40:86:f4:49:82:d3:bf:cf:1b:fa:2e:70:
         c0:29:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----