Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File:                     ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier:          FzukNDstHGhIr6VV7MKzLchjw4vnHtlq/wnDSQxzOA0=
Subject key identifier:   76:48:CF:10:7C:16:5F:5A:8D:3D:12:D0:87:CB:84:24:5E:4F:7F:C9
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer:       /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial:       01962F06D2C1295222D8C851A6328B7096C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number:          1111
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
                          2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: 7F4uLoL1SvRmRtv/iS/wXQshRf736NCgikqUIzFkh5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d2:c1:29:52:22:d8:c8:51:a6:32:8b:70:96:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=7648cf107c165f5a8d3d12d087cb84245e4f7fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:da:32:a4:d6:e2:94:35:41:f4:03:88:35:
                    df:30:e5:d6:2c:37:3c:f7:d4:b2:40:88:eb:22:43:
                    dc:a5:75:4a:ba:83:cd:d0:7c:9e:20:6f:19:fe:a4:
                    cd:a1:cc:44:2a:6f:93:a3:d4:37:6f:9e:0d:8f:1e:
                    54:45:b2:ee:cb:8b:9b:4a:69:f3:ae:1e:3c:da:2d:
                    37:31:4d:b7:42:f9:61:ab:80:47:02:72:d2:29:0a:
                    de:39:cf:1c:db:5a:40:0f:64:51:c0:fa:6c:12:22:
                    45:8b:a8:38:d1:ed:36:d5:8d:ff:b1:df:a3:ca:5f:
                    de:69:60:34:bd:7e:32:b7:f4:19:75:b1:df:93:a3:
                    cc:94:2e:1f:5c:75:68:82:68:6c:9d:e3:1d:50:84:
                    b6:a7:4c:55:ca:ab:c4:5f:d7:59:18:1e:c6:41:b0:
                    b5:41:c5:52:cf:6a:1d:ba:51:79:64:b7:7f:d1:86:
                    d4:71:7b:7e:45:ef:f1:cc:cc:5a:d5:04:c6:c1:32:
                    11:17:5a:91:37:4a:07:ad:a3:b2:d9:88:97:05:90:
                    51:15:54:d7:4d:c1:5d:2e:0b:05:c7:33:28:fa:3c:
                    65:59:97:8a:13:c1:7a:73:64:0c:b4:e8:9b:d3:69:
                    ac:aa:dd:b3:f4:46:fb:b2:e7:74:fb:d8:b9:c2:18:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:48:CF:10:7C:16:5F:5A:8D:3D:12:D0:87:CB:84:24:5E:4F:7F:C9
            X509v3 Authority Key Identifier:
                keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6d:c4:a8:9d:8c:a2:2d:e1:a6:3e:5b:2f:16:69:61:5f:4c:
         c5:9a:52:c3:5c:8c:f1:bc:3a:d5:a0:69:bf:15:ac:17:a9:a6:
         4b:6e:c2:54:61:80:e8:7d:86:0c:43:ba:b7:a2:59:3c:90:6e:
         df:49:0f:e5:1b:40:dc:a9:55:7a:97:91:c8:0d:44:ca:6a:5b:
         f7:a3:39:ae:9e:de:8d:ae:cc:e9:35:ff:2e:91:fc:25:68:db:
         41:57:4e:bf:26:e3:ca:4f:f4:45:55:28:ef:7e:99:0b:90:98:
         f0:bd:9c:57:35:04:e5:18:39:8a:38:e8:55:58:05:6c:d3:c3:
         d4:80:c0:c2:83:59:25:70:d0:0d:e8:cd:01:6a:23:d7:34:3a:
         01:8e:c1:5e:0c:c1:df:34:cc:7e:89:cc:71:83:81:86:d1:d6:
         84:4e:5f:b0:20:b2:cd:cd:8c:c2:b3:59:6d:1d:a8:61:e8:1b:
         d2:84:ee:21:3f:41:5d:de:4b:7e:cf:6e:b8:f6:78:37:d9:15:
         a0:01:42:6b:81:52:9c:7b:d4:60:c7:dd:0a:5d:01:41:3c:58:
         f2:af:97:d6:2d:77:7a:ca:ad:e8:8a:3b:e6:7d:b7:66:a8:8e:
         90:39:03:05:88:d0:3b:2c:d6:9e:18:33:c9:d6:d4:99:80:c4:
         30:a1:7d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtLBKVIi2MhRpjKLcJbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj
Yzg4ZDEwHhcNMjUwNDEzMTIwMTM4WhcNMjUwNDE0MTIwMTM4WjAzMTEwLwYDVQQD
Eyg3NjQ4Y2YxMDdjMTY1ZjVhOGQzZDEyZDA4N2NiODQyNDVlNGY3ZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz3aMqTW4pQ1QfQDiDXfMOXWLDc8
99SyQIjrIkPcpXVKuoPN0HyeIG8Z/qTNocxEKm+To9Q3b54Njx5URbLuy4ubSmnz
rh482i03MU23Qvlhq4BHAnLSKQreOc8c21pAD2RRwPpsEiJFi6g40e021Y3/sd+j
yl/eaWA0vX4yt/QZdbHfk6PMlC4fXHVogmhsneMdUIS2p0xVyqvEX9dZGB7GQbC1
QcVSz2odulF5ZLd/0YbUcXt+Re/xzMxa1QTGwTIRF1qRN0oHraOy2YiXBZBRFVTX
TcFdLgsFxzMo+jxlWZeKE8F6c2QMtOib02msqt2z9Eb7sud0+9i5whgb2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZIzxB8Fl9ajT0S0IfLhCReT3/JMB8GA1UdIwQY
MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt
ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5
LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm3EqJ2M
oi3hpj5bLxZpYV9MxZpSw1yM8bw61aBpvxWsF6mmS27CVGGA6H2GDEO6t6JZPJBu
30kP5RtA3KlVepeRyA1Eympb96M5rp7eja7M6TX/LpH8JWjbQVdOvybjyk/0RVUo
736ZC5CY8L2cVzUE5Rg5ijjoVVgFbNPD1IDAwoNZJXDQDejNAWoj1zQ6AY7BXgzB
3zTMfonMcYOBhtHWhE5fsCCyzc2MwrNZbR2oYegb0oTuIT9BXd5Lfs9uuPZ4N9kV
oAFCa4FSnHvUYMfdCl0BQTxY8q+X1i13esqt6Io75n23ZqiOkDkDBYjQOyzWnhgz
ydbUmYDEMKF9yw==
-----END CERTIFICATE-----