Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File:                     oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier:          a4prHRYkdo8P3Tf6pEN+PHsFHXkvMXG2+u55K+2ECMQ=
Subject key identifier:   F7:CB:60:E7:61:C1:63:AF:6B:D6:87:66:AE:D1:D2:7D:36:76:81:A1
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer:       /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial:       01962FAB9ABC84D67B434BFC7F127AF1A296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: m50G2xjf4eko7b4H4T04QnFfNVk.roa (hash: GGKv2wzF1TvAhDLfkaO5+AkkZcueQ+luEbM0QfwqNgs=)
                          2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: ARpn/AE2YfH5sy1XBkrU37wj0KJyo4qOBZiHgp9jbPQ=)
                          3: sU9Gf8xtIizGCx3n2mNvIY0L-S4.roa (hash: 9lLK6NJxBVPn0bXzjcavrpReTIaQOByvwj845Zkopcs=)
                          4: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9a:bc:84:d6:7b:43:4b:fc:7f:12:7a:f1:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=f7cb60e761c163af6bd68766aed1d27d367681a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:01:89:d4:70:3c:f2:1c:bd:46:c4:f4:5d:
                    55:50:cd:f7:41:52:de:9a:de:cd:f5:55:21:b0:b6:
                    46:81:76:85:d3:09:c4:b4:b4:98:da:05:42:87:8a:
                    bf:f6:09:ba:89:7a:66:01:09:f2:71:f0:e8:23:3e:
                    a5:9c:53:d7:86:46:ee:19:b1:01:21:8c:4d:43:6e:
                    d1:0c:82:77:ec:e6:9c:19:87:0c:16:6d:74:b5:1c:
                    b6:71:8c:e4:4b:fe:70:dc:86:3c:f8:da:b1:fd:61:
                    64:1b:1b:35:af:53:66:f6:6f:22:68:03:81:d4:9a:
                    3a:14:a2:0e:16:6a:d1:3a:3f:7a:78:c1:63:fa:36:
                    7c:52:c3:fa:13:99:6b:bc:c7:b7:3d:a1:51:29:4c:
                    71:dd:fd:71:71:4a:42:16:ea:ad:bd:46:32:52:b8:
                    3b:fb:1e:53:b1:41:ef:98:78:cf:4d:70:e9:5f:ab:
                    06:b7:b4:1d:aa:5a:7a:1d:69:d9:9b:f8:c7:35:c7:
                    fc:89:c8:6d:4d:8d:f0:4f:98:5b:21:09:59:ae:a5:
                    a8:17:02:a3:cb:c3:17:70:49:2b:57:b0:54:30:c5:
                    64:c2:1f:c4:e3:71:1d:ca:3b:22:10:f7:79:45:6d:
                    13:4c:91:c2:6d:59:f3:23:54:6b:f3:4f:82:60:28:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CB:60:E7:61:C1:63:AF:6B:D6:87:66:AE:D1:D2:7D:36:76:81:A1
            X509v3 Authority Key Identifier:
                keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:df:c9:10:38:87:94:66:da:65:4f:b0:54:a7:c5:7a:52:
         56:da:72:0f:ea:9d:e6:5c:0c:18:7d:65:ce:0e:28:f3:8e:32:
         2f:d2:22:b8:32:fa:af:d3:21:63:d3:8f:51:68:fc:8d:ab:76:
         46:d8:35:19:7d:ab:32:1d:c9:0a:3d:2c:69:5f:fa:d0:c5:79:
         f2:d0:77:e6:46:8b:eb:d7:d3:31:a2:32:eb:e6:1e:d5:f5:98:
         07:1e:5e:12:03:7a:d1:da:b5:cd:5e:bc:4f:fd:06:95:4f:60:
         66:ea:73:41:a4:3d:e1:ae:af:99:f3:a9:f4:1a:31:cb:69:27:
         2c:64:2f:04:18:71:9a:6a:f2:27:f6:fb:e7:92:81:3f:b3:aa:
         a0:c2:f7:5a:2f:dd:cd:0b:04:e8:db:bb:9e:bb:78:e2:d3:fa:
         1d:9d:b9:72:a3:ee:7a:ba:04:0e:c5:b4:a1:09:dd:3d:79:31:
         2f:f5:ae:3a:08:7b:74:a1:03:f0:6d:83:16:b9:a7:00:7f:2f:
         5d:43:f4:d4:c7:e0:55:d5:46:b3:5f:f0:24:2a:65:e4:c6:b2:
         b5:5a:81:87:74:db:4c:ef:95:58:e2:26:c2:72:9f:dd:c8:5b:
         a6:cc:d7:a1:48:57:3f:85:0d:c7:b7:9e:af:41:ae:ae:fa:8d:
         f7:8e:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----