Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File:                     orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier:          ZtCe+Bzf1Mitbn7MoeyXdzzAe1C6MsI1WMTnS2CRjFM=
Subject key identifier:   64:CF:29:35:52:83:2F:8F:B3:44:51:FE:AE:D6:2E:D9:3F:78:F3:94
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer:       /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial:       01962E997F44177B53B317206857A8818F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number:          028A
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: 8pdGTQGJ1/nbtWTnfVJdI20fguViWgdjZsaw+Lxd70Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7f:44:17:7b:53:b3:17:20:68:57:a8:81:8f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=64cf293552832f8fb34451feaed62ed93f78f394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:16:d2:b2:66:c7:51:40:78:75:02:68:cf:
                    5f:c3:ba:d0:46:a2:80:49:74:0e:d9:94:3d:6a:b0:
                    9f:90:c6:af:93:c7:4f:b5:74:aa:e0:a4:7f:04:c3:
                    70:b8:af:90:e1:4c:da:2e:d7:98:e2:42:af:9c:49:
                    dd:b7:eb:ab:38:fe:34:97:1e:41:0b:8d:92:49:bd:
                    6e:48:3a:d2:02:8c:b3:79:99:0f:90:24:3f:47:f7:
                    f6:02:d8:9b:84:14:6f:e0:f1:e1:74:18:8a:56:20:
                    90:d6:e6:da:ee:59:cd:a2:83:ae:2e:bc:de:7d:ea:
                    94:cc:89:7f:93:b9:dc:57:d7:93:1d:4c:7f:ab:94:
                    17:46:72:9e:fa:ed:ee:21:ce:e8:4f:6b:a1:fd:fb:
                    a5:1c:1f:b3:be:62:d8:86:64:99:8f:8e:55:84:48:
                    45:51:c4:8e:33:00:be:77:3e:f5:91:22:9a:fc:f2:
                    fc:a6:d1:d6:02:73:88:be:d0:29:17:87:99:15:62:
                    d4:a1:87:cd:21:d5:dc:cc:aa:f4:91:60:a0:1c:93:
                    ba:dd:c6:1c:2f:49:c7:92:99:ed:2e:0e:a2:4e:55:
                    a7:95:a6:89:07:d8:a8:fc:00:ca:2e:be:68:8c:ca:
                    45:03:84:1f:bb:d5:51:85:3e:bc:69:ee:39:89:13:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CF:29:35:52:83:2F:8F:B3:44:51:FE:AE:D6:2E:D9:3F:78:F3:94
            X509v3 Authority Key Identifier:
                keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:22:3b:53:b3:7a:0d:79:fa:5a:54:67:12:0a:50:54:27:
         4e:64:9c:33:6c:b1:42:11:d7:bf:bb:6a:f7:20:69:af:d5:e7:
         b2:6c:b5:08:ba:cc:f1:8b:05:de:7a:18:fe:c9:c0:5e:48:e8:
         75:89:df:17:7e:cf:5a:e3:6d:94:f3:ff:bd:13:ed:76:87:e5:
         4e:4d:c9:77:70:a1:8e:7c:6d:5d:72:22:a1:a6:b3:72:89:94:
         41:be:cd:a6:85:f5:fd:55:c1:52:18:87:1f:f5:7c:89:5d:8e:
         33:da:2f:2a:d8:9f:b9:c6:3f:a0:91:9d:38:c8:d8:57:74:e9:
         ca:e4:31:63:e6:f7:80:c5:7a:ca:36:a9:f0:e8:ac:ea:7c:b9:
         56:64:4e:f8:50:58:6e:39:bf:3c:08:b3:ff:90:c7:40:6a:9e:
         03:a4:a0:62:9c:43:fe:0c:6e:5c:02:4e:ea:0f:bf:0c:9c:db:
         2a:e3:81:0f:22:aa:f7:21:6a:36:e8:4f:1a:59:aa:0e:38:32:
         d8:66:02:aa:c5:f1:e8:02:60:e8:2c:11:2e:c4:19:cf:48:50:
         c4:6f:35:e7:6d:6f:71:00:78:b4:f2:1c:2a:c1:ce:dc:a3:32:
         d7:ac:21:4a:fb:8b:88:d2:00:09:70:29:c7:bc:75:eb:fd:ce:
         f2:63:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----