Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File:                     9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier:          mjVFl6NmhEEYoiD95o1fN3S/5S9TDpwG5+eGf4zzqyU=
Subject key identifier:   ED:CE:A0:27:C1:26:CE:6F:5E:42:C2:E7:48:9C:BB:01:29:71:66:80
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer:       /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial:       01962F74189A242C61FF2A919D0ECD2DA32A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number:          13E7
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
                          2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: 8avTCxS9SYonBXD/ePFSm3CkiUkEEiOVWLjgb7QtGnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:18:9a:24:2c:61:ff:2a:91:9d:0e:cd:2d:a3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=edcea027c126ce6f5e42c2e7489cbb0129716680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:7d:24:83:1c:f8:7b:04:26:73:75:bb:d9:
                    a9:79:85:ac:17:d9:b8:42:9d:2e:73:61:33:15:31:
                    7f:a5:e3:09:a2:0f:85:bd:74:81:66:72:4b:8e:c6:
                    1c:f7:ee:39:c1:8d:0b:81:7b:af:b6:14:58:a3:4b:
                    de:e8:62:a7:5f:c5:0a:cc:8c:56:be:23:10:69:1e:
                    87:62:bb:3e:11:9b:cc:ed:76:7c:54:5d:c9:58:a1:
                    c9:85:b3:9a:00:a0:5f:56:33:ba:56:76:1c:4e:12:
                    e8:f5:e9:a9:99:99:0d:a3:3d:d8:d3:28:dd:d1:b1:
                    d1:2e:c9:7e:01:bb:33:f3:56:7d:84:0f:ef:93:a9:
                    18:8b:ae:9e:1d:23:40:5f:03:58:d2:19:ed:a4:cc:
                    7f:c8:80:39:64:fc:84:06:ab:3f:db:2b:ff:6e:c1:
                    1e:fa:c0:74:1a:86:64:b0:37:8a:61:26:3f:ed:d5:
                    68:7e:e7:45:36:fa:6c:eb:6a:37:83:05:63:e1:a5:
                    39:a7:0c:8d:33:8c:f2:a6:be:06:dd:3a:74:3f:16:
                    63:c0:3b:e0:bc:5c:6a:98:a5:50:43:62:7d:e3:86:
                    df:b0:ed:b9:53:42:71:4a:9e:42:1d:bf:9e:69:a3:
                    a2:e8:c3:78:17:89:35:83:6a:15:6b:01:13:63:f1:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CE:A0:27:C1:26:CE:6F:5E:42:C2:E7:48:9C:BB:01:29:71:66:80
            X509v3 Authority Key Identifier:
                keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:35:12:c9:65:bf:7b:ae:07:d7:fc:78:cc:21:7f:90:a3:9e:
         e2:79:37:b1:31:89:6e:2e:d3:95:28:2e:56:ea:b9:b0:31:ae:
         2c:93:33:4c:ea:e8:69:a8:8b:a4:c9:64:fe:c4:1d:9e:73:64:
         b3:fe:d7:01:f8:6e:33:65:89:64:72:30:3b:aa:17:c3:bc:98:
         00:4c:b9:57:2b:b9:b9:dc:75:86:2c:57:9f:d7:ad:f4:2f:db:
         d8:0c:a6:ed:f7:4a:6c:ef:26:3a:da:cc:ff:cd:cb:70:ad:b6:
         ce:a1:12:26:67:e4:4e:bc:c6:eb:b7:73:99:64:e7:82:d5:66:
         b1:cd:2e:f9:d8:e5:2e:fe:50:91:14:0d:64:f6:7a:6c:92:f1:
         c4:59:ef:95:0d:7e:99:82:3a:fe:85:3c:dc:f4:fd:f2:ee:b6:
         4b:37:2f:20:65:a0:f6:c3:d4:8f:34:b0:ea:c2:40:e9:d9:99:
         15:03:02:b4:3c:84:21:41:9e:bb:98:77:a3:12:f1:5e:36:e0:
         34:e6:42:fb:7a:09:e3:3d:1e:d5:39:fa:b7:be:6c:9d:5e:66:
         79:7b:ad:04:0c:0c:2e:43:59:a5:af:08:0a:78:31:d3:71:e6:
         44:dd:51:32:8e:1a:b3:a9:d5:0f:fc:b8:12:d5:54:fb:93:2b:
         c6:04:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----