Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File:                     Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier:          DVYez5IVugaUdQbyCk/9w8KNwmDDDUVMrzV98eIAkac=
Subject key identifier:   A1:54:C2:B2:40:04:8F:15:9A:95:6D:A7:21:C1:79:60:5F:76:1F:C0
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer:       /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial:       01962F3D84DE2A23B300C323D870D2E24706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number:          0A0E
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: N9ij656DMbzSpExXPZ7SWi96OeTuccvK/zxKmKVcSZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:84:de:2a:23:b3:00:c3:23:d8:70:d2:e2:47:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=a154c2b240048f159a956da721c179605f761fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:61:ed:51:77:d1:2b:d6:15:20:d8:70:16:
                    04:53:1f:d3:8c:12:f3:f9:e2:d8:7d:ef:34:42:ac:
                    a9:4f:33:68:7a:f0:cc:78:fb:65:2d:ef:b5:33:39:
                    fc:cc:0d:3f:38:d2:3c:9f:02:a1:88:49:95:d9:c6:
                    c8:02:ff:c8:b7:a3:bd:ee:02:3b:5d:fe:61:5f:17:
                    39:59:94:b7:ca:c8:a0:a1:e1:a8:c9:08:35:fb:55:
                    fa:fc:6c:ce:19:48:5f:c8:5e:17:b2:37:af:66:88:
                    3f:82:22:57:1b:ee:eb:40:fb:20:3f:e2:9a:86:2c:
                    81:75:fc:f7:e0:be:19:1e:ac:af:b5:fe:1a:6f:1d:
                    fa:a8:95:5f:90:b6:ae:6b:ea:3c:b1:70:8b:7f:65:
                    a5:31:55:3c:fc:77:99:60:1d:8a:18:d3:4d:82:9d:
                    5e:00:7a:a1:ce:3b:08:84:3c:93:27:79:60:ca:6a:
                    24:43:60:a1:8e:03:1e:05:23:4b:50:45:30:20:7e:
                    24:ea:af:00:9c:47:4d:c6:b3:ff:8e:bb:5b:93:5d:
                    3a:9e:47:40:c3:8e:a4:8f:1d:1b:40:05:2f:0e:bd:
                    76:48:fb:89:8c:83:3f:30:2a:8c:16:d0:46:44:7f:
                    ad:2b:63:b7:7a:6c:2c:6d:c7:51:3c:bf:1a:8d:2e:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:C2:B2:40:04:8F:15:9A:95:6D:A7:21:C1:79:60:5F:76:1F:C0
            X509v3 Authority Key Identifier:
                keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:fd:28:28:cf:5c:c3:70:6b:41:61:e6:2f:3d:39:87:a4:
         b1:1a:da:f7:b3:6c:18:50:39:98:70:fa:b3:fd:29:ce:61:04:
         49:65:57:12:6e:90:8c:58:0b:eb:09:4b:71:85:a2:d6:70:76:
         16:12:d5:21:ed:04:44:a8:0a:f7:2d:67:a5:47:2e:8b:14:90:
         80:64:88:ca:ae:8e:84:bf:9e:df:a9:2d:c4:c2:51:77:0a:67:
         87:de:3a:24:d2:78:a2:a7:26:4f:8e:c3:fe:52:72:68:9f:0d:
         e8:8c:b8:18:63:0a:4e:57:20:df:4a:f8:22:b1:5e:73:47:c2:
         1a:48:cf:37:c3:97:e7:76:3c:74:72:50:85:72:a6:df:ff:c0:
         a6:17:60:cd:5b:c4:a9:91:e7:a8:7c:b3:af:58:70:28:ee:55:
         68:bd:91:57:cc:41:3c:a0:8d:08:b0:51:cf:08:fe:74:72:32:
         0b:5e:d2:2e:7e:5f:4b:38:c3:b6:2a:e4:d3:9c:e1:28:fb:1b:
         00:ab:d3:04:3d:40:49:27:2b:fd:a3:27:d1:e9:48:4b:b5:aa:
         4c:56:00:16:90:63:b4:1f:6e:bb:9e:97:31:4e:5d:73:5e:af:
         44:d9:44:3e:62:53:ec:2f:4f:d3:3e:44:a6:7b:e0:fb:0b:d9:
         da:2f:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----