Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File:                     odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier:          WBIR4+OA6RkDiUg7zM5utpIMoVrJmm3hgJVLZe4sx6I=
Subject key identifier:   28:0A:7F:44:58:47:3E:2D:3E:24:E1:0F:3E:2C:3C:DE:50:CF:AA:4C
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer:       /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial:       01962F070608B54A593CB42F4AB0FF258E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number:          0936
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
                          2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: dRwvrLsFVjK62g5Qz5zepsGtTAffWUka+XN/BmfraS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:06:08:b5:4a:59:3c:b4:2f:4a:b0:ff:25:8e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=280a7f4458473e2d3e24e10f3e2c3cde50cfaa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:27:8d:95:e0:e4:ad:3b:5f:21:3a:25:32:
                    26:4f:7a:33:4a:0d:69:45:97:13:d6:c7:d6:c6:c0:
                    e2:92:48:d6:3f:2e:4f:30:a3:e2:cb:93:32:9d:80:
                    f2:04:0e:42:e1:e7:2a:71:57:fa:72:85:18:3f:fd:
                    a4:72:ed:82:09:39:15:8b:1d:19:7e:ba:fd:25:9a:
                    dd:25:d6:ce:5a:be:72:7f:8c:de:83:27:bc:79:89:
                    4e:ba:29:f2:29:85:12:0e:eb:b2:97:e2:44:89:dd:
                    56:53:1b:b1:45:5c:d3:07:02:b5:d8:40:18:28:8c:
                    13:ea:95:9b:2a:d6:d5:6b:a7:33:1c:c9:4b:af:eb:
                    02:c5:89:49:df:d6:f1:51:e0:01:43:31:2f:a0:e8:
                    a3:be:91:2c:88:dc:4d:e4:1c:25:69:ae:dc:42:2e:
                    17:64:94:9f:8b:b2:c0:af:e6:65:cb:7f:cd:0f:74:
                    ad:1c:2b:5e:66:a1:5a:ce:e9:23:df:38:6f:ad:b3:
                    9a:5d:7e:b8:e2:62:de:00:97:2e:50:55:a1:14:94:
                    81:69:d1:f6:bf:bc:f6:43:b7:b9:9d:11:cb:22:33:
                    be:85:c5:42:ca:7f:49:ec:0a:4b:07:99:50:33:23:
                    c8:a8:a3:07:a9:13:16:41:fa:6e:7f:3b:af:73:98:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:7F:44:58:47:3E:2D:3E:24:E1:0F:3E:2C:3C:DE:50:CF:AA:4C
            X509v3 Authority Key Identifier:
                keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:cb:0f:8e:af:a6:11:1b:f8:4e:03:55:95:da:7b:37:2a:a2:
         09:c2:ff:1b:91:8c:88:b2:a5:e1:1b:34:bf:50:cd:d2:a7:b3:
         e6:59:d5:f7:cc:a4:af:93:e2:2c:07:1e:22:0a:13:ed:3f:3c:
         1e:e2:2e:5d:8e:2c:32:1d:ba:f1:31:61:a1:13:fe:ef:d0:3f:
         59:ec:eb:eb:9f:41:35:cf:d7:fb:de:74:c2:d0:63:74:85:6e:
         0c:91:6d:be:d5:c2:8b:ad:a4:26:81:c5:25:7e:9f:a6:00:4d:
         0d:73:48:e2:8a:25:93:19:b2:e0:16:bf:4a:75:db:91:5b:a2:
         51:1b:c3:86:6b:93:79:ff:35:4d:7b:53:a6:f9:cc:e3:cb:33:
         36:54:2e:3b:6a:80:3c:e8:ec:f0:b3:c8:46:17:37:a9:8c:72:
         d5:a2:24:89:75:02:51:f2:32:97:2e:a8:99:9b:05:80:3b:2c:
         8e:3b:01:f3:c5:00:60:38:63:ea:1f:e0:46:b8:45:88:a8:5a:
         70:57:ca:6d:21:84:7c:79:5d:ef:a1:52:7a:a1:7c:9e:04:6b:
         dc:92:c7:05:ad:0d:48:03:b7:8f:32:e1:f2:b3:8b:4d:76:83:
         13:50:59:23:0e:99:6a:c3:b3:f7:2d:c5:85:34:a9:0d:54:7a:
         d8:8a:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----