Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File:                     OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier:          Ykoe7OxY/lL9Fmn3f117sP9WujRtpsXPLWNKah2i6mA=
Subject key identifier:   37:EA:1E:7C:1D:DF:51:61:C4:1B:E5:CE:63:16:C8:78:7F:75:CD:74
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer:       /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial:       01962ECFC94A4D8FD90FFB3BE10484808B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: LhNflynYQv1KcII0RuQISxQwxSykEdkKifKdjGJO5Rc=)
                          2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c9:4a:4d:8f:d9:0f:fb:3b:e1:04:84:80:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=37ea1e7c1ddf5161c41be5ce6316c8787f75cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:f3:c7:e3:03:c7:ae:d7:19:eb:bd:06:6c:
                    2e:b2:31:0d:c7:f4:c6:f1:04:df:e9:1e:99:3c:47:
                    8a:8a:59:d7:32:f7:fb:20:66:ee:a0:b0:3c:f0:78:
                    56:2c:d8:d2:a6:7e:b4:a2:54:fe:6d:dc:65:1a:ed:
                    bb:a3:16:5c:5f:ff:da:41:b2:a0:c6:fb:be:78:c5:
                    92:d2:7e:6c:c0:de:fa:ec:f1:d5:21:57:00:e4:5d:
                    c7:49:f0:bb:d9:6c:c3:77:aa:31:1b:7f:1f:17:fa:
                    50:83:96:19:6c:1a:e4:8a:f9:7c:18:cc:65:8b:eb:
                    91:81:6a:98:d4:96:86:96:3b:02:53:02:41:ec:f6:
                    d3:c7:f4:ba:71:f5:0c:b6:f7:69:dc:9d:36:b0:54:
                    f3:e5:99:d9:fb:1b:45:4e:30:0e:95:e9:ec:74:8a:
                    d6:20:f8:d9:9c:33:38:6b:8e:bc:10:5a:7c:f9:83:
                    c0:f8:76:cb:93:08:30:91:06:53:61:df:3c:ac:10:
                    e2:96:49:8b:1a:4b:74:0f:80:20:56:75:07:d9:de:
                    1a:00:1b:88:19:ef:c0:1d:0b:ef:88:f7:85:2f:5e:
                    5b:26:5e:3b:13:a1:ec:d5:a1:65:59:3c:24:68:d0:
                    30:63:aa:8d:82:e4:ef:9f:1c:74:50:48:5a:bd:36:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EA:1E:7C:1D:DF:51:61:C4:1B:E5:CE:63:16:C8:78:7F:75:CD:74
            X509v3 Authority Key Identifier:
                keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:de:67:a2:96:11:76:7e:fa:c7:21:68:e4:db:d2:00:af:
         b6:01:b8:19:75:ab:ea:01:ef:68:cb:b0:9f:f2:9e:0f:47:f6:
         83:e5:95:81:32:84:17:42:84:14:7c:b7:61:e1:46:20:6d:62:
         b7:a3:44:83:b1:d3:24:c1:62:ce:ed:95:ff:76:60:b2:67:01:
         2c:90:17:85:88:f6:b6:15:3b:47:ae:2e:84:3d:87:26:f5:73:
         ef:7b:42:c4:8b:26:0e:3e:f0:b3:ed:ca:20:07:7f:c3:3b:8d:
         4c:67:b1:bf:4f:a4:fc:dd:74:51:0e:4d:ee:fb:d4:81:54:a5:
         8b:75:b5:53:80:d5:03:0b:16:74:b4:25:27:dc:0a:93:f7:75:
         a5:ac:a8:65:1c:74:cb:5d:b7:b3:01:39:88:31:d5:8b:75:5c:
         be:ae:cb:86:79:e1:3d:2a:45:7b:3f:e2:ae:16:60:de:ff:8d:
         66:f2:99:80:62:c8:ca:f1:12:7f:04:69:7f:1d:db:9b:61:ad:
         aa:a1:a0:3a:8d:f1:a7:6c:94:5d:e2:2c:ec:03:a5:fd:8d:8c:
         69:2c:a8:48:91:df:c7:01:6a:2d:db:dd:91:c3:de:38:33:c4:
         0f:60:05:39:1a:e6:63:9e:1d:f3:aa:18:db:ea:ac:95:c2:92:
         50:93:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----