Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File:                     OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier:          fRTf1Xd8iEh2xI4mNz646OlzHEQjD3w/aC7oBZvg8Js=
Subject key identifier:   99:28:E8:18:CD:95:98:B2:65:01:A2:A9:2C:B9:51:20:E4:EC:96:7C
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer:       /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial:       01962F071E742767C268F67D5DCD0977EA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number:          13EA
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: hCFqV441lL63ThQWl40VsBLI3YY6oGkcvgeJT2j4YEI=)
                          2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1e:74:27:67:c2:68:f6:7d:5d:cd:09:77:ea:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=9928e818cd9598b26501a2a92cb95120e4ec967c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:06:d4:06:e6:4d:14:14:c4:31:0f:a2:08:
                    16:f8:4b:ce:c0:b7:46:ad:fa:0b:b6:68:44:d7:a9:
                    ee:80:dc:f7:59:ea:6b:04:3b:be:5a:c5:52:5c:e1:
                    12:84:da:84:29:2f:18:b2:62:f7:f5:a2:76:2e:10:
                    51:6e:8d:b9:b7:1f:e5:d8:ec:f7:15:84:7e:dc:68:
                    93:23:b1:93:5e:7d:e8:20:d6:88:3f:2e:c2:31:66:
                    ce:ab:74:8b:66:8d:f2:5b:e0:ff:e5:c2:59:57:e3:
                    9b:57:bd:0c:30:13:6f:f7:a8:ab:92:4a:c1:49:f3:
                    84:a7:e3:1e:89:a9:4a:11:b9:77:3e:9b:89:1b:a8:
                    b0:d1:b2:6e:ee:b5:d3:1e:54:b9:f7:f0:03:c5:94:
                    0b:b8:96:9a:89:f9:79:a9:64:3d:89:ee:1c:51:5f:
                    23:b7:2a:7e:55:ef:7a:5f:49:b3:d2:4e:0b:7b:f9:
                    c0:d0:f0:c0:34:52:df:2a:fc:d0:b0:83:ff:c4:b8:
                    f8:83:c5:b0:a1:c5:ab:7f:97:f2:3b:52:76:3e:92:
                    57:9f:c0:50:cf:ed:5c:53:10:0f:48:58:4f:a8:3c:
                    fb:db:af:82:36:a6:11:95:46:88:c0:8d:36:dd:10:
                    ec:c3:31:47:e9:23:e2:9c:c4:6e:5d:82:b1:f9:3a:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:E8:18:CD:95:98:B2:65:01:A2:A9:2C:B9:51:20:E4:EC:96:7C
            X509v3 Authority Key Identifier:
                keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:93:d2:64:8c:01:f8:1d:b0:b0:9d:23:42:5b:47:51:70:
         2a:44:65:e7:96:b9:e2:72:74:e7:0f:83:86:90:85:fc:6f:b2:
         ca:48:5a:2c:fd:c7:10:62:35:96:8f:f8:a6:f7:2b:ce:a9:df:
         4a:fe:e6:6c:9d:b2:1a:e3:54:a8:95:79:29:59:53:16:bd:30:
         2a:c6:59:86:17:f0:da:13:05:a3:fb:03:7e:3e:2e:9d:17:3e:
         1d:4f:34:9f:97:03:eb:4a:e2:9c:ef:ef:d2:cc:c3:90:e2:e3:
         43:c0:22:d0:47:4c:92:eb:3f:7b:3a:b1:65:a9:4b:e5:98:9a:
         38:75:1d:3a:c3:8f:74:17:58:f7:ca:dd:b3:8d:2d:77:46:ca:
         78:a0:15:42:41:d2:9f:7d:59:b2:45:20:e9:cd:59:00:9a:e4:
         30:06:35:e9:6c:1c:71:88:a3:b4:a8:06:e8:ff:f2:02:99:da:
         9f:c9:ce:e5:76:a3:f1:f2:3f:f8:b3:b5:06:a7:f3:72:a8:3e:
         bf:b6:9f:15:6f:37:d2:30:26:a9:d6:08:82:6f:6a:85:31:00:
         7c:0b:05:5f:3d:c1:1a:71:33:22:e4:a2:4c:0a:15:61:85:f5:
         9c:d0:46:0a:63:7b:0f:ad:61:74:e6:a8:e3:68:8b:50:46:5a:
         84:40:b9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBx50J2fCaPZ9Xc0Jd+o+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTI4NTRhODQwMGQ4Yzg3ZWE0ZGU3YTIyZmRmMWJmNTc0
YTkwMzEwHhcNMjUwNDEzMTIwMTU3WhcNMjUwNDE0MTIwMTU3WjAzMTEwLwYDVQQD
Eyg5OTI4ZTgxOGNkOTU5OGIyNjUwMWEyYTkyY2I5NTEyMGU0ZWM5NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzAG1AbmTRQUxDEPoggW+EvOwLdG
rfoLtmhE16nugNz3WeprBDu+WsVSXOEShNqEKS8YsmL39aJ2LhBRbo25tx/l2Oz3
FYR+3GiTI7GTXn3oINaIPy7CMWbOq3SLZo3yW+D/5cJZV+ObV70MMBNv96irkkrB
SfOEp+MeialKEbl3PpuJG6iw0bJu7rXTHlS59/ADxZQLuJaaifl5qWQ9ie4cUV8j
typ+Ve96X0mz0k4Le/nA0PDANFLfKvzQsIP/xLj4g8WwocWrf5fyO1J2PpJXn8BQ
z+1cUxAPSFhPqDz726+CNqYRlUaIwI023RDswzFH6SPinMRuXYKx+TqbYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJko6BjNlZiyZQGiqSy5USDk7JZ8MB8GA1UdIwQY
MBaAFDoShUqEANjIfqTeeiL98b9XSpAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMt
NjgyOWQ2OGUyYTU0LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMtNjgyOWQ2OGUyYTU0
LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5yT0mSM
AfgdsLCdI0JbR1FwKkRl55a54nJ05w+DhpCF/G+yykhaLP3HEGI1lo/4pvcrzqnf
Sv7mbJ2yGuNUqJV5KVlTFr0wKsZZhhfw2hMFo/sDfj4unRc+HU80n5cD60rinO/v
0szDkOLjQ8Ai0EdMkus/ezqxZalL5ZiaOHUdOsOPdBdY98rds40td0bKeKAVQkHS
n31ZskUg6c1ZAJrkMAY16WwccYijtKgG6P/yApnan8nO5Xaj8fI/+LO1Bqfzcqg+
v7afFW830jAmqdYIgm9qhTEAfAsFXz3BGnEzIuSiTAoVYYX1nNBGCmN7D61hdOao
42iLUEZahEC5ow==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net