Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File:                     OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier:          LNZ+iYSraznGXXVgAfmBoQsRrF+EKiIr84wJ6j+SqOo=
Subject key identifier:   12:91:3E:D2:F2:65:37:EF:F6:8E:19:A1:6B:3E:09:64:8B:F7:55:05
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer:       /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial:       01962E98E75C302B87F3C361230608DD20AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: mAT6k0Mp2UF8Zq98okmGOvhCcA1EU6/JPlCfAO50OkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e7:5c:30:2b:87:f3:c3:61:23:06:08:dd:20:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=12913ed2f26537eff68e19a16b3e09648bf75505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:45:e1:8c:ed:c1:1b:72:23:d9:b6:e7:4e:
                    35:e2:46:8e:95:c6:b6:99:57:da:23:63:89:b3:b4:
                    df:5e:6f:5d:94:92:9b:33:d4:54:91:1b:0e:ad:26:
                    c5:72:df:b5:76:01:6b:14:1d:90:fd:02:cc:fd:cd:
                    52:3c:e6:4c:11:f8:f2:53:5e:a5:c8:94:a4:13:9e:
                    21:b1:b6:a6:fc:e8:d2:b3:92:2a:25:6c:bf:25:4e:
                    e7:da:d4:52:dd:85:cb:e9:e7:f7:5e:b7:1b:72:87:
                    a5:5e:c4:a1:a0:3a:f9:c6:66:e2:72:3a:64:c4:1b:
                    94:4b:1e:be:13:ec:4f:1d:af:db:9d:a3:82:47:97:
                    cd:84:c9:d8:9f:0f:44:b4:f0:7b:d7:c3:9f:08:fd:
                    a8:a5:74:a2:1a:78:a9:69:11:4b:d4:dd:65:4a:23:
                    f3:f0:d3:b0:75:62:ae:05:23:69:2f:ec:83:d2:84:
                    89:b9:1d:de:90:52:4a:91:d9:45:68:83:60:97:4d:
                    a0:50:a7:ca:53:21:cf:c9:26:1a:2d:ba:f6:3a:6f:
                    37:82:2c:51:3c:09:52:98:c1:a9:30:de:64:a2:d6:
                    5d:ab:6a:5b:7e:23:98:31:01:9f:65:84:49:79:c0:
                    10:5b:66:c1:34:41:fd:94:cb:f7:71:38:62:c7:fc:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:91:3E:D2:F2:65:37:EF:F6:8E:19:A1:6B:3E:09:64:8B:F7:55:05
            X509v3 Authority Key Identifier:
                keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:1f:d0:b0:66:1c:69:9b:65:8a:99:6b:f7:fc:84:49:b2:
         aa:1d:76:00:d1:70:6f:8a:b2:c3:68:ce:f6:c0:8a:17:94:39:
         6a:e6:08:bf:04:4b:b5:c3:ae:08:71:e8:34:51:a6:b4:81:ad:
         82:a6:45:a2:11:97:b1:fc:dd:c5:e7:c8:47:8b:0b:5b:ec:83:
         f4:27:c1:80:6e:b8:3c:10:50:7f:0b:3f:09:11:4d:10:c8:6b:
         57:c6:94:19:7f:44:10:f9:ad:5b:8c:9c:82:3e:79:79:b6:1f:
         b8:9b:85:3f:59:18:79:4b:7c:cf:49:16:0d:76:2d:21:5b:5c:
         6d:91:5b:d8:de:b7:44:21:a3:99:e4:5d:bf:d5:85:b3:ee:c9:
         f5:eb:b1:94:7f:e6:25:be:ed:85:d6:c1:13:5f:c0:a5:df:2f:
         8a:bb:17:4a:4f:da:14:fa:5f:c9:81:27:0c:ed:8f:b9:4e:25:
         7a:a4:2c:15:ed:e8:c8:ee:11:c2:e8:68:cc:5a:3e:54:de:91:
         a2:d2:b0:5c:e7:4e:5a:c4:4c:7f:d0:e1:7c:30:c8:d3:3d:a6:
         7d:dc:7b:c9:fd:0b:0c:30:c0:6f:2b:53:6e:15:d0:5f:83:c9:
         06:6c:1d:b4:de:dd:4a:ec:8f:56:f2:78:21:1a:5d:0c:47:89:
         46:94:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----