Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File:                     oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier:          fOmM0ssDaSduh9GwpgB3YHSJ88jZYg6l+rJM3Y8c6Fc=
Subject key identifier:   78:93:0E:10:AD:86:AE:D0:FC:12:B1:1C:D2:C6:FC:66:93:B1:67:2C
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer:       /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial:       01962E9861D9CA83420CACE2754B420B2AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number:          0E18
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: qq2oumQB50N5MyQPa7bPkihDPB6cVHDJi0JQZKGKm3I=)
                          2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:d9:ca:83:42:0c:ac:e2:75:4b:42:0b:2a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=78930e10ad86aed0fc12b11cd2c6fc6693b1672c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:d8:3d:8f:4c:b7:2e:43:13:a4:60:14:88:
                    b6:da:06:23:85:8b:3a:c8:d2:b9:dc:de:05:26:38:
                    9b:6a:c1:4f:f4:fa:75:2d:58:80:0f:f9:6e:c6:5f:
                    83:da:27:75:2f:96:a0:99:04:c9:46:90:c7:c3:d4:
                    e3:f6:b5:40:1c:7c:e7:c4:cf:8a:38:0a:d0:06:48:
                    5e:18:1a:d2:5d:3b:d3:b2:b2:42:64:d1:c5:0a:f4:
                    0f:3c:05:a6:43:91:fc:ec:ff:44:aa:0b:0f:f1:80:
                    dd:89:94:b2:cf:ef:2b:3b:b4:af:46:46:7c:b5:73:
                    f1:49:c7:48:3e:fe:7e:93:a1:45:2e:3d:5e:be:2c:
                    3e:74:7a:0d:4a:50:dc:fd:32:87:16:b5:a8:7b:9d:
                    23:c4:a1:ac:70:db:bb:b7:9c:ab:37:e0:29:06:b0:
                    a8:3f:f8:27:af:70:df:02:1f:c9:61:47:5a:26:db:
                    1d:07:54:10:47:3d:ce:00:52:65:21:c8:3b:f0:10:
                    a6:5c:e3:f5:1f:00:91:28:eb:41:46:8c:f3:6e:9d:
                    3a:75:d2:c1:bc:e0:dc:5c:6d:89:e4:bf:0a:2c:a5:
                    46:92:88:18:43:d2:c4:6e:c1:c4:69:60:10:ba:d4:
                    02:c5:a7:6b:8e:cb:07:08:63:49:5c:a0:33:47:72:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:0E:10:AD:86:AE:D0:FC:12:B1:1C:D2:C6:FC:66:93:B1:67:2C
            X509v3 Authority Key Identifier:
                keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:64:8e:80:f7:23:2f:ba:bd:19:da:42:25:9a:b4:66:de:59:
         29:6a:23:da:e6:d4:20:ff:c0:bf:ca:e1:fd:e1:77:ac:52:ed:
         ce:92:82:4b:ff:0b:ae:bd:a7:42:ee:34:37:4c:b7:5c:c6:0f:
         c6:37:46:fa:4c:fc:80:1f:30:aa:db:30:73:db:b3:8b:04:3b:
         96:a5:61:b9:e1:a8:45:f5:00:63:22:d3:99:94:6c:61:1b:30:
         bb:28:b5:e4:b2:da:9c:c3:db:e1:14:a3:35:c2:47:f9:1f:bf:
         7d:d7:79:92:ab:6b:c3:50:d5:a6:19:79:aa:53:b9:42:93:91:
         48:5a:e0:a7:60:67:be:a9:16:fe:0e:3d:d8:05:51:b1:a2:54:
         bd:e2:3b:0c:20:37:62:5b:23:9c:50:c1:d2:33:a2:52:a5:f6:
         35:bc:c5:86:6e:80:17:4b:2c:4b:79:46:e0:76:5f:4a:92:12:
         cd:eb:5e:54:7b:d0:6b:d5:7c:b9:65:84:aa:72:69:03:51:b1:
         21:5c:57:4a:94:0a:f1:19:0c:ec:5b:93:15:c3:33:4a:f7:ee:
         1f:c1:54:c3:17:bb:ae:9e:75:0e:a9:79:2d:73:74:1c:28:4b:
         b0:e6:5c:4a:c1:72:a4:79:86:17:75:e9:06:86:34:dc:93:56:
         2c:f0:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----