Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File:                     8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier:          3N7s3IhRLKr4Ah+4SKda+zL5eEf2uq/5mYlDnlVyU3Y=
Subject key identifier:   EC:69:B5:6E:55:1D:9E:F7:5F:F5:5E:1E:A7:75:CA:57:0D:A3:03:40
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer:       /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial:       01962E2ACE53131B962D514118451172E934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number:          C4
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: uNwNwdV6HoSEnfnJHpbwAUtChGdF7I38CRcq6H+L58s=)
                          2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:53:13:1b:96:2d:51:41:18:45:11:72:e9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=ec69b56e551d9ef75ff55e1ea775ca570da30340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bf:b6:57:f8:e2:5d:2d:98:a7:6a:10:9a:a9:
                    6c:7d:13:38:9a:62:e9:34:53:02:d2:24:cd:bb:1f:
                    96:58:d8:d1:d4:8f:a9:45:88:16:08:f4:60:5d:a9:
                    fa:48:aa:8a:f3:ce:4d:61:8e:b7:27:79:f1:1f:31:
                    24:63:7a:9a:2b:43:e6:ae:ab:30:70:ed:e3:0c:bf:
                    b3:aa:43:59:98:bf:41:d0:68:d7:6f:31:04:ab:3e:
                    4d:9f:1c:75:fc:61:eb:64:54:e2:2c:a6:d8:bc:82:
                    a3:d4:7f:88:9d:60:01:fd:95:7f:e1:3b:4d:57:45:
                    c1:07:3c:e2:4f:c2:79:c2:73:c1:c8:0b:c4:74:9f:
                    8b:68:b2:7f:c0:aa:b4:da:c6:67:9c:81:06:9a:05:
                    dc:04:28:fc:0d:f1:7b:3d:fe:9e:f3:56:90:f6:4b:
                    ad:e7:fb:a8:05:f1:ad:62:ba:32:68:fd:e8:37:6a:
                    fa:83:25:7a:79:ee:50:c8:27:df:47:c2:e7:ed:09:
                    08:ec:01:cb:ff:5c:a5:ee:b8:4f:99:27:72:5c:de:
                    df:3b:a3:70:f3:77:6c:34:d5:57:96:40:84:9b:50:
                    23:1b:e1:12:b5:49:8d:4a:40:e6:18:4a:a3:29:76:
                    89:a6:f1:97:0e:10:4c:d6:ac:28:de:73:d9:b3:00:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:B5:6E:55:1D:9E:F7:5F:F5:5E:1E:A7:75:CA:57:0D:A3:03:40
            X509v3 Authority Key Identifier:
                keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:87:95:0a:93:0a:19:e3:67:49:e3:4e:79:58:d4:37:df:a9:
         91:74:eb:16:e1:72:26:90:33:2f:a6:cb:2b:bb:a0:28:32:b8:
         0c:7b:69:3a:8c:d8:f8:6d:ff:d0:ba:16:ac:22:23:0d:78:d3:
         e8:af:71:e8:74:73:99:e0:10:3b:53:db:88:44:bf:5c:a6:f0:
         b9:00:b6:95:21:3b:77:a6:21:2d:31:bb:db:5e:9a:72:df:05:
         5f:48:57:f4:dc:a9:e3:8b:8a:0f:da:a7:d7:2c:8c:e9:dd:59:
         a4:03:1d:8b:12:7b:28:3f:d3:c2:0c:e3:e6:c1:09:82:33:61:
         c0:f8:d9:33:73:33:25:9c:b7:90:32:eb:3f:39:d9:5b:3a:04:
         8e:18:14:2d:4d:46:af:69:d4:41:84:b2:95:45:fb:7c:ed:0c:
         3a:05:05:c1:34:80:3b:3d:5f:49:8a:e3:c6:5d:c1:b1:b0:38:
         81:5f:59:f9:da:61:15:c3:c8:e9:a1:9f:2f:d7:e0:29:85:ee:
         68:a9:9b:3e:78:1c:4b:09:8f:92:5e:7d:34:32:5c:70:f7:3b:
         1d:45:ff:3c:51:9e:3d:51:f4:d2:07:cb:5b:c3:e6:fe:5c:8d:
         1d:cd:97:09:07:b5:39:bc:6c:03:db:48:82:7a:fb:52:4a:61:
         15:16:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----