Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          GgWfc/sTWnaZsspW0fq6G1LbHJSUiR7v2JYqeO5hJsQ=
Subject key identifier:   A0:F0:11:94:8D:36:67:91:45:BD:00:1E:11:8C:93:C8:32:C9:44:86
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       01962DF3FDA4724679F62680F6FE8E2C0A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
                          2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
                          3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
                          4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: pHLCNhiWveoZ/UgZKYIC11A3KKhRWvQc7eji1G5ltvQ=)
                          5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
                          6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
                          7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
                          8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
                          9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fd:a4:72:46:79:f6:26:80:f6:fe:8e:2c:0a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=a0f011948d36679145bd001e118c93c832c94486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:6b:96:9a:5d:2d:8e:64:ae:50:30:9c:51:
                    7f:37:92:31:f2:c5:4b:61:ec:9f:a8:5b:ef:12:41:
                    b2:81:f0:bf:1d:15:7d:66:67:0c:6c:ba:1f:07:75:
                    7b:b9:f4:d1:31:98:17:52:4c:46:0b:0e:29:d8:df:
                    a1:55:a1:f7:d8:3d:a7:86:c6:03:0f:80:45:be:d6:
                    97:01:10:34:9a:85:b6:73:73:2a:04:25:9a:7d:64:
                    30:fd:72:68:75:3b:a7:93:da:25:50:fb:a2:f4:14:
                    71:41:ef:1f:46:11:ad:40:f2:d8:c8:68:9b:84:9c:
                    82:55:30:91:7d:7c:20:4b:31:07:4b:93:b9:70:63:
                    57:c5:1c:c8:e1:4e:53:90:cc:e7:ab:de:7b:0b:45:
                    96:da:a0:b1:22:e5:08:5a:24:65:96:f3:5a:41:b5:
                    b0:59:85:3c:11:ba:bc:f8:54:c9:05:8f:42:a4:4a:
                    f2:58:f7:f3:e4:9c:83:e0:48:24:ee:54:5b:96:64:
                    8f:43:7e:59:b4:4c:d0:2a:0a:39:3e:81:36:1f:6e:
                    72:e5:cd:00:b6:a6:c6:52:a8:7e:9d:01:70:62:4d:
                    27:7d:1d:92:70:00:61:17:88:86:ca:87:e9:88:06:
                    7f:cb:2b:2a:a0:8e:fb:04:fe:9c:f5:12:c5:c9:46:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F0:11:94:8D:36:67:91:45:BD:00:1E:11:8C:93:C8:32:C9:44:86
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:7a:fc:cc:09:09:33:e7:84:9e:4e:a6:09:63:76:d1:27:
         21:2c:28:73:9b:1e:07:77:c0:80:90:57:ff:c3:11:79:fe:29:
         11:be:1c:79:c8:9b:ab:b1:96:44:73:d9:58:a5:6d:1e:1f:ff:
         e3:ca:84:0f:33:60:01:d4:3a:d8:50:36:1a:64:60:f4:a7:0c:
         54:83:7c:18:f6:25:07:ef:6d:95:ee:5f:9b:80:25:28:61:8d:
         b1:29:ff:4f:3a:2b:cc:d8:46:0a:eb:df:f5:a7:77:ef:28:f4:
         b7:f9:a0:68:e9:4c:c0:ad:aa:0e:9d:f6:97:04:d8:f4:18:76:
         30:50:5e:ed:26:9d:16:49:32:ea:e0:a8:0c:a4:02:f5:d2:2b:
         a8:71:b7:3f:7a:aa:9a:42:24:36:e6:79:cc:98:9b:7f:5a:42:
         2e:23:a5:40:61:72:e4:82:02:36:2d:57:a6:76:a7:3d:19:8e:
         a9:ad:eb:c4:91:b4:31:fc:86:44:96:3a:6c:d5:7f:a0:ce:d6:
         c4:c1:88:42:05:d5:2c:e1:56:f1:ff:89:b5:db:de:a9:fd:b1:
         73:14:a4:8c:9a:ba:5a:60:5a:b0:9f:63:94:3b:70:9d:35:5a:
         55:ab:29:be:a6:4b:b4:c5:12:48:65:9f:1e:1a:89:b9:fa:04:
         a2:3c:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----