Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
File:                     oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft (raw, json)
Hash identifier:          fSgOkFifTbdHs+opRy+l91pHx1mGndcGH9xBbBYQXK8=
Subject key identifier:   D1:7A:30:34:46:DA:88:3F:ED:A6:F7:7F:CB:A4:41:30:CD:0D:B8:93
Authority key identifier: A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
Certificate issuer:       /CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Certificate serial:       01962F0700CC9FEF24714203E7D10617510E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
Manifest number:          1360
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: ZcTmzRVwzbIZI35RxAQspNK8wA0.roa (hash: CvHPermbD4g/guqKSz7nbFfdIQ834453x2yMIE8CXZg=)
                          2: oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl (hash: aJwmvWQSsJX7xS+891h5X0i1RJZTq0ITnrQ5sT/Y9dg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:00:cc:9f:ef:24:71:42:03:e7:d1:06:17:51:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15a105f5ba627e5be6f1ff91f2597278209931f
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=d17a303446da883feda6f77fcba44130cd0db893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:91:2b:a4:ce:fc:ec:d1:77:db:fa:dd:43:
                    31:98:4d:bd:2e:83:63:e3:0f:39:73:a1:37:e3:ba:
                    e3:9c:a0:70:95:bb:cd:3d:b7:56:04:1a:d1:ff:84:
                    42:e1:10:13:f1:16:d4:5d:fa:2b:b4:d4:9f:04:41:
                    60:5e:90:9e:06:8f:df:fc:11:bc:06:70:cf:55:a4:
                    aa:d6:79:c8:63:28:7c:ff:a9:80:bc:63:51:b4:1c:
                    ee:60:72:44:1b:70:fb:ba:f4:7f:dd:b2:a1:e3:9e:
                    ca:f0:53:91:66:f5:16:a1:f3:92:cd:0f:66:fd:2c:
                    71:a5:42:39:67:75:a3:92:24:f7:9b:0a:38:95:a1:
                    ea:7e:fe:50:4e:ff:31:76:d9:2f:6b:8d:18:81:b9:
                    62:6d:bf:2f:a9:c8:f3:e9:20:02:34:2e:8a:96:d0:
                    cd:3d:0f:47:e1:9e:3d:d7:6d:bd:a8:0a:9b:af:6c:
                    c9:da:6b:66:59:4d:02:bc:eb:a2:c4:6a:89:10:e2:
                    f2:02:8f:d2:8b:d3:8f:bf:8f:48:8c:97:33:e3:9f:
                    0a:4a:3d:b9:c3:d5:b3:81:28:99:98:0e:11:f8:98:
                    1b:23:b8:d0:07:ee:b0:c7:9a:43:a6:9b:df:12:71:
                    65:50:7d:d3:05:9b:8e:dc:cf:fb:45:71:9f:05:5a:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:30:34:46:DA:88:3F:ED:A6:F7:7F:CB:A4:41:30:CD:0D:B8:93
            X509v3 Authority Key Identifier:
                keyid:A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:6a:ea:a3:83:4e:24:5f:d3:3e:11:85:85:85:ce:34:dc:
         00:84:bd:f1:a9:07:1e:f2:77:55:49:ae:e6:cc:70:f7:9b:1f:
         08:a6:3b:1d:f5:fe:91:7f:e6:eb:68:55:5c:69:21:f2:c9:ab:
         a1:dc:02:7d:2e:fd:69:25:f8:76:00:7e:17:53:20:83:e3:52:
         0b:9e:4f:ad:89:e7:f8:11:73:bc:ed:ad:cb:8f:6a:78:6e:dc:
         62:a2:45:eb:c7:7a:1e:6c:60:ba:90:b4:b4:d4:af:f7:35:46:
         7a:5e:c4:f4:1c:1b:0a:7a:06:aa:22:60:f4:1a:72:62:50:82:
         31:cd:b1:5d:8c:a9:ef:76:86:9e:fc:d0:4f:b7:aa:55:c4:3f:
         b2:a6:8b:b7:1e:4a:04:32:6f:6e:26:13:09:17:ad:9e:90:53:
         63:87:df:8d:86:4d:53:04:ab:6e:55:70:33:2c:a2:12:79:95:
         b6:e3:c5:76:1c:20:ac:8e:8f:73:66:c8:35:96:64:94:7f:a8:
         28:01:c4:db:83:bb:27:9b:d4:8e:10:54:47:9d:41:46:b5:71:
         d4:16:3c:89:6d:89:9e:2d:4c:3a:bb:da:d3:51:c0:1b:de:11:
         c7:7c:ba:3e:f7:37:e4:b0:a1:8a:14:ff:0f:f9:36:22:23:31:
         69:5e:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----