Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File:                     O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier:          njlaHOkrNYLPOKcAmJrxVTKbSv+iZ1u1faZOEdxr9Kc=
Subject key identifier:   85:04:D8:D8:07:82:06:99:E2:9C:7D:24:4E:0A:C4:22:30:79:A1:DF
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer:       /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial:       01962E99EBF423F22FE44552563A0AE8A8E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number:          0D6C
Signing time:             Sun 13 Apr 2025 10:02:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:41 +0000
Files and hashes:         1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
                          2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: gHtpr/RpkytuNOBizr265T/3bcS4pj2FjcdirQoAfFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:eb:f4:23:f2:2f:e4:45:52:56:3a:0a:e8:a8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
        Validity
            Not Before: Apr 13 10:02:41 2025 GMT
            Not After : Apr 14 10:02:41 2025 GMT
        Subject: CN=8504d8d807820699e29c7d244e0ac4223079a1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:b2:d8:0b:f0:63:81:be:c7:a0:95:ce:f6:
                    60:3f:bd:e2:a4:b1:f7:cd:fa:1e:0c:2c:28:24:8e:
                    f1:5b:e1:fa:4f:41:de:62:81:4e:23:3a:1d:31:0c:
                    da:ae:4d:ef:e8:c6:27:33:5e:1f:bd:05:d6:20:58:
                    5e:dc:32:6e:be:0b:b0:60:fc:5a:f8:a2:0f:b1:45:
                    09:0f:d7:40:ff:88:2e:01:13:64:04:7b:33:c1:e5:
                    00:de:cc:e3:56:49:08:c0:c4:c5:16:a1:f8:1c:b9:
                    32:4a:0f:4a:a6:16:f1:b4:e1:70:f1:52:2c:ac:71:
                    b1:d7:9e:86:08:70:55:4c:55:15:31:9c:68:83:ff:
                    94:26:07:01:9c:91:b0:3e:b5:69:15:6c:3a:aa:11:
                    a8:90:b0:b5:54:85:7a:62:ed:f2:8f:52:3a:68:fd:
                    d3:f1:e4:98:0e:4d:e6:10:09:5a:26:69:5e:c6:84:
                    e5:35:bf:ad:44:83:00:03:95:75:a4:da:ec:06:75:
                    12:f3:1b:87:31:7f:e6:51:7a:c6:b7:41:14:d7:ab:
                    c4:37:22:f7:a5:93:81:43:64:b3:40:c9:c3:71:83:
                    ba:00:5c:d8:9d:1c:ff:bd:15:b2:8c:0c:59:4a:34:
                    9d:aa:a7:df:d4:49:b5:42:ae:cc:45:93:e8:e0:83:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:04:D8:D8:07:82:06:99:E2:9C:7D:24:4E:0A:C4:22:30:79:A1:DF
            X509v3 Authority Key Identifier:
                keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:41:d8:b1:95:c9:ee:bb:10:51:9e:ca:8d:29:5d:70:95:79:
         5c:a4:56:de:f2:a1:7a:c6:db:9f:3e:4a:48:39:ee:ab:8a:4f:
         e1:d3:e5:01:1c:fc:69:e2:58:60:5f:6a:70:42:fc:8c:a9:6e:
         01:af:82:88:f0:c0:17:e6:9c:ec:8e:44:4d:ae:64:d0:db:4a:
         08:2d:bf:fb:8c:99:b1:27:fb:97:20:42:42:eb:07:cc:85:2d:
         f8:3e:da:5a:63:87:80:8b:6f:97:f0:8c:09:73:b5:f4:ad:99:
         5d:18:4c:b9:a1:22:54:d9:b5:55:b3:3f:f0:11:04:6f:2f:e9:
         68:4d:f3:74:0d:0c:b0:b1:21:22:65:e6:24:98:81:af:4f:ea:
         0b:59:f6:3c:79:3e:10:79:4c:af:2e:8e:e7:8b:f0:11:62:5d:
         86:55:08:8e:be:db:76:5c:73:d0:4a:b9:b3:d9:00:86:00:28:
         6b:a6:ff:d3:53:be:11:45:a9:be:ce:3a:6e:9d:d7:db:9f:53:
         91:7f:cb:60:b5:1f:9c:03:14:4d:f5:9b:47:04:81:53:be:fb:
         df:51:6e:88:45:00:33:1c:76:ab:e0:00:fd:17:62:0e:31:0e:
         15:0f:a0:6f:c0:bd:e3:90:5f:7a:ab:23:b5:e3:42:27:73:79:
         2d:d0:86:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumev0I/Iv5EVSVjoK6KjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjUwNDEzMTAwMjQxWhcNMjUwNDE0MTAwMjQxWjAzMTEwLwYDVQQD
Eyg4NTA0ZDhkODA3ODIwNjk5ZTI5YzdkMjQ0ZTBhYzQyMjMwNzlhMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Oy2AvwY4G+x6CVzvZgP73ipLH3
zfoeDCwoJI7xW+H6T0HeYoFOIzodMQzark3v6MYnM14fvQXWIFhe3DJuvguwYPxa
+KIPsUUJD9dA/4guARNkBHszweUA3szjVkkIwMTFFqH4HLkySg9KphbxtOFw8VIs
rHGx156GCHBVTFUVMZxog/+UJgcBnJGwPrVpFWw6qhGokLC1VIV6Yu3yj1I6aP3T
8eSYDk3mEAlaJmlexoTlNb+tRIMAA5V1pNrsBnUS8xuHMX/mUXrGt0EU16vENyL3
pZOBQ2SzQMnDcYO6AFzYnRz/vRWyjAxZSjSdqqff1Em1Qq7MRZPo4IOAnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUE2NgHggaZ4px9JE4KxCIweaHfMB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUHYsZXJ
7rsQUZ7KjSldcJV5XKRW3vKhesbbnz5KSDnuq4pP4dPlARz8aeJYYF9qcEL8jKlu
Aa+CiPDAF+ac7I5ETa5k0NtKCC2/+4yZsSf7lyBCQusHzIUt+D7aWmOHgItvl/CM
CXO19K2ZXRhMuaEiVNm1VbM/8BEEby/paE3zdA0MsLEhImXmJJiBr0/qC1n2PHk+
EHlMry6O54vwEWJdhlUIjr7bdlxz0Eq5s9kAhgAoa6b/01O+EUWpvs46bp3X259T
kX/LYLUfnAMUTfWbRwSBU77731FuiEUAMxx2q+AA/RdiDjEOFQ+gb8C945Bfeqsj
teNCJ3N5LdCGOg==
-----END CERTIFICATE-----