Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File:                     o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier:          qjLY8MU1HyXt3tH0LY3R0iTZ6Hw2kQxEVt78WBbov8Q=
Subject key identifier:   24:5E:9C:84:9F:65:FD:24:5D:BB:A4:1C:25:53:F7:D6:4B:93:85:85
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer:       /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial:       01962F741857C989FB438E6EFA06C33EDA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
                          2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
                          3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: 7ZOxT58XHvVfAGwgQq0VvUn6KIHvdBkL2F6pdT1/Zqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:18:57:c9:89:fb:43:8e:6e:fa:06:c3:3e:da:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=245e9c849f65fd245dbba41c2553f7d64b938585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:1a:59:c4:0d:e5:8c:43:37:a4:da:c3:d7:
                    b9:48:0c:22:fe:d1:f6:28:d5:2d:8d:c7:d2:0a:22:
                    dc:81:22:7f:be:9f:a3:6d:22:cb:6f:f4:0c:10:1b:
                    62:01:07:1f:cb:0a:95:3f:0a:be:a7:9d:d8:aa:22:
                    5d:fd:e6:66:7c:32:1c:5b:e7:91:59:3e:9d:ac:c9:
                    86:7d:1e:da:a9:ea:87:99:c1:fd:60:3b:58:84:13:
                    6c:3c:ed:3c:78:c7:66:f2:cb:44:ad:87:b4:0f:58:
                    dc:f9:0d:d4:7c:30:89:54:5e:ba:6c:c5:89:90:2d:
                    55:7b:bc:b6:cc:5a:1a:cb:e6:a9:2d:50:16:bd:f7:
                    a4:16:1a:eb:c4:21:67:5f:76:81:93:07:e9:59:d8:
                    ea:55:c2:53:d6:03:25:01:a3:87:36:d9:fc:b8:f1:
                    3f:53:9b:c6:52:29:62:1f:2c:71:e6:4e:99:04:42:
                    22:19:c5:70:3e:c7:48:99:3a:32:8f:dd:43:98:e8:
                    17:c4:26:bb:d3:e4:a6:22:2d:06:fa:3c:35:0d:42:
                    7f:61:2d:14:63:a5:f9:31:ad:3e:76:f2:66:9f:60:
                    da:87:96:c7:59:53:e8:b5:3a:25:1a:df:86:5f:3d:
                    65:f7:32:5d:ab:30:89:27:78:5c:d4:59:7d:6b:25:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:9C:84:9F:65:FD:24:5D:BB:A4:1C:25:53:F7:D6:4B:93:85:85
            X509v3 Authority Key Identifier:
                keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:61:e0:20:bf:16:51:0c:83:04:b4:d6:8f:aa:05:fa:33:
         c5:ec:b3:18:67:77:2c:38:d1:52:c8:cb:3f:fa:66:77:b0:92:
         63:ad:e7:19:6b:85:7e:5e:84:c6:a4:6d:c7:8d:a5:ed:b7:77:
         dc:65:7b:61:08:56:43:76:bb:ed:a9:b3:b9:a3:07:54:f0:80:
         b7:e8:d5:93:0f:08:aa:15:af:1f:9e:fa:59:2b:76:20:de:20:
         a2:d1:f5:3d:dd:79:cd:89:46:78:ee:40:33:17:ac:ea:4a:ea:
         40:fa:c0:35:d8:a3:60:66:f7:fc:e8:a9:73:29:b6:a8:85:be:
         23:f8:89:33:74:0a:68:69:4f:13:fb:07:ff:71:4a:2e:1f:4a:
         a3:f5:85:84:46:83:62:e9:7b:17:74:d3:af:99:41:86:22:c8:
         4e:1b:0c:c4:1e:af:c0:23:82:97:31:b1:41:87:82:b5:bd:0c:
         1f:23:26:e4:9a:2c:40:ca:38:1f:ea:1f:c8:1f:0e:74:56:09:
         6c:2a:c3:e4:d9:83:2c:bd:56:ba:fb:b9:22:89:25:2e:6d:08:
         1e:74:92:2d:9c:43:15:f1:bc:2f:fa:4d:fc:7e:8f:04:14:1c:
         2e:12:6a:8e:3c:36:ec:08:45:75:f4:ac:ad:55:4f:56:d5:96:
         f0:e1:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----