Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File:                     opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier:          BJGHeF6NH/Lr3NmUrX8tBnFhWrcFEN40zDpA75Ecx8c=
Subject key identifier:   3C:53:B3:AA:79:FA:E0:D3:90:3E:A8:96:EF:0F:0A:E1:8B:E1:B6:B0
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer:       /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial:       01962E2B3D50260FDCE2A6F6F569D37B3239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
                          2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: Mxr72UQn7D7tfUmI5lpRH73mYbFtYgkko1oQUUhoHRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:50:26:0f:dc:e2:a6:f6:f5:69:d3:7b:32:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=3c53b3aa79fae0d3903ea896ef0f0ae18be1b6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:a6:56:5c:36:88:35:f0:4d:42:76:78:93:
                    38:a8:56:4c:38:c8:65:bf:0a:b1:80:17:1c:32:2b:
                    c7:aa:a5:5a:92:ff:e9:5d:90:2a:f1:d5:b1:2a:e7:
                    43:24:32:ac:6f:c4:05:80:35:7f:21:0e:e4:74:44:
                    82:a5:1f:5a:f9:89:9e:85:9e:04:a2:7a:94:5b:b8:
                    7f:bd:81:cf:d1:01:42:76:eb:6a:8b:1b:b2:03:09:
                    2f:4e:78:14:26:08:4a:c3:c4:76:d1:6f:2b:b8:06:
                    bb:44:16:6c:90:8e:e0:ee:a8:52:5b:fd:a7:70:8e:
                    22:20:85:99:75:38:8c:9d:d9:19:cf:02:cd:b2:a8:
                    19:c4:51:a0:4f:a4:88:61:eb:1f:be:e8:7a:4d:27:
                    6e:1f:da:06:5a:b9:4f:1f:b3:ea:26:03:4b:00:23:
                    f3:eb:87:5d:d9:83:00:c0:cf:23:12:53:d6:a5:00:
                    35:59:ca:56:c6:5f:ae:69:eb:a0:cc:0a:2a:45:3e:
                    85:ce:15:a6:bd:20:ea:20:01:b5:03:65:c6:39:46:
                    07:a2:47:81:f1:26:fc:f6:e5:81:5e:37:1e:0c:62:
                    29:11:ac:9e:93:a5:03:ee:70:dd:84:26:68:51:cf:
                    e7:92:12:55:46:a3:fd:ac:b9:df:0a:57:b1:1a:cf:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:53:B3:AA:79:FA:E0:D3:90:3E:A8:96:EF:0F:0A:E1:8B:E1:B6:B0
            X509v3 Authority Key Identifier:
                keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6e:e4:6f:24:37:99:3e:98:7e:d9:78:dd:50:2a:a5:9f:a1:
         4d:70:af:5e:03:53:e1:b5:87:4b:b8:1e:0a:a1:8e:49:c5:dd:
         71:79:9e:84:af:a5:25:e9:95:72:b8:25:f0:0b:e7:2f:62:4a:
         da:11:28:22:25:aa:6f:00:6a:46:25:8c:9f:c8:52:a3:3e:f6:
         e9:a4:e5:da:ea:ae:0c:e1:ab:0f:dc:33:fb:5f:94:a4:8e:e5:
         c8:a8:a3:70:3e:ca:a6:52:4c:2a:f7:ad:31:a9:54:dc:46:80:
         10:63:ff:d6:f7:4e:1d:c2:ba:4d:b8:dd:9f:af:3e:51:09:31:
         5b:f7:61:f5:cb:c8:e8:03:92:21:53:d9:94:ac:fd:21:b8:d4:
         6d:a8:7f:e3:bb:39:e3:cc:3b:97:68:65:7f:c7:61:cd:27:b2:
         bc:a2:be:1b:27:e7:9e:3c:fe:83:49:74:db:76:e1:70:17:5b:
         b1:82:79:01:90:11:49:0c:7e:da:0b:e3:cc:d6:2b:2e:95:0b:
         da:4e:b0:7c:1e:0a:e3:4d:66:d6:65:89:23:a6:68:1f:60:a7:
         aa:7d:37:83:0d:49:a9:9c:ed:a4:13:c9:d5:a2:47:be:a3:3c:
         4f:5c:22:1d:46:62:6f:40:64:d1:55:15:4b:59:3b:d2:d1:18:
         f8:c8:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----