Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File:                     O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier:          e/n4cEPbAqzY41YZjlmdC+I5HV15vysN2r2jfvvp0Bs=
Subject key identifier:   E2:10:E0:41:EC:F8:B8:83:E6:E4:D0:85:B2:B2:E0:24:92:D8:4A:3C
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer:       /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial:       01962F3D654A4EC1C343A370573FB7BA4735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number:          0513
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=)
                          2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: WC4jkL85ArZdrcPiEjZBGuPN1T99pN8T+KZ14/KpsRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:4a:4e:c1:c3:43:a3:70:57:3f:b7:ba:47:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=e210e041ecf8b883e6e4d085b2b2e02492d84a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:2d:7d:fa:9b:1b:2d:59:0f:65:2f:02:44:
                    24:70:73:2a:56:ea:a2:68:8b:15:88:ad:26:89:62:
                    bd:37:be:c8:12:9a:f4:01:e7:a9:5a:6f:91:ab:5f:
                    51:b2:1a:87:89:9d:d7:4b:46:36:8f:fc:9f:3d:48:
                    6d:d9:80:a3:4f:68:2f:67:5a:bc:3d:e3:eb:ab:79:
                    70:2b:6b:64:55:9f:83:4f:35:d3:21:b7:c7:71:ad:
                    36:48:6e:55:c6:b2:d1:17:49:63:07:17:71:18:0f:
                    7c:5c:4c:5f:f8:22:ee:50:48:cf:ae:a3:32:01:5b:
                    2f:4d:5d:21:c8:ad:e0:cb:f6:16:17:fb:38:48:3c:
                    52:09:fe:0f:ba:05:8a:fb:d1:4f:f4:09:80:65:45:
                    9b:3b:6f:d8:ee:f3:05:3b:44:1c:51:ec:53:71:27:
                    af:34:fd:60:42:16:ec:af:0b:dd:90:4d:2a:c7:74:
                    25:99:fb:98:54:cf:ce:33:de:80:f0:4b:ff:37:b0:
                    6f:11:76:38:8d:a8:46:fc:6c:c6:fc:34:7d:ed:6d:
                    d7:32:04:0a:df:3d:f7:1f:6a:29:e4:95:2b:2f:cc:
                    9e:c8:ce:03:69:61:0f:c0:57:ba:f5:14:99:09:c2:
                    6c:a6:cf:40:dc:c9:35:ce:5b:df:ca:9a:bc:09:d3:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:E0:41:EC:F8:B8:83:E6:E4:D0:85:B2:B2:E0:24:92:D8:4A:3C
            X509v3 Authority Key Identifier:
                keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:ec:0d:d1:6c:e3:d6:e5:18:9c:94:f9:c2:57:9d:85:9c:
         63:01:9f:ca:bd:4b:78:13:fd:27:0f:39:0c:0e:37:4f:26:b4:
         e1:1e:a4:59:c5:63:43:90:77:94:57:ea:68:a9:76:21:75:40:
         9e:29:28:47:a1:ca:70:b0:cc:f8:83:ac:1e:e8:78:7c:2e:2c:
         17:23:86:a3:35:aa:30:aa:55:4b:a4:dd:71:f9:bf:e5:e1:ae:
         01:43:f2:68:c6:01:4d:76:75:f5:80:8e:07:c5:42:3d:bc:79:
         a2:95:a7:2f:75:cb:3e:50:2d:85:39:31:21:90:5c:cb:3d:86:
         1c:86:26:8c:d3:bc:ae:45:b1:a7:92:06:b9:e9:fe:95:5b:fd:
         ef:32:69:f0:58:96:1e:dd:de:0d:c8:77:02:8a:66:9e:08:80:
         da:14:b9:8b:04:59:9f:83:ce:65:de:90:90:42:df:c1:97:a5:
         9e:28:a2:2c:61:fa:09:4c:a0:c6:33:90:cf:34:fc:14:5d:8a:
         b0:41:94:77:58:40:4d:7a:a1:81:ca:ed:bb:fb:cb:ca:44:a9:
         e0:eb:55:28:2b:a0:26:c0:ff:07:9d:98:d5:c7:0c:c8:3e:d2:
         ab:29:d9:13:b1:1a:b0:57:2b:9d:43:94:7b:50:48:77:36:07:
         c8:49:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----