Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File:                     Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier:          rqjq51aRRnu3cq94+kU1XDS/S+UA81CRA4R+QoHNpp4=
Subject key identifier:   13:36:DA:CB:A7:8E:09:B9:10:C2:17:70:13:CD:61:B0:37:EB:DD:5A
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer:       /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial:       01962F74D67EBF6AF2A61CA9D78D57C089B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number:          12A9
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
                          2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: CxZuYmJocmG+S1N7SmVToKH3IW/nQlaFKYcOH5UjZIE=)
                          3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d6:7e:bf:6a:f2:a6:1c:a9:d7:8d:57:c0:89:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=1336dacba78e09b910c2177013cd61b037ebdd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:7e:37:44:e1:62:0e:7f:83:98:92:74:f0:
                    f0:42:0a:f5:49:b3:e2:6b:d1:41:bd:c7:62:9e:fc:
                    1f:4c:ca:9c:b2:5d:a4:63:1f:c3:46:28:0c:e0:80:
                    6b:7d:ef:94:57:af:18:1d:22:d0:4b:fa:56:1b:ac:
                    02:50:1b:71:70:9c:4e:fb:53:f5:3d:55:66:f8:4e:
                    b6:c7:8b:3d:49:2b:11:8e:30:f2:22:02:7e:76:36:
                    8d:60:87:f4:23:7f:22:1c:0d:e3:5b:8a:ce:4f:44:
                    12:ec:43:b2:f6:14:6d:ee:3d:f8:9f:0d:6e:f9:e0:
                    3a:df:d2:1b:21:a7:12:c8:3d:18:f3:84:5a:1a:60:
                    3d:f2:17:a4:ab:15:36:46:5d:b1:5e:8f:29:eb:6c:
                    71:b4:75:0e:23:36:59:eb:dd:d7:62:3b:c6:54:4d:
                    f3:fe:35:23:b4:20:61:99:e1:c0:0c:40:f6:ec:35:
                    c1:3e:cc:19:98:25:83:f7:96:12:d4:d9:ed:25:0d:
                    81:1b:d5:5e:0d:56:5a:c0:20:96:6d:86:e0:1b:29:
                    10:bd:e6:d7:8a:93:51:39:07:0a:fa:44:c6:1e:57:
                    9a:bd:d3:17:48:4f:cc:18:7f:73:f4:f5:47:94:67:
                    83:cb:d3:1b:66:8f:f2:f9:b2:0b:cd:7b:85:bf:b4:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:36:DA:CB:A7:8E:09:B9:10:C2:17:70:13:CD:61:B0:37:EB:DD:5A
            X509v3 Authority Key Identifier:
                keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:04:62:c7:d3:6a:98:d7:b2:d5:e1:db:13:e6:d3:af:f5:
         c3:14:5e:7a:63:3c:af:33:c0:1a:46:9f:ed:e2:d8:95:e1:3d:
         03:5f:2e:3d:d1:ef:69:30:fe:1d:dd:f0:fe:d4:ac:91:e8:92:
         96:35:1f:42:ec:f9:e4:bb:5f:1d:ea:0e:85:65:97:78:ab:24:
         4f:90:73:c2:83:9e:0e:76:38:0f:03:54:cd:c7:3c:f4:1b:4b:
         6f:72:96:ce:2d:4f:f3:13:c0:8e:ff:81:9c:79:5a:c6:b7:23:
         c6:bc:41:8a:10:b9:25:79:33:6c:02:c4:e0:25:74:5b:56:83:
         43:70:14:d2:44:4f:b2:df:3f:eb:99:63:30:c7:fc:72:e9:7c:
         06:f7:7c:ad:41:92:ee:94:26:bf:9e:ad:ea:e3:b6:c2:db:5b:
         00:21:3d:8c:c1:e9:ba:58:7c:8d:bc:93:13:0d:43:f2:ac:00:
         44:a3:92:a2:2a:39:85:a6:67:61:3d:2d:6d:49:5f:29:ff:ee:
         1f:23:42:f0:8d:fe:fa:b1:06:4a:06:ec:88:26:98:ea:65:fd:
         71:45:c8:ec:b4:0e:e4:01:4b:b8:9a:29:06:e1:70:43:6e:01:
         67:57:9d:08:97:d4:9d:da:1a:ba:de:c3:1b:b9:49:e9:3b:de:
         0a:8c:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----