Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File:                     _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier:          U+1sMHAi2PloXcr8NuAOtvQqVudaVIPJnKXUlHGlTcU=
Subject key identifier:   3A:84:E4:8C:75:79:F4:00:ED:51:7B:E1:85:63:3E:F5:CE:71:CF:9E
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer:       /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial:       01962E2B0821EA6F6CC78638791BAA4E9E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: dkALtNRtpiFL43tlTaqlquU/ZAH/4m4l/bfKfbp0zWM=)
                          2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:08:21:ea:6f:6c:c7:86:38:79:1b:aa:4e:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=3a84e48c7579f400ed517be185633ef5ce71cf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:2a:02:77:cc:88:05:eb:7c:ef:17:56:5a:
                    d6:dc:ba:3a:5a:8f:29:8c:8d:ca:48:18:49:5e:71:
                    c6:c1:41:48:17:0d:62:3e:ee:f2:a2:59:4d:a4:14:
                    78:75:39:1c:b4:14:c8:84:b8:8e:94:28:b7:05:96:
                    11:11:6a:76:d5:cb:e5:72:b0:95:9d:0c:f0:7f:65:
                    78:d8:34:40:64:95:e2:84:e4:16:64:33:b2:d5:48:
                    3b:19:d4:a8:96:12:cf:ab:25:03:c9:86:ea:d0:a0:
                    1e:17:e8:f3:2d:77:56:ee:b9:d9:7e:e8:25:ed:3e:
                    c1:d2:c1:46:2b:d9:ff:0b:2b:1b:73:29:18:24:45:
                    83:56:b3:c7:8d:e5:ec:9b:08:62:da:76:0f:d6:1f:
                    3d:b8:88:d0:26:7b:e5:f8:53:7d:a8:0d:c1:68:72:
                    13:93:86:ba:35:36:8c:83:97:ba:9a:73:f9:20:01:
                    6d:64:19:6c:90:2c:e7:d8:92:dd:63:57:26:a5:43:
                    6d:af:a4:08:03:de:16:f2:16:0f:d4:f5:a7:f0:78:
                    e9:77:39:0d:89:fc:ed:6a:4a:ff:ea:61:83:0e:80:
                    39:7e:c4:cc:5a:e7:28:75:5e:9c:ad:aa:6a:df:04:
                    40:0d:c5:3d:b9:b8:56:65:4c:d9:7c:a4:f6:6d:3a:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:84:E4:8C:75:79:F4:00:ED:51:7B:E1:85:63:3E:F5:CE:71:CF:9E
            X509v3 Authority Key Identifier:
                keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:fd:39:98:76:61:03:75:2c:ad:f9:59:9e:cf:0b:02:f5:
         8d:ee:42:59:45:7c:1d:1f:71:a3:78:d3:f5:4f:b1:da:f9:46:
         67:f5:44:fd:d1:9e:04:cc:f1:4f:e4:cb:8a:0b:96:5e:03:7b:
         20:d6:fb:30:fc:75:9c:1e:d3:0b:ba:95:14:6a:42:04:67:03:
         9b:2f:52:f5:d1:0d:61:de:a8:b2:db:33:de:d3:c6:0d:72:60:
         ce:fc:5c:1a:8b:dc:29:1e:91:8f:4f:fb:75:14:76:70:6d:20:
         94:02:da:19:aa:dd:c8:59:53:0a:7a:1e:bf:37:12:b4:ae:40:
         d3:48:5b:f1:cf:52:d3:49:b2:5c:44:b7:60:0c:a3:2c:3f:d7:
         b7:60:7d:bc:25:77:0d:74:9a:26:44:f3:2e:58:af:06:b5:07:
         07:84:c6:f3:cf:ba:39:42:40:73:e9:c4:93:0c:23:fc:28:db:
         b6:81:1c:ce:5c:95:2a:5f:43:0b:45:98:94:3b:25:f8:37:75:
         f1:2b:62:1e:e3:79:2b:46:16:8b:9e:c3:72:60:4c:4e:e2:a6:
         38:d8:ae:f6:1f:97:57:25:2a:eb:ec:0b:a8:3f:f6:44:38:47:
         ee:22:04:7d:8e:38:df:7e:29:f0:e5:26:13:9d:6b:c2:c3:85:
         ac:d8:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----