Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File:                     OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier:          yPkfQwKjE6pLFAvpkR5LiLxW/9Su51nSdsgXKqnrwj8=
Subject key identifier:   70:68:91:BD:94:3F:96:87:36:F7:69:67:2C:1F:8B:37:F3:C2:5F:A6
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer:       /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial:       01962F3DC1D90CEAF9406F20A99C46B33E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number:          C9
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: K0/e0lR9P4PZZXkgZY9XSC1prb1FToPYPfCSWRebvKM=)
                          2: b1pNAkro7aHA3V-NejpmqoURwAk.roa (hash: spfghQnj6hS6URb2NmqLLwW6s6Py+YxHJ+ws3VJ1shQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c1:d9:0c:ea:f9:40:6f:20:a9:9c:46:b3:3e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=706891bd943f968736f769672c1f8b37f3c25fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:4b:5e:78:67:a8:51:21:6a:34:39:91:3a:
                    b6:7e:cc:b4:b1:45:59:ab:2a:9d:9c:b6:ed:65:46:
                    41:6d:1d:79:e8:1c:ef:eb:9d:79:39:8a:d1:8f:e6:
                    6a:65:d7:e7:34:8c:90:db:3e:70:7f:05:01:79:f3:
                    2d:cd:db:22:59:e9:fb:0f:42:0c:8a:ec:45:a7:68:
                    df:9b:ca:f9:d8:11:f4:da:36:05:55:d9:95:7e:65:
                    07:a9:7a:3a:8c:e3:10:06:31:0f:d4:31:47:69:bf:
                    b3:6e:e2:df:47:dc:05:e7:9a:37:df:57:53:a0:87:
                    0b:0e:7d:a0:70:04:85:5e:5a:c0:33:5e:99:59:96:
                    fa:02:08:ee:f3:75:88:25:cc:29:f8:45:14:c7:4d:
                    58:3c:dc:f5:a2:0b:5f:60:b8:00:b9:6b:b2:ee:1f:
                    3b:30:57:30:1e:02:89:ed:55:ff:20:e7:69:05:7b:
                    00:1e:15:88:e3:d3:ab:5c:64:4f:84:45:9c:20:c0:
                    ed:59:0e:46:52:d1:77:7f:c1:74:c4:dd:ac:f3:18:
                    a5:15:ab:e4:06:a1:a9:9b:88:ee:3c:03:b8:ac:65:
                    12:df:04:8c:e6:dd:e3:ef:d3:a8:0e:2b:52:91:77:
                    48:a4:3b:e1:1b:76:33:cc:c1:58:fc:cd:1c:53:b2:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:91:BD:94:3F:96:87:36:F7:69:67:2C:1F:8B:37:F3:C2:5F:A6
            X509v3 Authority Key Identifier:
                keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:88:83:44:91:c0:4b:91:6d:bf:cf:56:79:af:ee:63:79:44:
         cd:c1:6d:05:df:07:3a:31:80:53:6b:e7:13:72:02:f5:ed:b7:
         98:de:15:3e:90:e1:d5:49:76:43:7c:2c:c9:d6:90:01:92:ff:
         44:6d:92:fb:29:01:1c:3b:32:7c:8b:50:29:82:e2:fa:31:96:
         1d:63:ea:f3:2f:b0:36:f5:1c:79:52:59:1a:65:d0:56:da:bb:
         f2:1c:bb:1b:a5:2a:7c:6f:c0:28:a2:71:36:15:51:30:ba:de:
         a4:e1:66:28:f4:27:85:14:86:02:d2:ba:ec:da:c8:74:a6:c5:
         d2:84:90:54:48:b0:18:23:73:a0:8f:05:48:a2:81:6b:fc:fb:
         64:cc:24:ea:c6:1f:70:04:fc:a7:df:dc:19:48:73:f7:fe:50:
         b6:d0:13:8e:2c:ab:dc:56:88:87:60:a4:1b:e2:0f:5c:06:13:
         3f:7a:12:fd:46:60:89:1f:6c:6e:54:ee:7d:d5:d2:e6:67:59:
         0c:41:45:de:40:6d:b0:29:f6:dc:fa:03:d7:62:98:58:15:b7:
         3b:9d:b7:df:3b:10:0b:47:1e:2d:7f:2c:86:1d:8a:29:39:53:
         66:7d:06:a1:34:67:90:ee:b7:6c:36:e8:8b:6d:84:12:43:36:
         e2:5a:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----