Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File:                     OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier:          9SINhq99oHlYg5wATrD/w/uOwxrP8g4ncABZE2Dezlw=
Subject key identifier:   6D:4F:F0:1B:57:44:7E:03:47:AB:5A:B3:1B:C9:32:6D:05:3C:4F:4D
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer:       /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial:       01962ECF519FCD77428799F11A942D47039F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number:          0FF1
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: DUYlFbh6FULGzgdthf_PMDp6hOU.roa (hash: JR7UbEi2bM6dLHHY3xrq1gui3NHbn1GkWRWkFGTRYw0=)
                          2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: Utity/JcknkoTa4/h41dSFpYQeMakVOPaJ2McYILgs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:51:9f:cd:77:42:87:99:f1:1a:94:2d:47:03:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=6d4ff01b57447e0347ab5ab31bc9326d053c4f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:f3:08:c1:8a:f7:89:b9:f4:a1:e8:ec:b8:
                    01:1a:4d:e4:c5:bf:7e:9b:9a:d5:c6:19:50:0d:4b:
                    14:82:02:1a:2b:65:03:7d:ed:96:0e:2f:e8:2b:73:
                    05:01:00:33:98:fe:bb:a7:01:36:86:78:60:3e:a3:
                    ca:0c:87:9e:50:7e:5c:09:96:38:92:c3:ff:16:38:
                    e2:a5:4c:ce:11:c0:2c:f4:41:2e:62:5b:45:4c:fd:
                    b3:18:5e:57:dc:4f:25:2f:82:9c:7b:b1:78:6d:9d:
                    65:59:69:92:5e:c0:61:47:d8:29:b2:a9:60:c0:16:
                    31:a2:93:84:32:75:70:3f:4a:47:ec:eb:7e:dc:02:
                    1f:e7:c7:1d:8d:13:bd:8a:30:1e:3c:6f:8b:5e:b7:
                    b3:f5:6d:fd:5f:25:b6:95:28:c0:d3:f8:a6:52:49:
                    bf:15:63:5d:ef:35:fc:07:60:ad:fc:15:e4:d9:bb:
                    96:85:af:13:c4:0b:09:e9:47:b4:b3:50:c3:92:50:
                    a1:6a:28:07:a7:69:06:f8:e2:c2:3b:d4:31:6d:94:
                    f4:b1:d4:27:8c:48:e4:94:52:85:27:c2:61:44:76:
                    a5:be:8f:cf:cc:29:af:82:4b:45:9b:59:ea:2a:b3:
                    91:11:d6:be:a2:ec:ab:26:d8:6f:6c:dd:37:99:fa:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4F:F0:1B:57:44:7E:03:47:AB:5A:B3:1B:C9:32:6D:05:3C:4F:4D
            X509v3 Authority Key Identifier:
                keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:83:45:d7:1e:46:67:66:06:2a:f9:f9:ec:ab:2f:45:bb:
         b9:d1:de:3e:36:f8:a0:41:ef:74:f3:f2:54:49:cd:34:c7:38:
         8f:8e:0f:41:c6:43:d2:ab:43:0a:fa:de:64:d7:b1:50:a4:d8:
         d9:94:38:8a:88:4d:45:db:db:0d:e4:80:dd:7b:f4:e7:ac:54:
         61:2c:fc:da:57:7a:e2:d3:27:da:99:7a:69:9c:4a:d2:aa:b8:
         dc:aa:f5:81:3a:75:82:b2:78:77:d2:5d:db:f1:dd:09:2d:02:
         eb:b1:7b:50:a5:32:5e:66:d2:b1:4c:d8:58:30:08:78:be:42:
         98:21:38:4d:5d:12:e3:f3:73:21:30:ef:8f:ef:9c:db:c3:e3:
         c6:62:c9:cb:43:ce:2a:ac:83:38:0b:b1:83:f4:97:3e:8f:5a:
         21:06:58:5b:bb:ce:e8:f3:76:e0:0b:e1:e9:67:10:85:35:de:
         35:f2:6a:b3:20:4a:6e:f4:0c:fe:90:97:39:25:1d:a0:d3:7c:
         d0:fd:61:02:25:a2:ea:db:5a:fb:02:16:52:aa:f1:59:e9:df:
         18:b7:0d:0d:a6:29:75:da:95:ee:d5:6d:be:55:01:44:a6:e8:
         05:91:0d:43:ed:b9:c7:68:62:11:d8:f4:10:4f:a9:99:fd:eb:
         66:27:e8:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1GfzXdCh5nxGpQtRwOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDFiMTU1YWFiNmQxMjI5ZmQzNDhlYWEwM2QwZjc5MDNm
MTI2N2EwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
Eyg2ZDRmZjAxYjU3NDQ3ZTAzNDdhYjVhYjMxYmM5MzI2ZDA1M2M0ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dvzCMGK94m59KHo7LgBGk3kxb9+
m5rVxhlQDUsUggIaK2UDfe2WDi/oK3MFAQAzmP67pwE2hnhgPqPKDIeeUH5cCZY4
ksP/FjjipUzOEcAs9EEuYltFTP2zGF5X3E8lL4Kce7F4bZ1lWWmSXsBhR9gpsqlg
wBYxopOEMnVwP0pH7Ot+3AIf58cdjRO9ijAePG+LXrez9W39XyW2lSjA0/imUkm/
FWNd7zX8B2Ct/BXk2buWha8TxAsJ6Ue0s1DDklChaigHp2kG+OLCO9QxbZT0sdQn
jEjklFKFJ8JhRHalvo/PzCmvgktFm1nqKrOREda+ouyrJthvbN03mfoOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1P8BtXRH4DR6tasxvJMm0FPE9NMB8GA1UdIwQY
MBaAFDpBsVWqttEin9NI6qA9D3kD8SZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUt
MmIzYjRjNzgwNDE5LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUtMmIzYjRjNzgwNDE5
LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisCDRdce
RmdmBir5+eyrL0W7udHePjb4oEHvdPPyVEnNNMc4j44PQcZD0qtDCvreZNexUKTY
2ZQ4iohNRdvbDeSA3Xv056xUYSz82ld64tMn2pl6aZxK0qq43Kr1gTp1grJ4d9Jd
2/HdCS0C67F7UKUyXmbSsUzYWDAIeL5CmCE4TV0S4/NzITDvj++c28PjxmLJy0PO
KqyDOAuxg/SXPo9aIQZYW7vO6PN24Avh6WcQhTXeNfJqsyBKbvQM/pCXOSUdoNN8
0P1hAiWi6tta+wIWUqrxWenfGLcNDaYpddqV7tVtvlUBRKboBZENQ+25x2hiEdj0
EE+pmf3rZifoIQ==
-----END CERTIFICATE-----