Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
File:                     oWhu-kcXfglRrIjFZNj4hQvuxdA.mft (raw, json)
Hash identifier:          2XRrC7/ahUAYeW6GyafsJ/au/rL8J3pVijXY2SGCQuU=
Subject key identifier:   DB:01:1B:C0:1C:64:05:B2:A3:83:62:2E:45:73:4F:20:8D:89:46:58
Authority key identifier: A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
Certificate issuer:       /CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Certificate serial:       01962F3DA996D8F3DF9AEB6CC0D3A790C8DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
Manifest number:          0B7A
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: oWhu-kcXfglRrIjFZNj4hQvuxdA.crl (hash: dqRBU/HjsZUSjZYIzzp0LUfW9mnIQOKDUQyHkwrLgQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a9:96:d8:f3:df:9a:eb:6c:c0:d3:a7:90:c8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1686efa47177e0951ac88c564d8f8850beec5d0
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=db011bc01c6405b2a383622e45734f208d894658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:7f:6f:be:39:25:f6:b4:f5:1c:2d:5f:a4:
                    2f:df:86:bb:2a:03:9a:43:0b:4e:d0:aa:95:f3:10:
                    c1:65:a4:e1:a7:01:98:7a:51:fc:c1:ba:40:b8:06:
                    a5:83:33:73:a4:c8:7e:87:0f:b0:8b:e1:c4:a4:f9:
                    57:3c:8d:d7:e4:98:d9:c1:e0:ac:eb:2d:87:e9:4f:
                    11:ed:96:bb:1c:30:c6:80:d1:b8:19:d9:89:e9:f8:
                    89:fa:00:0a:98:cf:da:c9:ea:8c:9a:5f:de:94:90:
                    f2:6f:cb:08:4a:38:4e:53:ad:b0:ab:5a:c2:92:99:
                    11:ff:b7:4c:84:0e:e8:5a:52:a2:ed:05:00:ef:c4:
                    56:d4:de:33:f6:d0:7d:02:08:35:65:61:7d:d8:31:
                    9f:4b:da:9d:58:94:53:a0:80:26:45:eb:28:c8:a6:
                    c7:4f:fb:4e:94:bc:9a:57:f3:cc:ec:36:3c:bc:bc:
                    c7:93:c6:ef:c6:8e:bf:94:c7:8c:0a:92:3b:73:66:
                    f9:13:03:0a:cb:b6:e1:56:6d:4a:73:d5:e6:26:4b:
                    3f:83:35:9b:79:d1:57:7b:ef:99:05:39:55:ac:7f:
                    01:30:7d:98:2c:cd:af:df:4b:c4:d7:20:ab:84:d9:
                    75:0d:9f:b8:b0:b2:57:fa:a1:01:16:ab:41:cc:d1:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:1B:C0:1C:64:05:B2:A3:83:62:2E:45:73:4F:20:8D:89:46:58
            X509v3 Authority Key Identifier:
                keyid:A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:37:04:d3:78:80:06:89:87:6b:24:fb:3b:a6:bb:93:30:
         3f:a3:a6:e6:5d:95:c5:18:ed:46:f2:77:47:3d:e5:4f:15:79:
         11:d7:c7:08:f1:b3:80:21:67:9d:41:66:8c:46:ed:f3:52:e1:
         6a:0c:32:e2:af:14:8f:65:68:b4:de:e1:44:6c:cd:4b:dc:88:
         e2:48:20:ae:6a:b2:ff:65:55:ec:35:c5:c0:fa:b0:17:0a:df:
         b7:b2:6e:30:4a:a4:a6:f8:4e:ed:a6:fd:7c:82:46:f2:5c:e0:
         c0:d6:46:75:ed:b2:cf:83:92:ac:e9:0b:cc:a2:9f:14:6c:68:
         88:7a:79:e2:cd:aa:0c:d9:7f:b0:eb:59:08:1a:0b:1b:01:cf:
         54:95:44:c8:b8:c3:68:19:1d:76:7d:c2:56:1f:3d:0a:4c:d2:
         05:f2:e5:9b:80:5f:f4:12:16:8f:50:80:06:bf:c9:f5:1b:91:
         b0:9c:f7:e4:fe:2a:9a:0d:32:8e:16:5a:7e:c6:8e:85:80:8a:
         05:55:7f:85:90:26:3e:98:16:03:49:64:36:49:38:92:2b:2f:
         7c:3d:ca:12:b1:02:a8:f7:f6:04:aa:34:29:cb:fa:01:35:de:
         84:fd:35:0e:20:62:a3:9f:04:c3:02:f2:f4:7e:51:f5:27:5f:
         00:30:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----