Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          ZN67k64Oy5C8BayX8sS8jelhjQZhLviITS0Qxrl014w=
Subject key identifier:   BA:A1:96:A7:68:D4:4E:19:4E:AD:06:41:09:AB:C4:50:44:E4:3F:7A
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       01962FAB31946D20DDBDD9C9AF2F9B3A79F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: pOAIt7hcvZQ1sD1SQ0dHlgYtNWysg2qVcRCeGjMIwHg=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:31:94:6d:20:dd:bd:d9:c9:af:2f:9b:3a:79:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=baa196a768d44e194ead064109abc45044e43f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:8a:25:bf:01:d7:a3:36:7e:8b:3a:3e:0c:
                    a9:36:31:43:48:64:0c:26:b5:ab:7d:69:ad:d2:32:
                    16:9f:0d:8f:ee:cd:31:a0:fc:c4:37:8b:b8:12:fb:
                    a2:b2:4d:3f:cc:23:22:17:5c:c5:e6:4b:55:69:af:
                    54:ff:ac:e1:34:18:e7:a0:47:07:24:68:8a:ad:6c:
                    9e:b7:fb:d7:e3:ba:98:e7:22:95:92:4d:ba:9e:5e:
                    ff:57:17:0d:88:4d:16:70:77:b3:f9:b7:79:cc:2b:
                    fb:92:96:03:3e:9c:72:a0:c8:45:e0:ab:dc:3e:75:
                    3c:11:ac:0f:71:4c:4c:51:dd:43:4e:a7:f9:ba:69:
                    81:1d:23:03:d0:dc:87:09:91:b4:20:f3:58:41:19:
                    fb:2c:78:f6:46:a2:ae:30:c9:16:a4:64:51:f3:8d:
                    a3:cb:3e:92:10:e7:d7:f4:f9:d4:38:71:a9:a5:89:
                    75:75:b0:02:98:a7:aa:de:06:38:1d:0d:79:8c:65:
                    57:81:1d:4f:b9:a4:1f:23:7d:5c:a5:6f:47:3b:e2:
                    1d:0d:73:75:b5:39:dd:1b:2b:cd:49:11:63:31:77:
                    a4:9a:36:97:08:6b:69:72:db:05:96:fa:d0:89:d6:
                    24:ed:08:26:78:1a:59:85:63:69:f5:44:e1:e7:97:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A1:96:A7:68:D4:4E:19:4E:AD:06:41:09:AB:C4:50:44:E4:3F:7A
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:e0:3a:cd:bd:e0:f3:29:73:60:ab:d6:9a:58:64:d0:40:
         f6:c2:fd:7b:67:d1:1e:a8:55:a6:ad:18:41:ac:ce:e7:d9:a4:
         68:89:0c:a4:15:2d:74:ef:2f:2f:a9:ea:cd:8e:66:81:3d:19:
         93:87:e9:c9:cf:15:b5:95:ed:11:4e:23:5c:23:bf:f7:a7:a0:
         96:6d:37:08:3a:b7:08:d9:04:db:bc:21:ba:be:2e:c3:bc:ca:
         31:d9:e9:e5:a6:65:b9:dd:f3:1c:4b:f6:a6:9a:c8:e8:f8:9c:
         12:e1:d5:7a:4a:c3:f0:ff:55:36:0d:b8:06:e7:06:60:c8:8d:
         32:e1:b1:86:7e:63:fd:f6:b3:31:cd:40:ab:c4:4f:15:f1:4e:
         97:7c:1c:81:ef:fa:3c:62:9a:04:85:f8:90:2a:d1:fd:d9:ba:
         89:67:b1:05:46:e2:eb:93:27:3c:4f:b2:fa:d5:df:a3:94:9d:
         f4:8d:fc:20:b9:83:ad:69:a1:5c:b0:6e:ee:e8:45:95:94:10:
         52:a9:d5:82:ce:9b:ae:f6:b9:0f:c7:5d:c2:87:36:9f:5f:5c:
         08:5b:87:07:2c:4e:90:de:ce:12:70:ad:23:bb:90:40:97:3e:
         23:63:a0:cb:1c:b3:d4:fc:de:34:31:f1:d8:c2:c3:c7:64:d2:
         c2:38:20:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----