Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File:                     OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier:          j/3sKQaysrMPVEOp9EY1jlue1xzOHApsE6lCCY1cE9s=
Subject key identifier:   D1:8B:74:17:C4:32:11:67:39:82:C1:07:B0:00:04:DD:54:55:A6:BC
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer:       /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial:       01962E99658BCF28628A05434A9F44FC423C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: iUuHmVpOwecyofsp1RFFF5+vwWkh0ZJl0Tp1DScUfXw=)
                          2: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (hash: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:8b:cf:28:62:8a:05:43:4a:9f:44:fc:42:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=d18b7417c43211673982c107b00004dd5455a6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:33:26:04:3c:9f:0c:c8:f2:2e:f0:cd:6e:
                    5c:4a:fb:fd:ad:f6:1a:2a:a7:76:f1:19:51:f2:4c:
                    4a:03:7e:8e:aa:34:18:dc:61:94:8c:32:2b:00:51:
                    6c:1c:83:c7:d8:45:71:40:78:9a:58:7b:ff:f5:e2:
                    7e:67:3c:d4:17:61:e6:3b:3d:9c:38:24:0a:e2:24:
                    85:d6:26:fe:7c:1a:8d:f8:19:c3:6d:07:1c:5b:17:
                    ff:0d:c1:50:bc:a0:19:57:00:28:2c:3d:5b:7b:9e:
                    29:32:6c:15:83:7a:4d:e1:d8:fb:06:10:9d:cd:a2:
                    a0:39:bd:3c:74:ce:c4:2f:1f:0b:dd:52:49:db:8c:
                    cf:3f:ff:e4:1d:97:11:3c:2a:47:51:af:1e:10:e2:
                    ae:cc:ed:00:22:f4:ce:f3:2e:c7:66:2f:64:76:03:
                    1d:cc:a5:f2:88:33:c2:18:55:e2:5b:c7:0f:59:da:
                    2a:6f:d2:11:5a:02:67:e2:20:1e:01:f0:3b:e7:b5:
                    62:47:3b:0e:95:85:b0:e0:31:60:ae:27:ab:32:4d:
                    25:93:94:a1:dd:d8:4d:29:9d:1a:ea:e8:fa:13:fd:
                    cb:c9:a8:f9:94:90:9e:d6:cd:a3:f1:d4:20:58:ba:
                    0c:cf:0e:f7:23:c7:33:8e:67:14:b0:de:d4:47:c5:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8B:74:17:C4:32:11:67:39:82:C1:07:B0:00:04:DD:54:55:A6:BC
            X509v3 Authority Key Identifier:
                keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:f5:31:7d:11:f9:44:d1:62:da:46:37:82:86:48:9d:3b:
         28:6e:a9:81:4e:f9:83:11:a6:e3:30:35:0a:7a:7d:c7:d5:85:
         97:4c:4b:66:c9:db:5e:2d:95:2e:7d:3a:3e:5c:56:f9:21:3e:
         31:05:17:bb:a1:ee:fe:d7:ec:2a:99:c8:1d:f1:2c:6c:80:b6:
         10:09:88:3b:45:81:53:12:15:8c:56:52:74:c3:2b:b4:61:b9:
         7a:ba:ce:54:1f:83:8a:61:2a:d8:6b:98:9c:ae:90:ba:0d:fa:
         c0:b6:a2:a3:9b:d7:73:d1:be:29:47:8f:9f:e8:03:8a:c6:59:
         8a:38:a4:29:fa:c8:21:8d:65:f8:6f:4b:7a:8c:03:06:bd:74:
         95:dc:92:2c:34:df:8e:a4:53:c0:6d:e2:4f:55:dc:fa:de:00:
         76:cc:5d:08:a7:ae:9c:aa:8e:74:6d:d7:ce:47:dd:14:23:2c:
         6b:7b:78:7b:47:db:34:7c:87:f0:6e:24:13:6b:ee:37:d2:22:
         b1:93:79:ba:01:c0:1c:21:b8:ea:cc:de:31:6e:43:ce:00:d6:
         50:7c:bf:c9:4e:1f:0a:f1:0a:2f:7d:0c:51:b7:aa:97:fe:ba:
         0d:1f:aa:6e:65:e9:86:2f:f4:e5:f9:ce:bc:b7:87:0a:19:ff:
         26:52:02:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWWLzyhiigVDSp9E/EI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Nzg3OWFmZjJjNDM2OWQwNmM0ZjExOWE2ZmQ3YTVhMTNk
Yjg2OTcwHhcNMjUwNDEzMTAwMjA2WhcNMjUwNDE0MTAwMjA2WjAzMTEwLwYDVQQD
EyhkMThiNzQxN2M0MzIxMTY3Mzk4MmMxMDdiMDAwMDRkZDU0NTVhNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliszJgQ8nwzI8i7wzW5cSvv9rfYa
Kqd28RlR8kxKA36OqjQY3GGUjDIrAFFsHIPH2EVxQHiaWHv/9eJ+ZzzUF2HmOz2c
OCQK4iSF1ib+fBqN+BnDbQccWxf/DcFQvKAZVwAoLD1be54pMmwVg3pN4dj7BhCd
zaKgOb08dM7ELx8L3VJJ24zPP//kHZcRPCpHUa8eEOKuzO0AIvTO8y7HZi9kdgMd
zKXyiDPCGFXiW8cPWdoqb9IRWgJn4iAeAfA757ViRzsOlYWw4DFgrierMk0lk5Sh
3dhNKZ0a6uj6E/3Lyaj5lJCe1s2j8dQgWLoMzw73I8czjmcUsN7UR8XJWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGLdBfEMhFnOYLBB7AABN1UVaa8MB8GA1UdIwQY
MBaAFDl4ea/yxDadBsTxGab9eloT24aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84NmVkNmQtZTEyNi00Mjc5LWFkOTgt
NjY5MmZjNjE5NTY3LzEvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84NmVkNmQtZTEyNi00Mjc5LWFkOTgtNjY5MmZjNjE5NTY3
LzEvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPj1MX0R
+UTRYtpGN4KGSJ07KG6pgU75gxGm4zA1Cnp9x9WFl0xLZsnbXi2VLn06PlxW+SE+
MQUXu6Hu/tfsKpnIHfEsbIC2EAmIO0WBUxIVjFZSdMMrtGG5errOVB+DimEq2GuY
nK6Qug36wLaio5vXc9G+KUePn+gDisZZijikKfrIIY1l+G9LeowDBr10ldySLDTf
jqRTwG3iT1Xc+t4AdsxdCKeunKqOdG3XzkfdFCMsa3t4e0fbNHyH8G4kE2vuN9Ii
sZN5ugHAHCG46szeMW5DzgDWUHy/yU4fCvEKL30MUbeql/66DR+qbmXphi/05fnO
vLeHChn/JlICYQ==
-----END CERTIFICATE-----