Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
File:                     OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft (raw, json)
Hash identifier:          Ra1H9kQezV5JRX9w4WpvdeiMOqoFFlpWgqLxHzIeY4I=
Subject key identifier:   46:35:4D:69:76:85:BC:B3:F3:21:07:E6:7C:67:D4:CB:BB:35:53:3E
Authority key identifier: 38:BA:0B:9D:0F:1F:67:4B:13:97:CF:CE:A6:DD:46:80:C8:35:1A:F9
Certificate issuer:       /CN=38ba0b9d0f1f674b1397cfcea6dd4680c8351af9
Certificate serial:       01962F3DAE43C6FBE94D09E8F7DC4355662F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
Manifest number:          F1
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl (hash: /VTfx5rg6tFw7GjZlMmsYnYeF9YYYcUyZ4pW4/k+6k0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ae:43:c6:fb:e9:4d:09:e8:f7:dc:43:55:66:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ba0b9d0f1f674b1397cfcea6dd4680c8351af9
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=46354d697685bcb3f32107e67c67d4cbbb35533e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:0b:17:dd:67:1f:c8:64:a6:26:32:b2:1b:
                    d3:a2:42:0d:27:f5:71:82:27:92:e5:b5:d2:84:6e:
                    cb:b0:7c:e3:51:16:fe:34:db:af:c8:0c:e6:16:41:
                    c7:bb:ba:d7:9d:84:07:40:65:69:5c:30:2d:a6:7d:
                    6d:c1:1d:8e:84:75:6c:14:08:4b:a1:1c:14:a7:5f:
                    4c:1c:b8:56:cb:dd:98:4c:37:c0:c6:ca:a7:d3:c8:
                    67:14:bc:5f:c9:86:bf:df:fa:74:f1:ba:61:69:45:
                    47:cb:68:30:42:3c:dd:90:9d:bf:6e:61:f0:26:99:
                    3e:1b:5e:cd:df:22:44:95:ae:61:2a:49:a8:69:a4:
                    4e:c5:00:22:71:bd:8b:d7:b4:a7:92:16:c7:be:9c:
                    e4:78:c2:f7:49:03:99:bb:42:0e:af:17:23:1e:98:
                    76:0c:47:b5:92:b7:f9:b3:a8:98:05:68:d6:73:27:
                    a0:fb:2e:7e:b3:7a:53:a5:f4:70:43:e7:94:4b:39:
                    67:04:9d:5d:3f:e8:34:12:0a:a3:85:cd:42:5b:5c:
                    0b:b7:d0:72:da:ce:6d:63:98:43:86:f4:3d:4f:00:
                    5d:04:78:8a:b6:b4:cb:66:ef:23:6b:8b:8b:2c:ed:
                    8e:38:e5:5a:a4:48:80:9a:40:17:03:b8:fc:ba:c8:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:4D:69:76:85:BC:B3:F3:21:07:E6:7C:67:D4:CB:BB:35:53:3E
            X509v3 Authority Key Identifier:
                keyid:38:BA:0B:9D:0F:1F:67:4B:13:97:CF:CE:A6:DD:46:80:C8:35:1A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:c1:5f:67:f8:a7:2b:30:f5:16:8c:dc:7a:98:97:8d:30:
         56:5d:26:f0:44:5f:68:5d:16:c1:f9:cc:d8:81:35:6d:8e:0f:
         7f:88:f8:d1:5d:ef:01:e9:dd:78:bd:e2:6f:6b:9f:02:74:b4:
         d6:c6:04:ef:a3:4d:52:c7:49:10:16:a7:f3:20:06:e0:d9:32:
         4c:0f:82:57:da:fb:24:c4:2b:51:79:37:fd:8f:7b:89:23:59:
         f5:e0:46:3d:01:2b:44:da:68:14:fc:29:c5:06:0d:4a:25:ba:
         58:5a:56:bf:02:f6:31:0d:20:d0:c6:36:0c:08:ee:01:bc:ef:
         21:a1:12:77:c1:a2:90:02:aa:3d:b2:c3:00:55:a9:80:27:a1:
         8b:66:79:da:68:30:77:c3:ba:e2:39:42:50:5e:a1:66:8d:00:
         6d:f5:61:d4:bd:67:ab:9d:49:ab:7c:dd:23:d0:b9:19:16:c2:
         36:77:2e:8e:57:c5:97:2d:e7:4e:9d:c2:4e:12:eb:fe:79:b2:
         d5:a5:d9:d4:d7:da:fa:0b:4c:ff:1b:e9:b7:5f:9f:70:37:a6:
         dc:c9:84:4f:95:4e:01:6e:63:76:d0:f8:c8:8b:d2:28:d4:d2:
         65:ee:89:6e:1a:75:78:6a:b3:47:ec:20:5c:4f:63:8c:a5:d5:
         7a:3e:77:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----