Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File:                     OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier:          rIFCJIS40c2YPuZ+2UItJhu4V9Zp33bQ/GlsiqARgzk=
Subject key identifier:   56:5E:19:89:B8:B3:82:97:EF:C9:D0:CB:34:87:85:A7:59:4D:4A:AA
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer:       /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial:       01962F74DC813D0AF84C9722BD50E41384EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: WtzR8hdyZsXOI+JObuBbj11iQw45USthWEuydyOIw2I=)
                          2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dc:81:3d:0a:f8:4c:97:22:bd:50:e4:13:84:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=565e1989b8b38297efc9d0cb348785a7594d4aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:81:46:7a:87:2b:e6:94:71:8a:0d:7d:84:
                    82:cf:94:c7:68:ee:bc:4c:d9:35:38:30:24:91:09:
                    f6:ba:9e:09:96:0b:bb:5e:12:96:03:e3:be:a9:6a:
                    43:0e:7f:18:d2:79:95:40:9e:1c:cb:28:b1:03:01:
                    72:35:ba:25:35:70:e8:cc:36:42:0a:07:64:19:55:
                    e0:58:32:09:d4:99:31:34:d6:6d:30:ca:fd:99:0a:
                    1a:c0:53:2e:99:b8:53:d9:b9:38:27:f0:4b:de:e9:
                    cd:24:df:73:d5:00:8e:a2:7a:79:dd:72:b9:c9:bf:
                    6b:c7:41:42:8f:80:2a:1c:a8:88:91:29:2b:a5:23:
                    a1:93:8e:84:e0:82:be:a5:86:17:24:3f:e0:90:28:
                    0a:04:cc:d7:12:62:4a:31:61:e3:ab:b5:40:d5:4b:
                    fb:a0:8d:46:89:01:d6:45:de:0e:23:48:5e:94:73:
                    31:20:c3:37:43:b4:9d:34:e1:75:fe:76:23:54:3d:
                    8d:2f:0c:f3:5b:96:47:ef:ee:48:1a:ae:05:11:81:
                    42:80:76:80:d6:7a:02:07:1e:57:58:01:19:f9:e6:
                    9a:3a:19:b9:ab:5b:65:c6:bd:6e:c6:27:8c:64:cd:
                    3e:b6:cc:f9:a9:8e:9b:f4:ca:59:42:66:4e:cb:84:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:19:89:B8:B3:82:97:EF:C9:D0:CB:34:87:85:A7:59:4D:4A:AA
            X509v3 Authority Key Identifier:
                keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:93:18:f5:cd:60:d7:de:04:5a:d9:be:e9:85:33:2a:00:
         75:b5:2e:b4:cb:68:90:e5:4b:2b:ce:88:66:3c:5a:df:64:ab:
         d8:0f:6b:3e:fa:99:56:28:9d:1d:d7:51:3e:e9:36:c9:bc:bc:
         33:4d:3e:b0:78:28:75:ed:f8:d5:eb:19:5e:83:8f:e9:e4:31:
         be:8f:08:b7:5d:60:27:1d:9a:97:d5:95:d9:5c:94:5e:c0:d3:
         91:0d:c4:f3:1d:58:28:09:f8:57:fd:62:96:7a:64:75:c4:dd:
         9e:ff:a5:ca:d6:4e:44:f1:07:d2:8d:bc:75:0b:ed:85:6f:f7:
         59:6a:b1:13:f1:fe:c7:b6:94:da:96:9c:6c:24:fb:fc:01:a4:
         9a:4f:2a:cd:1b:c7:38:68:ef:ca:89:9c:5f:fc:29:90:f8:a7:
         a3:98:9a:a7:f3:d3:72:33:b4:16:a5:3d:0b:14:e0:53:97:ac:
         d6:e5:72:bc:8e:bb:eb:e7:7a:1a:8f:09:05:d3:05:bd:20:29:
         79:35:b3:e7:7d:fc:49:78:56:78:a8:21:d2:57:73:80:b3:19:
         de:fe:8b:4b:00:8c:20:ce:2c:4f:c1:eb:b1:24:d9:bd:19:be:
         49:44:63:c6:91:b9:ff:64:86:18:e2:c1:13:2b:c8:48:d2:b0:
         d2:65:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----