Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File:                     oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier:          9tRa2MVWqNPspIwlPeidJ7diKSJx7hq9vsO93PUuTOg=
Subject key identifier:   93:ED:98:0C:2B:55:6F:8E:34:E6:72:85:CC:9A:75:36:E5:D0:8B:AC
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer:       /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial:       01962ECFCA46E4137D1ACE5AD73BA9315B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
                          2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: pwpyvg8u47pemXHCbRqWB9aSbTpJgfl3OAyLMNwZA6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:46:e4:13:7d:1a:ce:5a:d7:3b:a9:31:5b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=93ed980c2b556f8e34e67285cc9a7536e5d08bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:c8:1e:8b:a3:ca:af:3e:94:e4:cc:97:c5:
                    b0:89:39:67:6c:c7:cc:05:24:ef:45:4f:99:0e:f7:
                    b3:23:20:28:cc:6a:2b:d3:74:7e:fa:05:ac:de:aa:
                    a8:0d:d6:53:87:bb:97:40:2c:a8:bb:57:42:4c:0c:
                    0b:51:93:c3:d3:6c:a5:07:f1:5e:c9:1b:c8:cc:91:
                    54:a5:a7:c1:a8:5b:f6:cb:9e:66:76:24:f7:d3:63:
                    5d:5e:2d:63:6a:99:f8:42:f2:5f:3d:42:a1:cb:23:
                    18:d9:ec:ad:6d:c9:e9:3b:1f:9a:40:99:e7:8b:5f:
                    3a:31:b7:b9:bb:36:54:da:d7:6b:4e:ea:5c:68:7b:
                    bd:68:6c:e1:02:0e:97:c2:5f:34:3d:1a:ce:a0:6f:
                    e1:fa:6d:e5:23:62:be:4d:ad:57:70:6f:c9:8a:2c:
                    2b:7f:58:5c:08:d5:fc:d1:96:24:b6:f5:23:f5:c4:
                    56:bc:af:6b:a6:34:f9:0b:67:e2:ad:a3:98:ee:0a:
                    c7:e2:c7:42:32:ee:4e:cf:4a:6c:ac:c7:c9:7f:e7:
                    70:8d:3b:df:82:6e:1a:b0:52:49:8e:d2:6a:79:90:
                    31:47:d9:0a:61:2a:22:5f:fb:c9:84:d6:86:3f:ce:
                    25:64:3d:fb:79:40:be:a3:a8:10:5d:4c:0f:b1:ae:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:98:0C:2B:55:6F:8E:34:E6:72:85:CC:9A:75:36:E5:D0:8B:AC
            X509v3 Authority Key Identifier:
                keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:f4:c3:6c:d3:c8:a3:28:7a:c8:c5:d0:88:5c:65:b8:b7:
         2e:04:e9:59:b8:3e:05:ba:ec:ce:03:da:b1:9b:d1:3d:d3:1d:
         8f:0c:a7:4c:a9:93:d9:5e:71:c0:7b:d9:0b:76:c0:c3:a2:ee:
         e7:dd:db:cd:12:84:de:21:b7:12:c4:07:51:7c:a3:b7:21:37:
         02:12:f1:93:0c:41:29:4b:ff:2c:1c:48:97:d2:a4:ee:a6:ed:
         4e:5a:ff:4e:90:f0:8d:1e:f5:0c:98:e2:80:0f:4a:14:dd:c9:
         9f:44:ba:53:d1:5d:f0:23:d4:d9:55:53:eb:08:98:d0:d5:71:
         46:df:70:c5:79:10:94:79:25:d8:5d:89:a2:d2:b1:59:85:c3:
         5e:fe:9a:75:bd:eb:a6:a6:bc:bc:f2:9a:c6:91:50:7b:78:67:
         89:8c:cf:74:5b:1e:35:fc:ee:c3:e7:0b:ba:3a:64:dc:3f:43:
         ad:f1:dd:b5:6f:cf:8a:98:45:8e:0a:f7:71:64:0e:f2:3d:85:
         a6:77:23:0e:52:7c:8f:52:7f:12:47:fd:0a:17:07:dd:dd:1e:
         9f:09:99:83:ec:b6:3a:67:33:69:fb:7a:e9:50:90:03:b7:e4:
         c4:65:0b:5e:e0:2f:56:cd:49:41:da:c4:d1:41:4b:29:3c:ef:
         33:20:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----