Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File:                     ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier:          c96g5f9ZBFaywLFxh+Hm3Q3/36oha6uXZbohCm9av34=
Subject key identifier:   79:D7:97:09:31:7B:91:E4:6B:DE:31:89:35:29:99:7D:04:23:B0:1D
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer:       /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial:       01962DF3F747877305D0026209ED4FC7EA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number:          117B
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: eHi72hjsa5sIXP8ZAv6sKnPl0XYPa37/HeEXZPFpruw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f7:47:87:73:05:d0:02:62:09:ed:4f:c7:ea:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=79d79709317b91e46bde31893529997d0423b01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:10:fd:39:8f:c6:26:74:dc:70:23:13:18:
                    b4:90:bb:65:dd:40:e3:6a:e7:26:dd:7c:5f:58:70:
                    26:ca:5e:27:3c:3e:6b:cf:41:8a:06:89:d5:e6:e7:
                    9d:e4:22:2f:8f:07:b9:59:0d:cf:ff:ca:5b:17:59:
                    be:12:ba:51:88:ac:84:f3:b6:e8:b0:cf:33:de:be:
                    5d:24:42:b2:f9:b0:23:c2:64:8b:4a:51:33:ba:05:
                    90:b7:c2:18:62:63:b7:e5:3f:bb:58:46:68:bd:a8:
                    fa:da:82:19:89:a9:2e:21:52:8c:bf:0c:bd:34:f2:
                    a1:80:43:db:27:23:68:09:1a:1d:23:a4:3e:3e:95:
                    0e:b8:ec:56:01:ba:51:c3:13:24:13:fc:ba:e2:28:
                    a5:cf:f9:84:97:96:3c:17:c5:2f:1a:5e:42:f4:14:
                    aa:25:1b:f4:52:cf:e0:f0:98:bb:33:ea:fb:dd:c9:
                    03:30:7f:8b:70:05:e2:85:8e:c4:7c:f2:aa:ae:42:
                    75:7f:83:ee:08:14:46:1d:f6:8d:f9:57:4e:21:77:
                    c2:d2:98:80:5c:a3:1b:41:94:92:dd:27:2a:90:5e:
                    46:b1:41:7a:4a:f0:56:37:39:b5:97:66:f9:33:98:
                    06:f6:74:c5:23:11:99:c6:61:93:f7:f5:c7:72:6a:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:97:09:31:7B:91:E4:6B:DE:31:89:35:29:99:7D:04:23:B0:1D
            X509v3 Authority Key Identifier:
                keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7b:b7:ad:06:ec:0d:6c:44:82:6b:5f:f6:52:ef:67:9b:48:
         c2:7b:14:69:74:93:f8:a1:a5:41:2b:2a:1e:18:ff:db:dc:4e:
         a1:24:d2:90:3d:f5:2c:2d:ce:31:f7:15:70:81:94:d0:81:eb:
         de:10:e3:9d:8c:90:89:e1:d9:50:9b:e1:8d:ad:63:31:28:a2:
         96:7f:2d:e8:72:94:aa:e4:4c:06:8b:e4:74:8b:46:5c:8d:ef:
         d0:05:d5:43:c1:18:b7:cb:70:c9:96:54:68:b4:e2:12:18:34:
         6e:c3:83:44:d2:66:82:da:a4:4a:75:83:01:76:5a:77:6e:99:
         08:ab:88:aa:da:02:b0:fe:63:e6:71:9c:5b:e8:1e:06:8f:02:
         bc:f1:b4:3b:56:ff:15:e7:05:b2:c6:8f:59:fa:f9:71:d3:b5:
         c8:87:dc:50:d8:e3:4b:bc:1d:d9:c5:72:8f:5f:57:d1:09:1a:
         f6:7d:75:43:f3:f4:0c:79:f6:9e:8b:03:c0:b8:56:82:72:7e:
         44:5a:30:b9:9d:57:3b:8e:cd:03:9d:e2:80:b8:8b:08:3b:27:
         db:1f:c2:9a:ef:9a:12:a0:34:a8:2f:9f:74:a2:da:d1:7b:a0:
         4a:f8:15:2c:e6:ba:97:31:03:e1:fb:07:bb:15:42:d0:12:71:
         a5:1c:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----