Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File:                     OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier:          QH8JGMaC4Ch0ALfM0mV1HrP2n354AE39fvNun3JjpGY=
Subject key identifier:   9A:3F:8F:1A:02:ED:6C:CC:02:3A:0D:30:07:CC:A3:F0:B6:59:5F:6C
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer:       /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial:       01962E2B1AF3E061251ED721D3312EE396E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number:          0F0E
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: 8gr90q0KPr/bo0GX/vKkmEe+dp6/lp1mv4GlPttsbZ0=)
                          2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:f3:e0:61:25:1e:d7:21:d3:31:2e:e3:96:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=9a3f8f1a02ed6ccc023a0d3007cca3f0b6595f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:f1:ce:d0:cf:9e:ed:f6:a3:62:a9:27:ad:
                    1b:aa:f1:18:88:30:27:0b:be:3b:33:b6:64:6a:97:
                    3b:e0:66:b1:14:d1:fb:74:e6:87:3f:52:1b:2e:e6:
                    14:d6:dc:f8:6f:2a:44:f8:00:38:f4:28:e9:e9:b9:
                    a5:d7:6b:5c:e7:3b:d2:3d:c2:55:d0:d1:bf:00:eb:
                    b7:1d:d7:1c:05:f4:d7:e6:93:88:7d:44:31:eb:db:
                    01:de:87:7c:55:f6:3a:c7:ad:b4:65:e7:49:bc:73:
                    07:3a:be:50:86:f7:0d:a5:48:d7:4a:e0:84:37:81:
                    07:06:b0:5c:10:60:dc:0f:9e:04:cd:38:51:43:f8:
                    33:9c:e4:a5:67:e0:21:4a:14:35:ca:d9:88:a4:8c:
                    12:94:89:34:d2:e8:79:75:3e:41:98:17:8e:5c:48:
                    25:40:68:1b:5a:88:59:a7:4e:08:aa:1f:cc:80:3c:
                    3b:0a:0c:18:91:38:8a:3e:72:97:00:01:8f:03:40:
                    ad:71:0d:e7:d1:0a:95:b9:0a:3c:c8:a5:32:7f:12:
                    2e:bf:4a:0d:54:6a:00:01:68:67:86:a4:f3:1b:62:
                    db:46:d1:15:27:8a:92:97:8e:e5:ce:8e:c4:ce:06:
                    6f:59:ac:8b:53:a5:eb:eb:61:08:81:2b:00:f8:8c:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:8F:1A:02:ED:6C:CC:02:3A:0D:30:07:CC:A3:F0:B6:59:5F:6C
            X509v3 Authority Key Identifier:
                keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:0c:99:ef:66:a5:88:3d:78:a4:96:b0:95:55:09:1f:36:
         83:e7:d2:2e:dc:2d:30:2e:42:0b:1c:c9:db:c5:6b:be:d5:89:
         71:f5:ac:b8:24:fe:e0:7f:50:70:7e:e9:f1:89:02:6d:22:ef:
         cf:50:bb:cb:10:68:06:84:f6:7b:fc:ff:0a:21:52:c9:f5:15:
         af:e3:a4:aa:b1:3f:09:75:81:f2:83:64:0b:dd:92:6f:78:6e:
         91:74:3c:0b:1f:fc:0b:95:05:ca:fe:87:a6:a7:8a:d6:66:ca:
         5e:79:2c:20:ec:37:1f:90:f7:29:a5:2d:b2:a7:1a:af:a7:84:
         94:c3:72:ce:d6:69:b3:3b:52:fa:6c:1e:5e:5b:aa:e6:54:3e:
         7f:78:df:c9:c8:d1:34:33:01:5b:14:71:b4:6d:01:65:f3:9b:
         f8:94:77:03:53:6c:eb:ff:b3:05:b2:bf:b8:3e:e9:08:83:2b:
         d7:91:5a:df:ef:6c:f3:54:4a:59:df:31:a4:20:89:e4:5e:80:
         28:3e:5f:ef:7c:2e:12:4c:dc:b7:3f:b4:ee:16:67:81:f1:a7:
         b4:5f:ef:cb:80:e4:0e:5b:f9:d6:02:da:0d:1b:e7:ec:c5:af:
         60:d0:2a:17:cc:8f:3b:1b:17:7e:30:85:34:dd:13:ed:8d:72:
         71:f1:04:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxrz4GElHtch0zEu45biMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2Q5ZjNkYmZjMzY1MzMyZTI4MmJkMTc2YTY4MDc1NDQ2
ZDFkMWIwHhcNMjUwNDEzMDgwMTM4WhcNMjUwNDE0MDgwMTM4WjAzMTEwLwYDVQQD
Eyg5YTNmOGYxYTAyZWQ2Y2NjMDIzYTBkMzAwN2NjYTNmMGI2NTk1ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/xztDPnu32o2KpJ60bqvEYiDAn
C747M7Zkapc74GaxFNH7dOaHP1IbLuYU1tz4bypE+AA49Cjp6bml12tc5zvSPcJV
0NG/AOu3HdccBfTX5pOIfUQx69sB3od8VfY6x620ZedJvHMHOr5QhvcNpUjXSuCE
N4EHBrBcEGDcD54EzThRQ/gznOSlZ+AhShQ1ytmIpIwSlIk00uh5dT5BmBeOXEgl
QGgbWohZp04Iqh/MgDw7CgwYkTiKPnKXAAGPA0CtcQ3n0QqVuQo8yKUyfxIuv0oN
VGoAAWhnhqTzG2LbRtEVJ4qSl47lzo7EzgZvWayLU6Xr62EIgSsA+IyOmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo/jxoC7WzMAjoNMAfMo/C2WV9sMB8GA1UdIwQY
MBaAFDl9nz2/w2UzLigr0XamgHVEbR0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMt
ZDg2YWIyZmU3NjQ4LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMtZDg2YWIyZmU3NjQ4
LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+cMme9m
pYg9eKSWsJVVCR82g+fSLtwtMC5CCxzJ28VrvtWJcfWsuCT+4H9QcH7p8YkCbSLv
z1C7yxBoBoT2e/z/CiFSyfUVr+OkqrE/CXWB8oNkC92Sb3hukXQ8Cx/8C5UFyv6H
pqeK1mbKXnksIOw3H5D3KaUtsqcar6eElMNyztZpsztS+mweXluq5lQ+f3jfycjR
NDMBWxRxtG0BZfOb+JR3A1Ns6/+zBbK/uD7pCIMr15Fa3+9s81RKWd8xpCCJ5F6A
KD5f73wuEkzctz+07hZngfGntF/vy4DkDlv51gLaDRvn7MWvYNAqF8yPOxsXfjCF
NN0T7Y1ycfEEyQ==
-----END CERTIFICATE-----