Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
File:                     OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft (raw, json)
Hash identifier:          U1byphtSixtsSiwTEUGzU3RH6dw8e9PLCgtjXU6KL/4=
Subject key identifier:   98:37:36:6E:FB:2D:E7:7F:FD:6F:E9:BA:C4:31:30:88:EA:21:23:1A
Authority key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Certificate issuer:       /CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Certificate serial:       01962DF457F5C1934FE330AF91441DA3FD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
Manifest number:          051C
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl (hash: Q+XBCAHy0EWCDa+MmE4iE0OhMRjaEcDSi9Ij1udC5Po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:57:f5:c1:93:4f:e3:30:af:91:44:1d:a3:fd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=9837366efb2de77ffd6fe9bac4313088ea21231a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:59:24:43:b5:bd:20:c1:58:99:e3:04:00:
                    2e:a5:32:c5:9d:d6:42:f3:08:26:e7:20:6a:03:98:
                    04:99:8b:40:6e:2e:31:b5:10:2a:f9:ea:49:6a:8a:
                    01:1b:3e:95:00:4a:d1:a3:91:c3:17:fe:2f:53:d2:
                    e6:ab:5e:5c:e0:f7:2c:ec:f8:f8:92:a6:0b:b4:ba:
                    76:8b:74:79:e5:cf:0d:6e:b2:67:48:ae:10:57:80:
                    f5:89:61:a9:62:0f:99:f3:ba:e0:08:13:bd:06:25:
                    3a:3b:47:d3:49:c2:a2:b6:eb:5d:aa:21:b0:7b:ca:
                    7f:8b:7f:66:ef:32:84:8e:69:cc:89:cb:95:d3:50:
                    bb:27:45:a4:1d:ee:81:70:76:99:b5:24:eb:a7:a5:
                    b8:8f:a8:b8:1c:ab:2f:46:7f:ea:18:77:c5:85:f4:
                    55:4f:fb:5e:6f:4e:f8:45:00:8e:1f:7f:c5:99:d7:
                    b0:ad:78:85:8e:1e:2b:3e:13:2b:98:2a:e6:e9:9e:
                    26:47:2d:98:3b:07:83:52:d3:c2:6d:f8:ee:2a:73:
                    81:2b:b9:0a:e2:68:ef:30:95:2f:e6:ee:92:87:8c:
                    7d:99:0d:87:7c:85:7b:b3:0b:79:fc:d3:ae:ca:9e:
                    7f:87:64:1a:cf:a4:20:f0:f5:2d:d2:e8:cf:24:b1:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:36:6E:FB:2D:E7:7F:FD:6F:E9:BA:C4:31:30:88:EA:21:23:1A
            X509v3 Authority Key Identifier:
                keyid:3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:27:9b:b4:86:75:73:a0:d9:3f:f3:a8:01:0c:88:18:a1:d2:
         ce:f3:01:0f:71:e2:93:4a:09:77:00:d8:3a:ed:70:88:a8:49:
         b4:35:01:e5:72:45:51:7b:ba:9e:1b:2f:68:d1:28:ba:ae:24:
         f6:da:a6:84:25:d5:e4:45:42:f0:e1:2c:69:1b:34:d9:af:1c:
         07:15:95:96:13:e2:ee:e3:ef:1f:01:46:a6:f6:29:87:1c:b9:
         cc:ef:6b:ce:a0:59:18:fe:a4:0c:f6:2f:69:b1:67:80:fc:f0:
         95:b4:90:4f:8d:02:e5:fd:d4:ec:95:73:25:a7:6a:8d:1d:85:
         15:67:03:7d:0b:f5:41:be:73:49:29:0d:14:de:bd:4d:94:64:
         f5:39:bb:1e:98:da:0b:fb:18:40:49:bc:fd:64:06:5b:b6:29:
         f7:56:59:01:cd:80:27:20:47:cb:ea:3d:70:04:13:a5:9b:cc:
         b6:fe:69:ab:96:7d:84:7d:c5:c3:b6:bb:a4:56:ee:ca:78:81:
         55:9d:b7:a3:ad:59:9d:3a:12:28:67:44:22:d5:6f:b5:59:a0:
         5f:65:a4:35:a4:ef:e3:38:7a:54:a1:b3:ee:d7:c1:d6:b7:ec:
         7e:9e:49:01:57:26:56:93:98:77:a5:ef:71:56:b8:f2:d8:2c:
         03:b4:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----