Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File:                     OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier:          4ru6xUXrrsT4M1BMHGZfMJlxfH5ynfNW+hmt7/uumEk=
Subject key identifier:   87:DB:88:3D:ED:C8:C8:23:0D:A8:DD:4C:B3:CC:DE:BA:46:8F:B3:72
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       01962F7474E16C6EDAAD4E5A46550CE739B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number:          0A22
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
                          2: 6xn-nrHQSXs05ccTEOlrbgL9Q4E.roa (hash: lUga55GbETOAcYAC/fkbUuqJ6uvOhI9s/yOAAQaczw4=)
                          3: ALdpivp7qzpUB5jnmeapFiwkGxg.roa (hash: 7MA0ajseX1lz/krgeoOJVgQJUF4DBwVOkQ4FKnVb0B4=)
                          4: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
                          5: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: uYaRY4zXVKoRfwRv3rfk1KBb63iH2ecUkUnz7YcBkeM=)
                          6: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
                          7: pz30gP5HXmvVhezEbR2M9x5jpYg.roa (hash: zMuCQqFnbVDZWipMHPrJQB2cNPEYXwDyxtFSxkBu5H4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:e1:6c:6e:da:ad:4e:5a:46:55:0c:e7:39:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=87db883dedc8c8230da8dd4cb3ccdeba468fb372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:22:ff:80:9e:57:8a:90:76:2b:fe:45:7d:
                    4c:13:a1:ba:72:28:33:89:fd:38:7f:87:0e:ac:8d:
                    3b:cc:f9:ae:33:42:be:84:ef:3e:bb:3c:0e:d6:30:
                    44:92:54:9b:d5:eb:66:80:c7:b8:47:71:0c:a3:b3:
                    8d:f2:83:51:ec:f8:7d:a6:0f:f3:e8:52:be:9a:b4:
                    0e:35:82:f7:cd:32:6a:4c:9a:06:3f:37:2e:60:2d:
                    43:58:ca:f4:bd:c0:06:5d:77:5d:05:ca:df:fa:48:
                    1b:73:97:53:80:13:fd:dd:e4:cc:fc:aa:85:50:4f:
                    33:d9:46:c7:73:6a:61:1d:fe:bc:78:5a:37:b0:49:
                    ff:60:86:c9:4f:f0:4f:2b:aa:c6:5f:c4:6a:33:11:
                    a5:d8:d6:48:49:3f:41:3f:87:9a:75:52:05:73:c7:
                    8b:38:38:be:da:c9:7e:22:96:d7:b1:ab:51:5c:4d:
                    26:0f:fa:af:df:f8:22:17:db:79:0f:51:5a:8e:39:
                    07:87:04:e0:d4:ce:ff:72:8d:a1:dc:80:f7:ce:3a:
                    7a:4c:a7:94:72:d8:0f:db:f3:6f:5c:d6:da:4f:b0:
                    fe:41:aa:c1:ba:26:41:a3:30:a2:d4:ec:65:b7:8d:
                    26:9f:67:68:c7:59:28:90:f9:92:38:a0:9e:35:aa:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DB:88:3D:ED:C8:C8:23:0D:A8:DD:4C:B3:CC:DE:BA:46:8F:B3:72
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:ea:ef:46:6c:79:54:69:c9:7c:35:49:8e:59:9f:6a:13:
         3c:a0:74:fb:76:61:45:b0:45:ac:91:19:5a:e9:11:f7:a1:53:
         b3:7d:07:32:47:e6:d8:50:51:ef:b5:91:7e:69:28:59:2e:af:
         c4:7a:b4:2e:8b:4f:e0:64:7f:58:38:f9:ad:b6:f7:e4:78:b9:
         60:98:30:85:02:b7:8e:ff:e4:25:91:ea:f1:b9:18:aa:1f:2d:
         a9:e9:6f:2a:cd:d7:a6:b8:08:9f:4d:5c:5a:22:78:97:bf:1f:
         3c:3b:68:42:95:b9:4f:e0:b9:10:b9:b1:63:e8:1a:5e:3b:e5:
         af:06:65:ea:c8:58:cb:d3:62:94:f1:a5:08:f5:b3:01:29:a5:
         07:c8:f0:b9:56:91:4b:f7:97:c7:90:c1:1c:f7:4a:49:e3:89:
         dc:01:98:26:fc:41:26:be:1a:23:da:7f:a5:8c:fd:6a:14:9a:
         e0:7e:c3:d4:0d:14:dc:65:49:43:ce:b7:a8:e2:0d:d6:3d:4c:
         ab:6c:12:b6:9e:d3:52:60:51:ed:b1:2d:4f:eb:e1:16:4a:6e:
         b8:46:a4:e8:c5:7a:c0:28:3a:29:e5:61:aa:71:9c:d5:c4:6f:
         19:bb:71:67:e4:0c:73:9a:cf:ee:db:45:cb:09:93:1e:97:90:
         40:25:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----