Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
File:                     ofM7gYxgo6zGnzmgsuDuqrttk-A.mft (raw, json)
Hash identifier:          NFxGgJ8Ow0ctgop8yEfAkn7nAhxpYaWSBUvz/GrKG9M=
Subject key identifier:   66:DD:BE:C8:C4:A1:56:C1:90:62:B1:1F:C4:46:4D:69:1E:2D:03:DB
Authority key identifier: A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0
Certificate issuer:       /CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
Certificate serial:       01962DF3CDD67C4E8EC408FB4EA18DA8F267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
Manifest number:          1130
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: ofM7gYxgo6zGnzmgsuDuqrttk-A.crl (hash: jOcMP0chGyYczgRqgBW8DoPj1bbCxlezZxJmlK2AYHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cd:d6:7c:4e:8e:c4:08:fb:4e:a1:8d:a8:f2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=66ddbec8c4a156c19062b11fc4464d691e2d03db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:18:b9:2e:11:82:02:55:52:0a:f6:a8:bb:
                    09:68:e1:1f:4d:23:cf:0b:8b:2b:7a:d5:b1:5c:29:
                    03:89:e5:a7:f2:2d:23:e0:1d:61:2e:42:15:88:88:
                    81:9f:14:50:a2:d0:60:23:16:6c:e7:2a:39:f7:d1:
                    ad:19:3c:21:cb:71:70:f0:68:1c:96:5a:dd:b4:04:
                    c2:51:06:14:ca:ae:dd:27:58:26:3e:94:87:f7:72:
                    eb:ea:d0:cd:e0:fb:cc:11:02:e0:4c:94:4a:a0:e9:
                    5f:d3:6e:f7:0a:23:7f:69:59:e6:7a:15:c4:d5:bf:
                    28:00:fe:14:2a:c6:3b:59:ea:4c:4e:69:09:26:91:
                    53:13:b1:83:a5:8f:a1:ca:da:1d:be:e2:39:9c:9f:
                    bd:b4:81:26:a8:94:4b:06:ed:f9:fa:36:57:31:8f:
                    7d:b1:f5:f7:e1:83:ed:9f:18:a7:fd:a7:54:c7:8b:
                    6f:d2:53:18:9e:78:b3:b3:1b:91:9d:0e:e6:49:a6:
                    90:e2:2f:79:0b:8b:d8:53:f0:75:02:f4:cd:fa:9e:
                    52:69:11:bc:c5:29:e3:55:d1:11:f4:76:3a:d2:e1:
                    43:97:d8:00:db:6b:75:66:be:bd:8c:cd:01:d1:92:
                    5d:5c:c1:de:73:f3:7a:d9:31:49:5a:93:62:6e:2a:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DD:BE:C8:C4:A1:56:C1:90:62:B1:1F:C4:46:4D:69:1E:2D:03:DB
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:3d:24:d1:f1:a4:a3:4a:c2:0d:02:09:b8:45:d5:26:6b:
         6a:4a:19:ca:c6:d9:fc:06:19:41:2e:e2:0d:0c:e1:68:03:0f:
         9a:a1:b2:cf:40:bd:4e:03:ff:b9:db:44:d5:3d:48:8b:69:be:
         ca:60:25:41:68:3e:72:c9:7f:60:37:8d:5f:cb:9c:eb:ab:76:
         2c:66:db:91:b6:a2:bf:c5:2a:11:6b:1c:5f:5e:71:c7:f3:69:
         d9:cd:e7:e1:be:81:8b:8b:5c:96:2f:9e:28:0d:2f:89:1e:e6:
         cd:10:6e:2c:4e:df:db:1b:ec:69:0c:3d:0c:a2:9d:15:0a:1a:
         82:96:37:02:b3:27:95:87:75:28:8a:d5:de:42:1b:34:42:78:
         dc:b4:3b:b9:74:e2:66:b1:30:00:b6:c5:fc:e3:d2:5f:5d:13:
         18:7b:ae:86:13:31:b9:f5:cf:ee:9c:cf:f2:35:3c:86:8a:17:
         d7:f6:dc:6f:a7:6e:23:df:90:be:65:fd:e3:3a:fd:18:93:3a:
         1e:80:21:54:8c:06:17:24:25:b4:1c:ef:1b:58:cb:17:91:6a:
         c7:6d:0d:d8:2d:55:6d:b2:7f:46:67:f3:a9:cf:50:93:c8:83:
         10:b0:f3:a7:19:b2:8e:64:c1:71:6f:7b:81:69:65:21:5c:a4:
         f3:46:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----