Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File:                     OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier:          O/7Z+Qcs0tmg+RboEmxsHm1Skxg8QuQmHSLkLWuMkvU=
Subject key identifier:   14:E2:58:4A:F0:80:4A:2F:05:B6:68:E2:6F:FB:17:8F:6C:F7:19:00
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer:       /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial:       01962F74389FF39612F1904E528A3B54FFD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number:          14DB
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: EQS-D1pgF9X9JxFRgbIMqF1eIP4.roa (hash: X1oH+D4EKjN/FZ/0o/XNZpi/rX7eBTsOxnwwIoAyafs=)
                          2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: cygogDJngkPfpprWwYJHfmhO/K2Flih++sNXCf/Hl9E=)
                          3: VK52xwAI-aKIKTeQlztwUDOO02E.roa (hash: C9ydrT1jO/tCG0jTbHX7J5njz1R33YyX3/MyTTWyLe8=)
                          4: cVloRXAZs5Oo5mzrcunH3Tc2864.roa (hash: PRZbsG5bEI+5vtvix6l8s4vQ6r0jrrNQcUM/ZaoxHsc=)
                          5: fTKyWpeZBzHIpHOAP_HWdyLZ9gk.roa (hash: NJGE7uKTYs1I+EUOo5wFk+oBfIXQxyDxL9xtb3Bt434=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:9f:f3:96:12:f1:90:4e:52:8a:3b:54:ff:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=14e2584af0804a2f05b668e26ffb178f6cf71900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:4d:3a:57:c3:e0:89:36:12:53:85:77:e4:
                    73:b9:20:2a:e0:83:ed:1b:c0:c6:d5:e0:da:86:96:
                    9c:bf:de:ce:50:50:09:fb:7b:a3:e5:ff:42:3d:52:
                    c3:db:69:ad:9f:84:4f:30:f6:d1:97:95:f1:25:e3:
                    a4:6c:3d:ff:1d:b6:e4:ca:fb:56:7d:30:63:34:29:
                    20:f4:04:ce:65:8b:c8:cc:81:38:cc:20:c1:ca:bb:
                    3a:92:09:7d:c9:9d:38:cd:19:0d:6d:b9:14:46:cb:
                    e2:71:c0:fd:51:18:b5:f9:50:00:42:41:de:ee:b7:
                    e5:3c:e5:e2:bc:c2:87:ad:03:22:40:1b:31:8d:49:
                    5f:2c:dd:79:9b:89:03:2c:c7:60:7b:05:d0:b1:da:
                    06:f6:95:b3:cd:b6:1f:66:fb:72:78:c1:b5:9c:fd:
                    a5:45:be:c7:be:ab:97:dc:bb:03:bc:03:a1:a4:1f:
                    49:92:21:3d:0e:92:65:67:8a:62:fb:3a:f0:46:46:
                    b9:9e:dd:0a:14:95:a7:0c:13:bc:2f:cb:dc:76:d9:
                    eb:0f:d2:6e:18:1d:b1:eb:8f:3a:06:8a:54:72:2a:
                    ca:86:b6:a1:21:ec:9a:ce:84:fc:14:d4:77:2b:42:
                    a0:00:dd:15:6b:e3:11:8d:77:5f:60:ce:13:2e:65:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:58:4A:F0:80:4A:2F:05:B6:68:E2:6F:FB:17:8F:6C:F7:19:00
            X509v3 Authority Key Identifier:
                keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:ca:46:00:6f:19:48:8e:1e:5f:08:f0:60:6f:f4:50:d4:
         91:14:6d:a1:3b:51:cb:32:f8:c0:b7:d6:06:2b:13:e4:bc:b2:
         b6:e1:b8:f6:7c:27:8f:1d:e4:a1:44:3b:91:ec:20:fc:1c:7c:
         34:7c:a6:cb:45:46:da:e5:e3:50:83:e0:b3:53:68:20:ea:97:
         78:09:c9:1b:22:1b:ca:7a:b2:cb:99:d8:97:7c:59:6d:1b:7b:
         21:a0:1c:bd:7b:c0:64:5f:fb:d6:46:7f:a3:12:b8:16:f1:56:
         59:1b:42:6d:e5:fd:02:2c:86:e8:88:4c:7e:db:22:f1:e9:c2:
         0a:e9:03:07:e5:a4:2d:34:fb:bb:81:6e:2e:bc:d6:5a:b6:87:
         f9:f6:5f:51:3a:ff:1c:53:5d:e0:88:28:06:fd:9e:ca:fd:db:
         e3:b5:8b:f4:7f:30:fd:70:c4:4b:3c:09:96:1c:47:c8:82:c2:
         6c:c0:fb:7c:aa:a4:d2:ad:71:c2:22:58:78:6e:94:55:92:88:
         ad:68:c8:a3:60:de:76:2e:09:39:c3:d4:7b:24:12:a7:b7:d6:
         6a:c4:f2:43:56:bb:28:65:e9:de:78:b1:3b:e3:90:6c:7f:14:
         51:76:86:26:fa:da:12:71:a8:f2:e1:8f:e2:68:e9:8c:d9:6d:
         a7:9f:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----