Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File:                     ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier:          RMhncxtbr8iZYs/WZtquuBxFg9WeT921WYBXAy/MZkk=
Subject key identifier:   2E:A5:13:8F:BF:B1:AC:A2:A4:70:2B:B3:C7:93:BA:7C:92:C7:48:CC
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer:       /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial:       01962F746AEBC1B18D50B8887574A8182695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: RzHoc1m3EbW9Dr40mIWqmp6Ucjf43DF5SiNDucKR5ik=)
                          2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:eb:c1:b1:8d:50:b8:88:75:74:a8:18:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=2ea5138fbfb1aca2a4702bb3c793ba7c92c748cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:7a:d6:a6:8e:65:96:e3:09:d4:57:c0:f2:
                    02:4f:c5:d0:3b:c8:9d:f8:37:47:f2:0b:27:83:56:
                    af:36:c2:e2:3b:a1:fb:65:bc:fb:93:3f:d1:26:c5:
                    45:46:bd:04:0d:0c:d3:3b:e0:cd:2d:37:47:8d:97:
                    e9:b3:de:58:b2:a7:71:34:2d:ff:0b:ed:a2:35:64:
                    ad:b6:03:48:1e:07:7d:c9:ff:09:95:db:bf:1c:53:
                    4a:94:6b:68:73:25:51:35:25:7d:ac:db:76:d1:3d:
                    5a:cb:fe:6f:41:ea:08:a9:d5:5d:d8:fc:4f:48:c7:
                    7e:e2:cc:57:39:b6:cc:49:c7:72:32:a1:3a:ec:8d:
                    6a:07:b8:df:a0:dd:e8:c5:82:df:fd:a8:77:ae:16:
                    71:6f:fa:b7:85:78:ae:83:0d:4e:ae:4e:ee:e4:74:
                    f3:1f:78:64:70:44:18:b8:7a:1f:38:54:f5:d3:59:
                    4b:ee:60:58:a9:71:ab:3e:43:0a:67:58:0d:e9:50:
                    5e:ae:31:2b:30:4c:7d:d1:c8:28:fa:94:9b:cb:63:
                    71:3b:7c:d4:93:c4:aa:03:f3:88:bc:64:e7:8a:3f:
                    8c:ca:74:9d:5b:10:47:92:f6:61:87:55:71:35:81:
                    0a:31:43:e0:e6:7c:4c:a6:7a:e1:d0:00:a9:a5:5c:
                    b8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:13:8F:BF:B1:AC:A2:A4:70:2B:B3:C7:93:BA:7C:92:C7:48:CC
            X509v3 Authority Key Identifier:
                keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:12:b5:4a:82:84:8e:26:18:e9:36:5b:2b:84:11:7a:9e:15:
         4c:a8:85:0d:b1:cb:59:ee:69:1e:41:08:4c:02:30:aa:62:2c:
         32:8a:94:14:d4:84:e2:35:26:8f:07:7c:26:21:29:c3:0d:dd:
         f4:d6:c9:05:8a:1e:38:99:d6:90:6c:ba:ca:23:d7:1a:e3:64:
         93:bb:82:1f:4b:f4:80:b4:2e:ea:b3:da:8d:6e:48:12:7b:67:
         4b:bd:6a:ab:54:97:97:18:ab:1f:c8:12:5c:f0:78:a9:81:37:
         ac:b2:49:6d:14:c3:47:ca:3e:4d:65:c9:6f:ef:a8:43:ee:70:
         ff:d4:ec:83:12:a4:f4:76:bd:09:40:80:4d:02:41:89:6c:b4:
         cd:cc:91:10:f2:68:5b:24:88:77:00:5a:3e:53:f2:1a:cf:47:
         36:d9:fe:7c:43:79:b6:d0:f8:7b:8f:1f:ad:4a:a0:45:8e:ca:
         47:10:e5:21:da:58:b4:68:e1:2a:50:a0:c6:6f:34:75:e9:b1:
         85:41:ca:0b:c3:1f:71:ea:4d:13:35:89:01:2b:a9:78:63:fd:
         41:f4:12:60:ee:2d:44:cc:6c:76:03:11:0b:ad:3d:89:1b:45:
         e7:76:4a:31:48:78:e5:46:ac:59:0f:08:b3:80:d9:75:f0:38:
         a4:85:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----