Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File:                     CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier:          OsaEBxzOPtrIna6HEbQTkWlI9O043kndDn8zFbtaTv4=
Subject key identifier:   36:25:3E:6C:41:AF:66:16:22:CF:75:44:B2:D6:0E:52:23:32:9D:B8
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer:       /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial:       01962E98F19DF4CD8CBB5C74FD32F8EC6ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: AuA1QWyVPQ8y7M0kkIGg0oeVM68pt3XuzG5B/Lq2DOs=)
                          2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
                          3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:9d:f4:cd:8c:bb:5c:74:fd:32:f8:ec:6a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=36253e6c41af661622cf7544b2d60e5223329db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:99:cd:34:b7:35:48:8d:0d:24:b8:8b:3e:
                    e0:82:11:ae:04:ae:07:0d:bf:d7:a0:3d:23:85:96:
                    dd:4b:f6:7f:b9:38:4d:84:15:98:d6:45:31:3b:66:
                    81:91:bb:38:87:64:e9:b6:c1:6e:e8:5a:a8:ed:59:
                    e5:76:5e:79:0c:64:4a:b1:37:1c:a2:c7:7c:47:54:
                    08:fa:c8:43:31:a2:de:cd:a5:52:9d:a6:9d:bd:62:
                    8a:f4:e4:b5:4b:34:09:15:f2:27:0b:69:4a:d1:16:
                    5c:64:a5:05:4c:b1:de:b1:95:29:42:34:46:17:30:
                    d3:cd:f3:8f:a2:58:db:a5:fa:7b:8a:f1:99:0a:bd:
                    05:c8:19:4d:5c:8b:0b:2b:46:d6:58:9c:0a:8d:ed:
                    1d:9d:25:f2:ce:ea:b8:df:a8:b8:41:eb:ee:7a:e2:
                    9f:a2:de:1c:c5:ab:44:a0:dc:21:5c:4c:ce:64:74:
                    c7:80:57:46:e9:e3:20:19:d9:4c:c2:69:a5:0a:b4:
                    1f:9b:f3:ec:f9:87:be:dd:d7:c7:8c:46:30:19:c2:
                    b9:6d:23:f5:f0:8b:4c:4c:62:75:53:1a:c0:ca:69:
                    31:ba:7a:4c:30:3b:2b:f9:23:25:a2:40:a4:d1:6d:
                    55:55:be:6c:f8:ae:45:69:45:7e:02:ef:89:86:e7:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:25:3E:6C:41:AF:66:16:22:CF:75:44:B2:D6:0E:52:23:32:9D:B8
            X509v3 Authority Key Identifier:
                keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:a6:74:fb:26:23:c7:95:bf:6f:36:ac:5d:cc:81:72:8a:
         d2:98:39:ea:58:71:e4:25:d9:35:7b:bd:65:14:c3:d6:d5:e0:
         29:89:79:0a:f9:7b:b9:f5:f0:21:55:e9:fc:16:0d:85:ed:47:
         09:63:3f:aa:5f:d3:f9:70:c4:c3:14:64:3a:c6:2d:f8:a3:5e:
         2d:59:05:ce:0f:a9:93:ec:ec:50:db:57:3e:b2:9f:b5:3e:80:
         12:ab:27:1c:91:14:8d:2a:7f:54:23:b0:f8:82:f5:96:6c:4f:
         db:f5:4d:84:2d:a2:51:6e:c4:fb:4a:9b:90:58:73:47:0f:51:
         4c:c6:9c:80:44:1a:f1:d2:a3:2b:b0:49:70:c7:f6:47:d8:eb:
         89:13:18:ac:9e:dc:75:0f:0b:db:e2:54:7a:3b:93:05:78:a6:
         a7:83:58:05:7d:d4:25:b9:da:b2:4b:71:1a:76:5f:2a:c7:71:
         e7:0d:80:42:39:6c:a0:8f:48:07:0d:12:ae:1c:9d:7d:d9:92:
         19:c8:a9:99:2c:c8:fa:2c:8b:29:fc:3e:04:5f:6f:7d:8d:7f:
         0c:d3:62:96:ab:1b:38:58:9a:82:57:ca:03:2e:96:e0:35:52:
         62:16:20:d9:ee:1c:86:1f:e1:a8:c5:44:ed:fe:3d:ac:a5:f7:
         f6:1e:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----