Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File:                     OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier:          3YYVMP5RmrXNO4upnN723Y8Gu7/3bowcMS0rZKJd/l8=
Subject key identifier:   81:FD:AB:9E:21:F4:B5:07:3A:29:0A:E0:50:15:32:90:13:BB:20:CE
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer:       /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial:       01962DF431DB34C4EE6CCCD662F9FC54DA4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 4t53igbekCux7oMSXkm2uGkDTRs.roa (hash: JcVC73jSzOeJEsOoBqkgwAslhBdXNKxkO116AmZF308=)
                          2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: p/ayhzbGeIW/MCWoKgxJYRS+cjFFA4/WZzpWpYz+x7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:31:db:34:c4:ee:6c:cc:d6:62:f9:fc:54:da:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=81fdab9e21f4b5073a290ae05015329013bb20ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:20:bc:88:c1:ad:c4:74:ca:9a:f7:22:61:
                    77:88:bb:85:98:9f:2b:0b:ea:a1:3c:5f:f5:23:d2:
                    f4:54:f5:9d:7c:6f:eb:ec:b2:4f:d2:91:22:cc:2d:
                    bd:42:f2:4e:07:af:c4:02:af:3a:92:eb:7e:8c:5a:
                    ae:c3:f3:08:69:c4:a5:eb:c7:75:c0:a3:ab:27:27:
                    a3:9d:72:f3:7f:a3:03:96:ba:63:02:1f:c0:91:9d:
                    e8:28:1c:fd:d2:49:d0:9c:72:1a:97:af:4a:ca:24:
                    e9:62:1e:ac:d1:a6:86:46:a3:d3:17:aa:d6:ba:4c:
                    6d:71:e8:43:91:24:c7:11:fa:84:ab:89:42:61:e6:
                    16:1e:2b:12:08:4e:6a:ee:93:e5:ce:8f:6f:84:aa:
                    5e:d9:2b:66:5d:4e:b3:83:7f:3a:21:6f:66:f8:5d:
                    52:93:18:c9:05:b5:5c:09:67:33:86:69:bd:0d:dd:
                    5a:7d:7f:1c:83:1f:7a:51:79:45:2b:73:8c:08:4f:
                    27:36:4b:f9:f5:f1:b3:0d:b7:35:50:a0:d4:4a:e8:
                    0f:1e:2f:c7:1e:55:b1:6a:06:29:c6:80:50:a0:ef:
                    a0:72:55:a5:46:0e:6e:fd:32:6a:21:3c:92:8e:52:
                    57:18:79:28:c7:ad:53:f7:34:14:04:4d:1b:0c:69:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FD:AB:9E:21:F4:B5:07:3A:29:0A:E0:50:15:32:90:13:BB:20:CE
            X509v3 Authority Key Identifier:
                keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:24:08:83:71:5b:31:e9:0d:33:0e:f0:37:0d:c3:09:81:
         9e:e5:ea:0f:3e:ad:ce:37:9b:e4:2d:88:c1:f4:c8:90:67:c6:
         67:db:db:5c:22:47:fc:85:e0:b7:4f:d3:ae:2d:83:05:07:c0:
         f5:77:92:69:40:f0:d2:3b:82:19:65:f0:bb:01:e2:0e:26:01:
         93:f9:ca:4d:a6:86:8f:e3:22:5f:fa:23:6e:fc:54:e8:32:09:
         93:7b:14:75:95:8f:fb:05:1c:7a:9d:84:3c:b0:87:a6:bf:63:
         5f:46:11:5a:f5:a1:93:6c:89:ba:39:7f:29:88:f4:f9:4a:a5:
         43:f5:18:d3:99:57:b7:e9:63:43:86:e6:b5:91:36:47:a2:fb:
         d5:95:15:cc:70:67:fd:ad:74:0b:59:5d:05:95:36:f6:c0:85:
         be:de:f6:1e:a0:9f:73:bf:f4:3f:26:8a:6c:8a:9b:8e:5c:a5:
         f1:79:62:51:42:e8:dc:98:72:5f:9d:26:8d:5f:9b:d2:22:29:
         93:1e:d7:86:39:71:db:e5:f3:b5:1f:86:37:69:84:0b:ab:53:
         71:e0:57:a1:b6:12:04:09:9a:8f:4c:fa:0c:d5:8c:6d:49:cf:
         40:86:86:40:bc:3c:8b:8c:d7:72:dc:66:38:52:37:07:6f:ac:
         76:2a:72:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DHbNMTubMzWYvn8VNpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjFiN2YxZWVlOTBkOTllMjk0MjE4YTkzODc1M2MxZWEy
ZGMyNjcwHhcNMjUwNDEzMDcwMTQwWhcNMjUwNDE0MDcwMTQwWjAzMTEwLwYDVQQD
Eyg4MWZkYWI5ZTIxZjRiNTA3M2EyOTBhZTA1MDE1MzI5MDEzYmIyMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/YgvIjBrcR0ypr3ImF3iLuFmJ8r
C+qhPF/1I9L0VPWdfG/r7LJP0pEizC29QvJOB6/EAq86kut+jFquw/MIacSl68d1
wKOrJyejnXLzf6MDlrpjAh/AkZ3oKBz90knQnHIal69KyiTpYh6s0aaGRqPTF6rW
ukxtcehDkSTHEfqEq4lCYeYWHisSCE5q7pPlzo9vhKpe2StmXU6zg386IW9m+F1S
kxjJBbVcCWczhmm9Dd1afX8cgx96UXlFK3OMCE8nNkv59fGzDbc1UKDUSugPHi/H
HlWxagYpxoBQoO+gclWlRg5u/TJqITySjlJXGHkox61T9zQUBE0bDGmmfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH9q54h9LUHOikK4FAVMpATuyDOMB8GA1UdIwQY
MBaAFDkht/Hu6Q2Z4pQhipOHU8HqLcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iZTFkYjEtNGRjNC00NjNjLWJhZjgt
MjQ0MWUxMGY2ZjhmLzEvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iZTFkYjEtNGRjNC00NjNjLWJhZjgtMjQ0MWUxMGY2Zjhm
LzEvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZn4kCINx
WzHpDTMO8DcNwwmBnuXqDz6tzjeb5C2IwfTIkGfGZ9vbXCJH/IXgt0/Tri2DBQfA
9XeSaUDw0juCGWXwuwHiDiYBk/nKTaaGj+MiX/ojbvxU6DIJk3sUdZWP+wUcep2E
PLCHpr9jX0YRWvWhk2yJujl/KYj0+UqlQ/UY05lXt+ljQ4bmtZE2R6L71ZUVzHBn
/a10C1ldBZU29sCFvt72HqCfc7/0PyaKbIqbjlyl8XliUULo3JhyX50mjV+b0iIp
kx7Xhjlx2+XztR+GN2mEC6tTceBXobYSBAmaj0z6DNWMbUnPQIaGQLw8i4zXctxm
OFI3B2+sdipyNA==
-----END CERTIFICATE-----