Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File:                     Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier:          LAbLn8tGqoragNlilvQO+lI/euuzCyxeOI+UxvKkkMo=
Subject key identifier:   64:9B:98:26:74:F4:F6:9E:48:29:E5:1C:F6:AF:EA:3E:5E:4D:D7:C1
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer:       /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial:       01962E99735330B5E28528E72D4502C2EB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: Ugzgs04CtXCUlYQjF87JFZfdTRfxat252am8rIJpOUc=)
                          2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:53:30:b5:e2:85:28:e7:2d:45:02:c2:eb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=649b982674f4f69e4829e51cf6afea3e5e4dd7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:9b:cd:d8:5c:89:cb:50:9e:9d:62:10:ea:
                    2f:78:39:5d:40:52:1f:80:36:5f:37:3c:02:b1:a2:
                    85:ad:a1:14:23:ce:b2:eb:85:5b:b9:49:9e:04:bc:
                    b6:e4:9e:99:af:25:cd:c9:8f:ec:03:aa:59:9c:0f:
                    6e:68:2a:80:88:07:20:52:74:c5:e8:69:f1:ff:d6:
                    a1:66:f2:48:f3:d0:69:6d:c3:2f:1b:bc:57:af:65:
                    3a:5a:f0:3b:57:6a:8c:00:ca:4f:e2:b8:be:14:6d:
                    f8:00:61:30:82:0f:0f:f2:3d:7f:75:e7:ee:6e:fe:
                    d7:e2:54:c9:6b:11:02:fb:d9:d3:6c:cf:36:9b:82:
                    8a:cb:ad:8f:11:20:41:07:b6:6f:47:6c:c6:91:4e:
                    2b:16:de:55:68:58:ce:00:3e:81:9e:1d:62:92:fc:
                    d5:2b:96:66:97:c3:6a:12:9e:b5:a8:b0:6d:1d:d7:
                    36:5f:3c:90:74:ea:31:a3:a1:85:fb:62:44:63:61:
                    68:da:fd:14:54:b5:7d:2e:45:e1:40:c5:91:47:c3:
                    06:fb:e0:2e:1a:25:22:8d:ec:3d:ee:7e:d0:b2:b6:
                    50:ec:49:51:42:12:94:28:66:aa:81:db:cc:73:21:
                    cb:32:c4:74:ce:d4:03:80:7a:ac:40:70:21:58:98:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9B:98:26:74:F4:F6:9E:48:29:E5:1C:F6:AF:EA:3E:5E:4D:D7:C1
            X509v3 Authority Key Identifier:
                keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:53:10:23:1d:1f:ae:aa:43:43:a3:2d:c6:a6:8b:63:9d:
         d1:b3:c7:01:ad:1f:3c:2b:0e:16:a5:18:74:ac:74:81:01:51:
         85:18:a0:5c:fc:a5:bf:21:48:d6:ab:3e:51:11:e4:81:23:46:
         5e:fa:e3:bd:d0:62:5c:91:b2:d6:de:51:3f:89:e3:6c:95:07:
         da:47:e6:94:64:eb:06:ca:7d:af:66:db:b2:27:9b:f4:86:9f:
         ad:5a:b7:37:5f:90:1a:95:24:a4:ff:62:f2:e5:d5:62:35:1d:
         47:f7:82:1a:07:d6:fb:f3:1c:4d:52:b1:d4:8c:10:9b:86:ef:
         6d:b2:a5:2e:f7:82:66:53:d1:be:74:09:b5:a4:39:ff:2a:82:
         b8:1f:33:59:a0:1a:6a:f0:b5:fc:d3:c3:16:8b:ac:74:a4:7c:
         14:bc:cb:3d:d3:8c:21:bc:11:c4:82:b5:cb:4b:d8:96:3d:69:
         a0:69:75:23:0d:0b:08:b1:e7:5b:59:2b:10:52:94:60:a5:4e:
         bb:71:75:34:73:f1:83:1e:c6:c2:64:76:a3:47:97:fe:88:9b:
         ec:28:16:e8:71:1a:bf:d0:bc:eb:0e:5e:04:f7:b1:e9:2e:4f:
         f0:8c:5f:1c:ef:04:77:2e:60:95:03:bd:16:75:95:7a:61:5e:
         a5:da:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----