Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File:                     Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier:          15DP5uXHrDV84bYtuxEpCg/c9RTXMsMpoFxKP2o8BPM=
Subject key identifier:   1B:01:4F:1D:AA:5A:51:55:F3:11:92:02:2D:1C:34:7E:E0:8F:22:E3
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer:       /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial:       01962E98E7DE81FA99B577AB9E735EE318AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number:          126D
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: 7UJGyzCPxkQFICRjLnGPtK+g1DuHOotRJtqEkobSwew=)
                          2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e7:de:81:fa:99:b5:77:ab:9e:73:5e:e3:18:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=1b014f1daa5a5155f31192022d1c347ee08f22e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:90:57:23:db:60:8a:0f:5f:b4:9e:2a:13:
                    14:ce:db:5f:b1:64:86:2b:a7:89:46:43:9f:eb:bc:
                    b7:58:7d:39:84:b9:d0:7d:78:23:68:e4:f4:81:dc:
                    af:e9:14:a1:1e:cd:d0:a5:da:4f:73:70:5e:90:67:
                    01:3f:51:51:5c:8f:47:1b:5e:f0:35:02:0b:82:c7:
                    d3:0d:94:16:99:d9:c7:bc:42:0a:96:03:5b:2b:ed:
                    cf:72:38:61:cc:9a:78:57:bd:3d:cc:7b:c1:18:eb:
                    c7:26:a8:9b:b6:10:70:63:23:d9:4b:a6:5b:d4:c3:
                    6d:98:1b:7f:a6:27:3e:a6:91:62:a6:99:63:fc:7c:
                    24:c9:6c:41:24:bb:05:12:49:1b:ba:5b:c2:72:32:
                    24:56:82:db:25:f0:a8:9c:89:eb:44:1e:f7:0b:e8:
                    91:83:df:e1:d9:a8:af:98:e3:36:ac:1b:b4:85:72:
                    6a:38:d4:0b:2d:98:68:c9:c0:eb:b9:6a:ac:af:70:
                    de:6a:01:80:ac:c0:84:4f:72:8c:29:c8:43:07:5c:
                    fc:d8:f6:3b:63:44:d0:bc:c1:95:6e:cb:c9:24:58:
                    1d:0c:bf:2e:1e:19:ba:ac:0c:94:06:22:b7:55:90:
                    f9:a5:50:9d:92:16:f6:4d:fe:d7:a3:86:b8:0b:30:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:4F:1D:AA:5A:51:55:F3:11:92:02:2D:1C:34:7E:E0:8F:22:E3
            X509v3 Authority Key Identifier:
                keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:a7:62:59:de:bd:95:00:fd:a5:8b:24:bf:37:ab:a1:82:
         8f:87:5a:6e:6c:1b:71:b9:49:14:96:cb:75:0c:90:72:b3:44:
         61:97:b2:23:c8:d4:b6:6e:9e:c3:f4:cb:a5:59:f5:40:4a:74:
         7e:5e:bf:81:5a:c9:75:1d:40:ad:a9:2b:11:ac:83:a9:fc:a4:
         34:05:11:81:b5:c9:a1:b6:8b:71:ae:0e:38:be:67:11:6a:0a:
         d3:69:7e:96:6a:66:0f:d2:da:5e:bb:e9:a6:bc:c4:e9:ac:88:
         7c:98:4d:11:71:4a:5c:ef:0b:e2:83:fa:14:a5:21:7c:13:d2:
         a4:b8:99:41:a5:b4:bb:c7:2e:85:28:fb:2e:60:7d:b3:c1:cb:
         07:f0:2d:14:80:a6:e1:6d:ae:dd:9c:48:19:63:81:37:25:c9:
         48:04:0b:8f:18:36:3a:8f:73:7f:f0:50:8c:5d:31:ef:20:51:
         92:45:8f:49:e8:4f:2e:1a:37:46:1e:b3:74:6c:8e:04:e4:23:
         d5:ac:5b:77:bb:6e:28:bd:8b:d1:f3:78:5d:3c:f1:da:31:69:
         46:9c:a2:a3:77:15:fe:c4:6d:f5:a3:06:de:00:51:0a:18:c3:
         38:9a:f4:bd:e3:76:61:0c:5f:26:18:39:1c:60:13:29:56:74:
         7e:5f:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----