Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File:                     otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier:          Fmml3tRPO3FviDkZZQlGXulfSgOmcpQonWbqopjoDxU=
Subject key identifier:   62:9E:AF:B5:BB:FB:6C:51:89:95:2D:1D:5E:22:EF:0D:A8:03:F7:BC
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer:       /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial:       01962DF3FD2995C2A5CB904D7F31934678C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number:          0347
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
                          2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
                          3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: xp8m0bfISzBi5TDt6pjp4gZdN+OBU/q0bimIK+vHiAw=)
                          4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fd:29:95:c2:a5:cb:90:4d:7f:31:93:46:78:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=629eafb5bbfb6c5189952d1d5e22ef0da803f7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:b4:69:48:69:18:7f:11:c8:1b:71:7b:58:
                    ad:cd:e0:a4:49:49:69:b3:98:0c:46:13:d8:5c:20:
                    91:10:b0:6c:b5:a6:d6:89:cd:f6:94:d1:9e:ea:8e:
                    d8:c4:90:38:d6:a7:70:3c:83:29:3d:ea:dd:a2:60:
                    10:9c:f8:ab:6c:59:d0:1f:29:1f:5a:81:55:cd:79:
                    b3:03:ed:4d:91:90:32:b4:9f:f4:34:34:48:2d:af:
                    ce:cd:5b:48:22:a5:e4:64:e5:ab:50:da:95:d6:4c:
                    4f:87:34:db:14:06:53:04:21:57:7a:3a:ed:27:3b:
                    2a:4a:e0:dd:8b:aa:18:db:4a:81:a4:48:9b:44:16:
                    e8:46:b9:ac:45:47:bb:2c:12:4e:19:e4:5f:b7:60:
                    30:9d:5e:b7:ab:fb:95:9c:3e:a0:8d:34:d8:51:d0:
                    0d:d8:70:a1:46:17:65:ad:91:40:42:ee:f7:37:0d:
                    ce:48:fb:0d:80:40:a3:63:13:ee:bb:69:40:9a:3d:
                    da:7e:d0:12:29:82:4b:fe:85:b6:02:68:45:fd:f7:
                    de:da:c8:f6:3e:84:07:93:bd:33:99:de:68:f5:5c:
                    a5:65:97:eb:69:e3:3d:db:1a:76:5b:0f:34:67:f4:
                    c4:03:28:27:1d:14:7e:88:3c:7b:fd:60:2c:72:d9:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:AF:B5:BB:FB:6C:51:89:95:2D:1D:5E:22:EF:0D:A8:03:F7:BC
            X509v3 Authority Key Identifier:
                keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b8:95:ab:f9:70:f7:31:25:f0:70:2a:e3:45:30:98:14:4f:
         5a:01:a0:65:56:89:12:cf:10:9e:e1:b5:b8:f7:c9:9f:0f:3e:
         43:ac:bb:0b:f7:e0:b6:43:56:0b:82:16:1e:5d:30:22:3d:59:
         26:42:f1:cf:08:69:34:31:f5:7e:43:14:0b:15:2e:75:2b:be:
         6f:20:64:95:b4:89:32:9c:3d:5e:f8:7a:ca:c2:75:83:28:82:
         95:83:50:74:6a:85:57:ad:c2:2f:13:8f:35:a4:5e:a5:30:03:
         b3:77:90:d7:47:ed:13:59:3e:56:31:aa:1c:3b:60:93:a3:4d:
         1c:38:d8:85:ba:31:60:ca:90:b5:a7:cd:c6:75:e7:22:e0:af:
         77:91:41:18:05:f2:5f:99:f7:a8:16:9f:5d:8c:95:ba:2e:41:
         93:c6:b6:84:bf:80:95:c4:f2:a2:a4:4b:ac:05:e3:42:f1:73:
         4d:41:bf:a3:42:ff:47:2d:fa:3e:b5:26:d4:06:0f:a8:d5:72:
         7d:b6:e1:08:76:e8:7a:67:48:f8:1c:e8:6e:04:64:6c:af:1d:
         49:0f:47:37:ca:8c:91:37:57:9f:16:d2:d4:25:d4:51:9c:cb:
         76:a5:5c:47:60:19:5c:6b:2d:06:c1:d5:4e:f1:53:fd:71:76:
         a2:36:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----