Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File:                     oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier:          Qfws6MGDR+kI2ebYB6BF14Q5s8l6E7GiwlZZIjlq8AY=
Subject key identifier:   CC:A4:27:02:2C:1D:9B:A4:31:40:E1:E7:78:E6:59:2E:F9:36:6F:5C
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer:       /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial:       01962E9919407876E9E02CA3DB918FB7E26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
                          2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
                          3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
                          4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: a+v9rwNLPiOUqcLnzFq2Cyx4TinzCl34t9gw29QcyuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:40:78:76:e9:e0:2c:a3:db:91:8f:b7:e2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=cca427022c1d9ba43140e1e778e6592ef9366f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:e2:94:f8:d5:91:c8:9e:ac:81:60:6a:6f:
                    4c:7e:2a:58:c5:24:15:26:a9:e0:cb:d6:c1:e4:8c:
                    78:2f:70:21:22:ad:1d:26:02:ba:ce:49:9a:e2:d8:
                    26:be:3d:72:35:c7:1b:ab:72:b4:97:07:15:73:07:
                    50:26:0e:d5:e7:ec:48:55:d2:f5:a8:6b:b9:ff:16:
                    ad:d1:7b:50:34:cf:bc:80:17:61:62:11:c2:24:cd:
                    86:b8:cb:00:70:c5:ce:ba:97:27:46:56:1f:fd:73:
                    86:4c:eb:2b:85:54:22:7b:61:31:15:bf:39:be:65:
                    fa:d7:7a:5e:b7:c7:5d:bd:82:27:d2:67:d7:d7:11:
                    bd:9c:7c:6b:7f:95:f2:01:a1:00:aa:7f:82:42:f5:
                    8b:f3:85:98:11:c9:ed:b8:f6:13:05:8c:d6:93:b3:
                    2c:e3:fd:38:23:70:93:f7:38:7c:18:a7:04:1a:18:
                    32:50:cc:d2:69:78:69:61:c7:0c:23:49:e0:91:60:
                    39:2c:3a:fe:8c:1b:ec:72:96:82:a7:cc:f9:18:81:
                    0a:04:b2:c4:f6:9a:db:cc:14:77:7d:71:f8:6c:47:
                    6b:fc:7e:e0:72:8f:b8:22:93:59:ff:bd:d7:6f:4a:
                    bf:66:bf:2c:5b:58:49:15:b1:34:25:42:6a:19:5d:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:27:02:2C:1D:9B:A4:31:40:E1:E7:78:E6:59:2E:F9:36:6F:5C
            X509v3 Authority Key Identifier:
                keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:20:fc:a4:11:bc:09:a7:cf:e8:99:d2:67:fd:71:8c:6c:a4:
         a2:b2:ae:49:4c:fe:da:0b:4d:27:62:b0:c7:b7:34:1a:ea:06:
         68:1f:84:18:ff:2b:9b:0c:ef:b1:e8:a4:eb:51:20:68:2e:e9:
         9b:b8:34:dd:a8:a3:94:9f:00:4b:17:59:43:49:a7:0d:7b:4d:
         fe:bd:7a:49:46:44:22:02:e0:d2:b2:01:e4:9f:f9:03:03:df:
         4e:7c:3d:ae:e3:5b:29:96:af:1b:66:cf:45:9c:cc:f0:2f:9c:
         8a:9c:02:c1:2c:af:11:7d:2a:aa:05:08:df:90:c0:ae:15:8e:
         e6:de:85:c8:2d:cd:04:23:81:01:75:aa:a9:53:7a:3b:e1:6a:
         14:57:86:e3:db:04:dc:02:04:1d:88:a3:a1:de:f2:88:80:75:
         37:e1:a9:45:9e:28:80:b8:66:15:97:48:fc:67:c6:d7:e4:d1:
         4c:25:6f:4b:b6:63:b7:39:c9:0d:2b:46:43:c8:d8:09:ee:04:
         fa:ce:63:10:94:a4:67:b7:c5:a5:d9:9f:43:79:ed:a1:17:39:
         81:54:ae:23:fb:4e:5b:21:92:99:6b:1f:48:a3:02:ad:e3:84:
         c9:88:4c:03:d9:09:b3:24:b1:a6:70:b7:74:73:5e:3c:ad:be:
         75:fe:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----