Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File:                     OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier:          1s32uQm37WgfO5oeKAwLKLJ+DlakbGkfzQihpulxL+8=
Subject key identifier:   FF:D9:7F:11:C3:FD:DC:42:BD:C3:A1:25:10:06:B9:FE:00:E3:AC:B8
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer:       /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial:       01962E99B31BE1460AE3A96045F11909DD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number:          13E6
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=)
                          2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=)
                          3: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=)
                          4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: doGYepIwddpjRf1F01oDR4gGE90JvSC5Y4lHZ/T3UDQ=)
                          5: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=)
                          6: e6DZbvh_L3W1UeddH35B67LJi9Q.roa (hash: +0Dm3AWD3U6fAKnLyGuhhEgtHeQpyhFkn7EMeVE2k/Q=)
                          7: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=)
                          8: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:1b:e1:46:0a:e3:a9:60:45:f1:19:09:dd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=ffd97f11c3fddc42bdc3a1251006b9fe00e3acb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:47:3a:63:3a:e4:56:75:6a:1a:78:fb:d4:
                    52:74:10:1c:eb:85:36:78:98:0d:1d:ec:58:bc:13:
                    e9:35:72:92:b2:43:ba:2c:d5:27:cd:ae:6e:70:86:
                    3f:80:ee:b0:f7:c4:bd:ac:c1:02:2d:e7:b6:ac:0c:
                    0a:0a:f0:a1:9a:94:f5:20:30:6b:1d:6b:f8:ca:f5:
                    02:30:c6:04:6a:ee:e5:e0:db:e0:65:be:2b:0f:16:
                    64:16:b0:88:d5:64:d9:06:3c:95:a0:a2:1a:79:60:
                    b1:32:00:9b:17:f7:6d:bd:1f:04:ea:6a:f2:0f:99:
                    92:32:c9:8a:e7:4f:1b:08:a3:71:a9:e3:fb:5a:97:
                    5d:99:e4:c5:3b:db:27:79:23:c0:ee:d9:79:6e:d9:
                    45:82:73:76:2a:c7:d9:b8:81:bd:d2:47:25:15:e0:
                    1e:d0:65:60:18:f5:c2:9d:bf:4b:8f:ac:39:f4:14:
                    3e:87:ad:27:1c:a7:65:30:34:ed:e7:fd:ab:37:68:
                    f2:3c:82:84:26:73:aa:96:29:89:39:94:ec:b5:04:
                    e6:95:e0:f0:ce:dd:76:29:9c:c5:ea:45:6f:9d:99:
                    fd:f9:e7:30:fc:63:45:a6:b4:82:ba:a0:f7:2e:5e:
                    19:aa:13:6d:1f:92:07:49:b6:bb:2a:fc:92:95:40:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:7F:11:C3:FD:DC:42:BD:C3:A1:25:10:06:B9:FE:00:E3:AC:B8
            X509v3 Authority Key Identifier:
                keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:f0:21:c9:fe:28:4c:cd:b5:bf:42:fb:4a:dc:e4:41:83:
         b4:da:41:f2:69:5d:84:fa:16:3c:4d:e6:a5:4e:8e:13:8b:f1:
         4a:e1:c8:ef:98:8a:bd:91:24:94:1d:e5:19:3d:6a:81:54:fc:
         e0:9d:bf:39:e4:3f:e0:0b:62:69:5d:39:be:69:97:2d:0b:aa:
         4a:9d:23:cd:ba:ba:bf:63:de:10:e8:84:91:86:6b:95:04:aa:
         c3:be:89:61:ee:4b:55:7b:f7:6b:56:da:8d:6d:0c:d3:51:25:
         67:eb:4c:09:af:3a:a4:ba:cf:3f:ae:71:3e:d5:2e:d2:c0:27:
         b4:e8:e4:2f:0f:92:23:09:c7:66:0a:bc:1c:4b:33:23:ba:a7:
         a2:22:9f:54:2f:c0:10:0f:c5:d8:08:f4:fa:1b:6c:ee:80:28:
         43:98:3e:d1:b2:d4:ab:08:f0:ad:59:f2:07:27:8d:41:7b:50:
         9e:a8:60:19:09:5a:e3:6a:59:0e:20:5b:59:c2:ca:24:b7:a4:
         ab:5e:7a:67:01:a2:11:47:8e:24:85:30:56:3f:d6:7f:eb:8e:
         9d:ca:73:1f:cc:23:66:6f:f6:c3:58:89:03:43:81:73:4b:33:
         4d:33:a5:84:e3:0b:80:7b:33:e9:a9:8e:70:b0:97:15:f2:f3:
         97:3e:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----