Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File:                     OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier:          rvLAnBtJS6Z5OnPG4yOxWoJDIgtyb90ZObbu+m/eTJ0=
Subject key identifier:   7B:F9:6C:E7:70:DC:AB:4C:5D:BE:44:D3:16:09:D3:EF:D0:25:98:A3
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer:       /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial:       01962F74D2D0B8D30B8B72CE9E34AFDD71B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number:          0AD8
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: NsrcRYAcc1kj1DjDf/+OLgHJxF4Dy6djvl6Szp4/mhE=)
                          2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d2:d0:b8:d3:0b:8b:72:ce:9e:34:af:dd:71:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=7bf96ce770dcab4c5dbe44d31609d3efd02598a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:f6:01:79:48:76:fe:e6:e8:02:8d:5b:92:
                    b9:65:bd:cf:dd:24:83:76:d0:1a:86:60:a5:54:b6:
                    00:49:5f:bb:3d:22:01:d2:36:96:08:f9:d2:87:31:
                    a5:69:53:e1:0b:30:5d:3d:d9:43:0f:3a:8f:77:2a:
                    ae:8b:2c:5f:44:41:5c:aa:45:88:0d:7f:0b:cd:a1:
                    a2:24:ce:68:d5:22:63:02:00:ca:89:33:bd:65:5d:
                    07:3d:e2:3c:dd:9c:d3:83:cd:99:62:83:74:90:8c:
                    60:fe:0f:a9:23:3c:c6:82:fe:c8:a4:23:83:7a:d2:
                    7e:5a:a1:c6:04:7d:d6:52:cc:b5:8e:d7:be:17:d5:
                    70:e5:35:8c:ab:a0:25:0b:87:d8:47:c0:f3:0f:03:
                    c9:e8:83:d9:48:da:71:ac:22:1b:1b:f8:49:ce:59:
                    49:c3:9b:de:63:44:66:e5:56:91:11:26:7f:91:4f:
                    25:d8:cf:1d:61:e5:2e:e7:7e:dd:cd:26:43:40:37:
                    44:c2:3a:3a:2d:dc:6a:13:ee:c2:b9:9c:41:37:f5:
                    bf:0f:62:c2:0a:5d:8d:3f:3f:81:35:0c:7e:c3:6e:
                    d1:20:20:12:e1:23:89:3b:75:a2:44:50:02:4c:2b:
                    4c:7d:48:c5:d6:f3:63:48:fc:84:31:69:c4:60:f5:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:6C:E7:70:DC:AB:4C:5D:BE:44:D3:16:09:D3:EF:D0:25:98:A3
            X509v3 Authority Key Identifier:
                keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:c5:cf:70:40:5c:7c:b9:96:db:1b:f7:52:b9:96:8d:ca:
         ac:05:44:0e:35:50:e1:1a:c8:53:f8:0a:89:93:6c:e5:97:8d:
         4c:e1:58:95:57:2a:b4:ad:43:01:82:a7:67:81:9d:5a:44:58:
         5a:7f:6d:46:37:e6:20:b8:ff:7f:2d:6c:89:9e:86:b2:e2:43:
         44:ce:a8:38:da:cc:db:ab:37:6f:98:4c:6f:6c:80:d9:98:c6:
         c7:1f:2f:5e:31:e7:0b:58:d0:c4:e3:61:7b:d6:00:85:b0:cc:
         49:de:ce:a7:eb:2d:e1:83:2d:b4:f2:c0:0d:50:d9:58:ec:c4:
         9e:9c:70:7c:a1:cc:14:76:7e:eb:3c:ad:ab:83:f6:b9:f0:78:
         b0:0e:ba:fa:d5:8d:51:92:ec:f1:41:1c:2f:59:8a:da:0c:57:
         f6:bf:0c:38:a6:b2:e1:db:56:a3:84:5b:a9:66:cb:55:f2:31:
         e9:cb:f4:d3:44:a6:15:7c:a0:1d:a3:11:83:e7:9a:06:66:a5:
         56:0e:00:ce:d4:ec:4b:eb:bb:da:c4:be:d0:79:3b:60:89:7e:
         4a:c3:99:b4:f6:26:74:5f:11:bf:7f:79:25:1b:29:6f:7c:64:
         bb:49:0f:bf:14:7b:0c:d0:bd:f6:c1:17:02:29:57:b7:48:6b:
         b9:ae:8c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNLQuNMLi3LOnjSv3XG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGM2NzljYmFmOGMyYWQ3YmQ3ZTE1OTA4NmZkZjBhMjdk
MmEyODQwHhcNMjUwNDEzMTQwMTQ3WhcNMjUwNDE0MTQwMTQ3WjAzMTEwLwYDVQQD
Eyg3YmY5NmNlNzcwZGNhYjRjNWRiZTQ0ZDMxNjA5ZDNlZmQwMjU5OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbz2AXlIdv7m6AKNW5K5Zb3P3SSD
dtAahmClVLYASV+7PSIB0jaWCPnShzGlaVPhCzBdPdlDDzqPdyquiyxfREFcqkWI
DX8LzaGiJM5o1SJjAgDKiTO9ZV0HPeI83ZzTg82ZYoN0kIxg/g+pIzzGgv7IpCOD
etJ+WqHGBH3WUsy1jte+F9Vw5TWMq6AlC4fYR8DzDwPJ6IPZSNpxrCIbG/hJzllJ
w5veY0Rm5VaRESZ/kU8l2M8dYeUu537dzSZDQDdEwjo6LdxqE+7CuZxBN/W/D2LC
Cl2NPz+BNQx+w27RICAS4SOJO3WiRFACTCtMfUjF1vNjSPyEMWnEYPV+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv5bOdw3KtMXb5E0xYJ0+/QJZijMB8GA1UdIwQY
MBaAFDhMZ5y6+MKte9fhWQhv3won0qKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMmVhYTItY2NiOS00OGUxLTk2MmQt
ZTNlYTY0OTRkNGVhLzEvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMmVhYTItY2NiOS00OGUxLTk2MmQtZTNlYTY0OTRkNGVh
LzEvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXjFz3BA
XHy5ltsb91K5lo3KrAVEDjVQ4RrIU/gKiZNs5ZeNTOFYlVcqtK1DAYKnZ4GdWkRY
Wn9tRjfmILj/fy1siZ6GsuJDRM6oONrM26s3b5hMb2yA2ZjGxx8vXjHnC1jQxONh
e9YAhbDMSd7Op+st4YMttPLADVDZWOzEnpxwfKHMFHZ+6zytq4P2ufB4sA66+tWN
UZLs8UEcL1mK2gxX9r8MOKay4dtWo4RbqWbLVfIx6cv000SmFXygHaMRg+eaBmal
Vg4AztTsS+u72sS+0Hk7YIl+SsOZtPYmdF8Rv395JRspb3xku0kPvxR7DNC99sEX
AilXt0hrua6Mlw==
-----END CERTIFICATE-----