Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File:                     oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier:          LUaBSHYejb1aAQAjTagBbbMeri9CJZwg47Tp1PEqquo=
Subject key identifier:   2A:3D:32:85:15:25:EC:B1:A9:09:73:DE:19:06:01:41:A8:F7:9C:E2
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer:       /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial:       01962F744E6ED90C8C6EEBBA0CABC540790F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number:          0BF9
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
                          2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
                          3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
                          4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: gRleDiAJt3Tifo9NnW7++RMmpsfFJPkf55yVzSZKH5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:6e:d9:0c:8c:6e:eb:ba:0c:ab:c5:40:79:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=2a3d32851525ecb1a90973de19060141a8f79ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:9d:ad:8b:8a:20:04:09:2e:bb:74:8a:5b:
                    2b:db:ab:73:30:24:1f:59:3f:97:bb:3a:89:aa:be:
                    06:bc:61:04:0c:4b:59:02:0e:ad:af:65:a0:85:b7:
                    66:8f:be:38:12:93:f2:c1:af:0c:fc:77:4d:b2:53:
                    0f:c7:df:1f:a4:6a:17:90:a3:57:25:bd:7a:5c:9e:
                    65:9e:64:2d:81:a7:f5:c4:7c:73:2b:57:1e:8e:a0:
                    27:48:b7:15:0c:0b:7b:59:81:4a:48:e4:43:b3:7d:
                    01:e6:e0:13:32:97:c6:61:67:6c:8f:d1:4a:ab:3d:
                    2d:15:05:63:ab:34:ff:f1:52:a1:33:78:ce:cc:ac:
                    e7:78:52:25:46:e9:89:5f:38:56:b2:3e:c4:af:10:
                    b6:32:6b:2d:7a:e9:94:eb:6c:87:ed:2f:4d:b9:ef:
                    c3:cb:df:0b:32:ef:7a:ca:cc:c3:87:26:fd:03:cb:
                    a0:7f:33:2b:6a:21:a3:33:72:68:d5:5d:57:90:48:
                    9f:ba:f2:96:82:d4:9f:87:fc:57:3c:5f:3d:d3:07:
                    0b:0e:69:54:03:a1:a9:63:11:bd:c3:44:05:37:2a:
                    d7:fb:d1:33:ff:ae:de:37:90:3b:25:0a:2d:0e:6b:
                    88:ab:21:34:e7:6f:ac:8b:4c:9a:7f:8d:0e:fe:c2:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3D:32:85:15:25:EC:B1:A9:09:73:DE:19:06:01:41:A8:F7:9C:E2
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:32:15:a8:e0:92:13:f6:b2:cb:b7:c3:c2:df:45:89:52:
         e0:a4:81:a1:63:83:a0:1a:17:80:0e:29:a5:8e:88:41:dd:cb:
         84:73:e2:86:9a:f7:13:62:a5:3b:27:c3:53:db:73:60:80:98:
         cf:dd:2d:fc:55:ba:e1:36:bc:ca:81:11:0f:30:1c:84:85:d8:
         23:dc:33:4d:ad:cf:5a:56:06:b6:79:8c:bf:0e:97:8b:11:31:
         d8:dd:91:f7:4a:bf:ac:3f:98:24:21:ab:53:56:ce:1f:7e:01:
         56:20:fa:6b:16:e4:cc:ad:72:e0:94:59:da:7e:ef:bb:a7:a6:
         f6:4f:e7:d4:4a:46:93:ba:81:19:ef:a2:20:d4:a3:32:cb:af:
         48:5a:37:b0:75:23:f1:fb:87:81:64:31:6d:7c:ad:84:d6:e1:
         1e:00:0d:0e:39:eb:6f:50:a7:15:06:59:a6:35:43:a5:4e:b6:
         19:1a:cf:91:87:e7:ca:30:02:82:2f:3f:da:72:00:b3:65:e9:
         75:e1:dd:82:6a:c7:f9:89:f8:12:c8:ca:7b:84:61:60:64:93:
         71:a2:17:3e:98:76:3c:c5:ad:3c:44:87:69:c8:6d:53:fa:53:
         aa:d0:74:94:52:4d:78:e7:b5:a7:e7:41:c9:fa:2b:48:54:47:
         ee:5a:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----