Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File:                     opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier:          Jz4y4uRV7kGZT6vdG6U13kHNR7HYi0rSJZjrwgi1EO8=
Subject key identifier:   D9:84:D5:D4:F0:B4:F1:EC:2D:26:B0:75:D7:E0:D9:03:2D:9E:11:0D
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer:       /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial:       01962E2AD32E2C16426C4CB440166B07F30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number:          C4
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
                          2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: K17QRL+5O3qZ2AnSUH8B2ewp9EsKx2ffMgij+R5BlqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d3:2e:2c:16:42:6c:4c:b4:40:16:6b:07:f3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=d984d5d4f0b4f1ec2d26b075d7e0d9032d9e110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:53:75:d4:66:73:9b:b3:69:68:53:e5:b0:
                    9c:83:3a:cb:07:3b:0c:a0:41:bb:00:55:8a:de:d3:
                    f5:6e:3c:1c:f5:4f:5d:41:cc:9c:f2:02:2b:17:f5:
                    ea:ca:86:18:96:35:7c:3a:e2:0f:8e:67:92:35:58:
                    b7:86:bc:97:75:d2:bb:80:9d:4a:9c:d4:e1:0c:21:
                    35:1f:c9:a7:95:61:d4:dd:35:d2:b1:bc:28:34:44:
                    7a:07:d8:1a:be:c9:56:0f:31:00:ad:22:84:2f:ea:
                    6c:a3:1b:98:a5:91:ca:4e:b4:f5:40:89:4f:63:02:
                    33:1b:1b:32:99:a2:7d:0d:c6:9a:30:ed:0d:80:9f:
                    27:b9:25:11:67:c6:0c:cb:54:65:7f:6e:8d:a1:09:
                    48:48:41:aa:36:0b:d3:4d:10:ea:6f:69:64:0f:0e:
                    dd:e6:c5:07:fb:3a:d3:27:e2:17:0b:04:f9:02:c2:
                    96:7a:f6:b0:43:af:de:75:21:ac:81:7c:4c:d8:86:
                    a6:4a:2b:21:91:6b:6d:3b:91:22:17:fe:5d:cd:e1:
                    52:de:6e:de:78:e7:90:dd:c4:bf:4f:53:13:a4:43:
                    94:39:be:c7:80:47:d1:fd:e4:37:e4:9e:1e:8f:37:
                    f7:5c:e1:68:0d:57:ce:ca:b2:82:de:a3:71:1a:3e:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:D5:D4:F0:B4:F1:EC:2D:26:B0:75:D7:E0:D9:03:2D:9E:11:0D
            X509v3 Authority Key Identifier:
                keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f8:70:95:32:1a:63:82:de:0b:0f:e5:b6:23:b4:33:f4:5c:
         26:a4:d1:e9:57:6c:ac:b1:ac:b9:31:24:95:57:0e:f7:18:d2:
         12:18:24:72:06:1e:14:18:55:4e:7f:5c:e5:bc:35:56:60:53:
         73:e6:cd:94:ef:d4:2a:a0:5c:d3:fd:a8:ce:69:4b:8e:5e:16:
         d4:0b:22:c0:0d:d2:79:73:cf:8c:d5:02:1f:63:9d:7b:e1:3d:
         cc:a7:03:8a:b8:f0:46:17:ab:eb:9c:e3:22:5f:6e:4a:6d:12:
         11:e2:ca:73:59:bd:ce:3c:8b:4e:1b:7f:7e:31:13:80:36:f2:
         90:5b:f3:6b:1d:d7:96:aa:97:7e:5e:15:1a:12:87:38:35:4a:
         4b:c4:7d:0f:d9:3f:7d:83:7d:9c:9c:4c:b5:1d:0c:9f:aa:45:
         52:6b:7f:4e:2c:47:fd:f2:a2:8d:96:bd:9a:1e:90:88:1f:33:
         6a:dd:b6:e3:36:a1:6b:a4:0b:c3:1e:58:25:76:f8:84:7d:05:
         dc:c3:c8:f3:1d:24:0c:9d:1f:25:37:42:17:72:3d:f1:d4:45:
         6f:6b:3a:30:5b:ac:1c:f2:9a:68:9a:6a:6f:e9:46:7f:da:e9:
         d9:69:19:02:09:0c:9d:3c:3c:f0:bb:01:58:4a:9d:4b:12:22:
         b9:14:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----