Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File:                     OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier:          acKCqsb787yseTp2R/8ngq86A11o/EE4tV1HXvrDSAo=
Subject key identifier:   83:25:93:A0:7C:C8:42:ED:11:98:CD:17:7A:94:1D:FE:B6:E8:2C:F8
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer:       /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial:       01962DF42298E298C83D3B8E9AF66EA3B307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number:          CA
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: MLA6lEk6mh1kRlB3Lv5EfAxba/sFXddo7pKWHFACRRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:22:98:e2:98:c8:3d:3b:8e:9a:f6:6e:a3:b3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=832593a07cc842ed1198cd177a941dfeb6e82cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:74:df:41:5d:db:26:9f:6f:64:f0:9a:8c:
                    f9:11:8f:9b:61:fe:25:6e:b8:17:ad:39:30:5d:de:
                    93:40:f8:19:51:66:b1:c6:29:88:aa:ec:8c:4c:31:
                    23:3f:70:e9:6e:a6:e8:78:0e:87:b2:bd:83:af:27:
                    c6:7f:53:3c:42:c3:38:c5:94:f1:f6:bc:8d:18:20:
                    a9:17:82:0b:fd:b1:ff:7d:05:5c:23:31:b7:63:c8:
                    42:91:1b:9d:43:e4:36:62:ef:f9:34:b8:02:6c:9b:
                    41:74:4c:a5:9a:75:cd:6d:51:b4:e8:51:00:0e:88:
                    56:98:01:d1:5f:c3:71:02:54:87:b7:13:fa:7c:35:
                    00:4c:b9:32:5c:fa:e3:34:df:2b:7b:70:83:de:1e:
                    4a:ce:98:75:f0:ae:30:17:ec:da:4b:20:68:ad:e1:
                    26:b4:f6:88:ed:a0:51:60:21:d6:72:9d:f5:ad:ef:
                    a1:00:6a:ad:a8:ea:7e:26:54:6e:f2:1e:be:70:dd:
                    18:9a:50:b9:7a:42:09:82:52:b8:f8:05:49:16:0c:
                    3d:47:3d:7a:cf:a0:db:46:c2:fc:1c:bb:cb:a9:bd:
                    8a:ea:4d:21:88:08:97:c7:43:15:76:53:1c:f5:ed:
                    53:1d:84:b0:43:f0:d3:20:78:aa:f1:84:79:6a:0f:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:93:A0:7C:C8:42:ED:11:98:CD:17:7A:94:1D:FE:B6:E8:2C:F8
            X509v3 Authority Key Identifier:
                keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:5e:b0:2f:29:7d:c5:56:b0:1d:cc:e0:8c:0d:89:13:24:
         dd:b7:a0:00:0d:60:91:80:d3:39:98:94:98:0d:c0:59:c4:0b:
         31:a9:13:35:75:f5:9d:c2:24:d0:b7:a8:49:e1:de:c6:24:5f:
         b6:93:dc:fc:40:cd:48:0a:33:c5:e3:04:68:dd:03:d8:ed:74:
         cd:50:87:15:33:09:d5:78:9c:41:3a:93:b0:37:d8:14:33:1a:
         63:2d:f5:d2:21:12:91:ed:a8:4d:c7:95:3e:11:44:53:c1:9d:
         ca:88:7c:50:1e:9a:6f:03:b5:4a:d2:21:d9:08:d6:ed:2b:8b:
         94:94:fe:99:64:c5:0e:fe:c2:cd:e0:cb:8e:b9:37:e7:6d:c3:
         1b:38:ef:f7:2f:90:e8:1e:55:4f:9e:26:00:86:d7:90:99:6f:
         bb:c2:ea:0c:70:3a:32:ee:0a:a0:f8:95:eb:32:7e:c9:6d:57:
         52:f7:ee:d2:b5:63:fd:16:9e:df:0e:c6:c9:8c:7e:79:d8:48:
         4c:67:bb:70:e0:44:b1:19:38:7e:d2:3c:4f:f2:47:6b:67:6f:
         14:3e:1e:b6:7d:ed:e9:dd:71:c0:dd:f3:51:69:d1:4b:b0:07:
         c0:23:61:0b:7d:1c:44:90:ff:ae:5b:72:2b:17:1b:c8:ba:31:
         37:54:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----