Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
File:                     oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft (raw, json)
Hash identifier:          I5Fh7/v+QvpFqsQq7hty54zks1rdhaYd13ww7yn5gf0=
Subject key identifier:   3B:7C:56:01:73:3F:BE:3F:92:0B:6D:E3:E1:EB:B1:FD:C6:0F:42:31
Authority key identifier: A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
Certificate issuer:       /CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Certificate serial:       01962E99570B2AFBFD62479F56CB19821B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl (hash: qRdFHGSfgqg3peTgw2/at3QRFvw1DqYHc99HBjj49Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:0b:2a:fb:fd:62:47:9f:56:cb:19:82:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=3b7c5601733fbe3f920b6de3e1ebb1fdc60f4231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:be:82:c0:75:76:e4:a5:81:27:11:dc:bc:
                    09:ad:64:3f:8a:fb:ad:3a:3b:66:ae:7b:1f:ed:3d:
                    0f:19:75:15:10:57:25:7d:f6:81:68:22:94:ff:3e:
                    20:b2:57:a0:e8:76:c1:72:ad:71:88:41:b2:fd:db:
                    6c:ac:3a:d2:b3:65:39:99:5b:16:d4:b4:02:5f:37:
                    3f:3c:82:85:a5:20:64:6b:26:c9:37:12:b7:23:45:
                    56:ae:97:21:c4:97:b9:79:8f:9a:20:a1:52:b1:18:
                    8a:6d:ab:3e:52:93:1b:78:75:01:a7:df:ae:92:74:
                    f2:d1:ed:92:86:ba:ee:89:08:07:70:bc:d2:95:32:
                    3f:4a:cb:44:54:ba:4a:4a:b0:e7:b3:39:e9:f5:28:
                    cd:b7:c3:55:9e:69:f3:5b:fd:71:cc:c8:8f:4f:d4:
                    30:cc:c4:fd:ca:6e:6f:42:8f:bb:b5:26:f7:71:53:
                    fa:b8:7c:eb:d1:41:0b:ef:05:ec:8a:70:8d:f0:9e:
                    23:87:6a:1a:48:65:39:69:23:bd:3e:03:d7:27:bd:
                    44:b8:4b:ef:98:87:68:a9:50:c4:84:80:2b:e9:7b:
                    69:4b:4a:8f:36:2d:3f:2e:b9:22:a3:34:38:be:35:
                    c9:6c:73:0a:41:ab:01:73:2f:d8:39:25:c4:f2:54:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7C:56:01:73:3F:BE:3F:92:0B:6D:E3:E1:EB:B1:FD:C6:0F:42:31
            X509v3 Authority Key Identifier:
                keyid:A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5d:2f:bc:22:f4:e3:b7:04:40:9a:11:df:6c:7d:9f:61:0f:
         63:37:df:c8:a6:6f:b0:7b:d0:e7:d0:03:15:6c:32:e0:e4:ef:
         31:1e:cf:e8:ec:78:d6:50:21:46:0a:5a:3c:e0:9e:65:10:59:
         5d:42:4b:1f:4f:ae:56:df:8a:da:1c:44:81:37:8d:07:a2:f7:
         dc:70:fc:98:ad:88:8e:fb:f8:81:13:95:28:52:78:5f:9c:05:
         5a:2c:d0:6a:d0:7b:dc:e3:42:ff:2b:38:0e:2f:b0:60:ee:b3:
         53:5e:7b:60:43:9f:cb:40:05:1f:27:f0:d3:e3:a0:a2:18:7c:
         02:4d:25:31:78:e7:c3:75:fb:76:0b:16:4f:d2:da:9e:36:3c:
         06:1e:d9:4c:b9:c7:01:32:b2:8a:6c:76:5e:01:af:93:66:8c:
         e5:81:38:fe:e2:03:42:b9:58:bc:2a:d3:35:ef:06:cf:46:a4:
         d5:8f:e7:cd:26:bd:04:df:8a:46:55:50:d4:a2:a5:34:b6:54:
         ba:9a:38:ae:88:99:91:5b:f7:0b:ce:7a:80:f3:e2:2e:94:f8:
         d9:2b:6e:24:e0:95:15:dd:38:ed:6c:bf:cc:c8:a0:3b:92:46:
         19:4e:f8:3d:45:99:1d:af:fb:a0:7c:4a:7f:18:ce:a5:56:0e:
         0e:2a:11:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVcLKvv9YkefVssZghs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY3ZTA2YjU5MDQ2MzVlYjRkMWM5MWMzNDEyODlmNTlh
ZmVhYTcwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EygzYjdjNTYwMTczM2ZiZTNmOTIwYjZkZTNlMWViYjFmZGM2MGY0MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB2+gsB1duSlgScR3LwJrWQ/ivut
Ojtmrnsf7T0PGXUVEFclffaBaCKU/z4gsleg6HbBcq1xiEGy/dtsrDrSs2U5mVsW
1LQCXzc/PIKFpSBkaybJNxK3I0VWrpchxJe5eY+aIKFSsRiKbas+UpMbeHUBp9+u
knTy0e2ShrruiQgHcLzSlTI/SstEVLpKSrDnsznp9SjNt8NVnmnzW/1xzMiPT9Qw
zMT9ym5vQo+7tSb3cVP6uHzr0UEL7wXsinCN8J4jh2oaSGU5aSO9PgPXJ71EuEvv
mIdoqVDEhIAr6XtpS0qPNi0/LrkiozQ4vjXJbHMKQasBcy/YOSXE8lRfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDt8VgFzP74/kgtt4+Hrsf3GD0IxMB8GA1UdIwQY
MBaAFKCmfga1kEY1600ckcNBKJ9Zr+qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNWUxYWMtZTcwMy00ZjU3LWE5MWEt
YjBmZWI0ZjkzMTlhLzEvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wNWUxYWMtZTcwMy00ZjU3LWE5MWEtYjBmZWI0ZjkzMTlh
LzEvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnV0vvCL0
47cEQJoR32x9n2EPYzffyKZvsHvQ59ADFWwy4OTvMR7P6Ox41lAhRgpaPOCeZRBZ
XUJLH0+uVt+K2hxEgTeNB6L33HD8mK2Ijvv4gROVKFJ4X5wFWizQatB73ONC/ys4
Di+wYO6zU157YEOfy0AFHyfw0+Ogohh8Ak0lMXjnw3X7dgsWT9LanjY8Bh7ZTLnH
ATKyimx2XgGvk2aM5YE4/uIDQrlYvCrTNe8Gz0ak1Y/nzSa9BN+KRlVQ1KKlNLZU
upo4roiZkVv3C856gPPiLpT42StuJOCVFd047Wy/zMigO5JGGU74PUWZHa/7oHxK
fxjOpVYODioROA==
-----END CERTIFICATE-----