Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File:                     ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier:          crBPP64f0FOLM4F91YjVFetjHxeb8UdgQuSbNr+AFs8=
Subject key identifier:   BC:86:F9:F4:6B:BA:F1:B5:E3:67:3C:7B:99:23:E0:93:8F:D6:45:2C
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer:       /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial:       01962E9963F6815A1C226B9E9F9137D9F6D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number:          019A
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: RvQeC7nX67JI6DpTDfT7hvKFs60gZ8DMn71PU+2gmQY=)
                          2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:63:f6:81:5a:1c:22:6b:9e:9f:91:37:d9:f6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=bc86f9f46bbaf1b5e3673c7b9923e0938fd6452c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:54:8e:81:21:1b:48:20:08:f2:ad:63:b1:
                    86:64:43:84:31:9f:fc:cc:91:33:79:54:c9:55:51:
                    89:2d:19:fd:4b:06:11:3e:9d:f0:a7:f7:ba:a1:8c:
                    11:84:29:e3:d3:5f:9b:6e:46:e3:2b:ab:cf:ac:25:
                    b7:04:72:ab:9e:db:a4:ac:0c:cb:e3:78:fe:16:d1:
                    81:0e:21:ca:97:11:0a:12:df:eb:c2:93:e8:4c:3c:
                    13:8b:87:dc:28:42:bb:a2:85:d3:b2:72:13:97:d8:
                    23:75:31:94:3f:23:78:fb:9a:70:c3:35:1c:72:ef:
                    47:57:3a:8b:ca:61:81:e6:a6:59:bf:4d:6d:bd:94:
                    cf:e4:36:cc:78:f4:11:fc:74:c6:96:c2:0c:da:49:
                    cf:ed:20:42:fb:c4:06:8b:1f:10:d0:5e:56:ba:da:
                    40:2d:db:a3:40:a3:c3:64:95:72:ec:87:50:a7:e1:
                    5e:7b:56:4d:f4:76:20:64:50:e5:50:64:a8:75:88:
                    c4:dd:70:61:49:42:69:b3:28:f2:36:11:99:7f:07:
                    f9:d2:cb:ed:38:c2:70:d3:a9:7e:83:13:aa:58:20:
                    33:91:07:4f:36:66:17:05:6d:0a:93:17:90:da:a4:
                    f4:7c:52:62:89:c3:c5:df:5d:e7:57:6f:34:17:16:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:86:F9:F4:6B:BA:F1:B5:E3:67:3C:7B:99:23:E0:93:8F:D6:45:2C
            X509v3 Authority Key Identifier:
                keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:0f:d5:f0:ca:dc:7a:a3:ee:16:c1:4c:07:07:43:26:a6:
         bc:86:9d:37:1f:6c:b4:54:7e:92:c3:25:b7:fa:a5:2e:80:73:
         0f:e2:16:7f:45:48:d5:2c:f8:35:c1:27:de:bf:f3:c1:f8:3b:
         9a:43:f8:92:94:35:14:69:e0:45:99:85:b8:1a:95:83:84:1b:
         59:b8:92:99:72:d5:6b:42:33:a5:b3:a4:28:2c:f7:6a:c0:3f:
         7e:ef:42:a3:f9:d4:56:cc:f9:a4:af:6a:db:cb:6d:5d:55:05:
         45:71:5e:fe:90:64:a9:44:52:cb:ec:de:b2:db:42:dd:b2:fb:
         1a:31:55:c4:ae:5d:14:6f:4c:c5:96:2a:f9:86:00:b1:d7:b1:
         eb:d5:6b:cb:57:da:63:af:96:c3:b7:d5:f2:c0:17:5a:73:d8:
         58:68:c1:12:6e:94:d4:fb:ed:3a:11:5f:4b:c5:99:b5:42:33:
         81:6b:80:72:e9:56:0e:24:58:d0:d4:c3:4f:00:68:f3:fe:2f:
         6a:98:c3:ec:cd:6b:53:41:b3:94:db:f9:44:20:f9:3d:94:d3:
         d2:0b:27:48:d7:09:4c:b9:14:3e:5f:e5:d4:9b:1b:13:31:5f:
         4c:74:9a:11:3b:5b:b8:e0:d9:32:21:e6:9e:e0:20:3a:56:cf:
         5b:f1:c2:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWP2gVocImuen5E32fbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj
NTJjYTgwHhcNMjUwNDEzMTAwMjA2WhcNMjUwNDE0MTAwMjA2WjAzMTEwLwYDVQQD
EyhiYzg2ZjlmNDZiYmFmMWI1ZTM2NzNjN2I5OTIzZTA5MzhmZDY0NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC9UjoEhG0ggCPKtY7GGZEOEMZ/8
zJEzeVTJVVGJLRn9SwYRPp3wp/e6oYwRhCnj01+bbkbjK6vPrCW3BHKrntukrAzL
43j+FtGBDiHKlxEKEt/rwpPoTDwTi4fcKEK7ooXTsnITl9gjdTGUPyN4+5pwwzUc
cu9HVzqLymGB5qZZv01tvZTP5DbMePQR/HTGlsIM2knP7SBC+8QGix8Q0F5WutpA
LdujQKPDZJVy7IdQp+Fee1ZN9HYgZFDlUGSodYjE3XBhSUJpsyjyNhGZfwf50svt
OMJw06l+gxOqWCAzkQdPNmYXBW0KkxeQ2qT0fFJiicPF313nV280FxZuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyG+fRruvG142c8e5kj4JOP1kUsMB8GA1UdIwQY
MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt
ODFkMTMwNGZhZjc2LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2
LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEUP1fDK
3Hqj7hbBTAcHQyamvIadNx9stFR+ksMlt/qlLoBzD+IWf0VI1Sz4NcEn3r/zwfg7
mkP4kpQ1FGngRZmFuBqVg4QbWbiSmXLVa0IzpbOkKCz3asA/fu9Co/nUVsz5pK9q
28ttXVUFRXFe/pBkqURSy+zesttC3bL7GjFVxK5dFG9MxZYq+YYAsdex69Vry1fa
Y6+Ww7fV8sAXWnPYWGjBEm6U1PvtOhFfS8WZtUIzgWuAculWDiRY0NTDTwBo8/4v
apjD7M1rU0GzlNv5RCD5PZTT0gsnSNcJTLkUPl/l1JsbEzFfTHSaETtbuODZMiHm
nuAgOlbPW/HC9A==
-----END CERTIFICATE-----