Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File:                     O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier:          DiCoUShq40UQQOikgzSBJhO4JRrO6x7mWTA6cH18gcY=
Subject key identifier:   DF:DD:B5:23:3F:0F:CF:D0:CC:29:4C:ED:1C:4D:DB:75:60:41:6A:E3
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       01962F3D8966EA12324A57C09FF2C98B408B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number:          09E4
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
                          2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: Ph8D5vnsQraGlGGxaTtdAUH6+F5hUuA0/FK0K8wkz/A=)
                          3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
                          4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:89:66:ea:12:32:4a:57:c0:9f:f2:c9:8b:40:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=dfddb5233f0fcfd0cc294ced1c4ddb7560416ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:e2:b9:29:80:27:3a:03:c5:90:2e:22:ed:
                    47:57:c5:65:67:ba:1b:5a:f7:7e:d2:f9:81:6c:b2:
                    42:33:d9:99:ef:29:33:28:0b:ed:8e:42:9e:e2:8a:
                    27:d0:26:46:25:00:f3:e3:fa:7a:aa:71:0a:c7:56:
                    9a:73:4e:04:fe:bf:03:e1:e2:75:aa:ab:d4:91:64:
                    57:e9:fa:0c:1f:1b:f7:3b:43:da:d4:74:3b:b6:7f:
                    31:d8:8c:26:c4:cc:16:e1:eb:2c:a6:8a:7c:19:ec:
                    6d:d1:8f:f7:1c:1c:3a:93:15:52:d5:f0:7e:5b:08:
                    50:29:1e:ca:f3:92:4a:27:e0:c0:1e:dc:4f:26:0b:
                    d3:42:0b:2c:3f:b5:0c:85:6d:7b:80:78:55:e6:27:
                    a1:ed:8f:64:97:33:e7:f8:6c:7c:4d:06:f0:36:10:
                    6c:b9:03:e9:44:30:d6:65:3c:b1:f3:e5:67:3e:bc:
                    5b:e4:11:91:7d:2e:ed:59:a3:95:1f:a3:a0:e1:fa:
                    02:e9:47:52:2f:e2:c1:03:a5:6d:d3:39:93:eb:c6:
                    cd:f3:4f:6d:ae:c4:78:f2:05:63:6c:39:2c:3d:5e:
                    30:8e:ef:8f:19:d6:b6:78:cb:30:7d:54:91:da:b6:
                    00:9f:1f:f3:45:8e:60:e0:ad:81:13:b5:69:f3:04:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DD:B5:23:3F:0F:CF:D0:CC:29:4C:ED:1C:4D:DB:75:60:41:6A:E3
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:b3:4d:dc:94:53:6f:ea:7e:b7:bd:e7:51:63:54:c6:1b:
         1a:7f:d5:97:91:12:57:9a:76:c3:2c:19:ed:07:9c:0a:ae:cd:
         3e:0a:ca:2a:a8:2c:f3:59:8d:20:aa:8d:2b:b9:2c:8c:d2:90:
         ad:96:25:1d:03:6f:15:09:f0:60:77:79:6c:d6:9e:dd:50:66:
         6d:e4:4f:d8:c1:30:8c:b3:b3:0f:eb:c3:6e:76:b0:a7:0f:15:
         71:8f:3b:54:1d:4b:1e:94:e4:4f:11:df:9d:7a:e8:90:74:b6:
         20:a8:58:1e:fc:2d:0f:42:67:f3:c7:30:65:5d:f8:d1:4e:68:
         01:29:30:40:10:16:f0:b4:a4:12:82:2b:da:5c:21:84:f3:0b:
         63:a7:bd:98:fe:2c:8c:8c:83:62:c5:60:f9:96:f1:2e:0a:dc:
         2f:4e:f8:7d:9e:cd:0e:98:b1:96:af:0b:6f:e2:7f:54:06:54:
         4b:5c:fe:17:30:f0:9c:0a:ee:9a:b2:36:3d:5f:3a:93:2b:a0:
         22:07:4e:90:c0:30:5d:9d:e4:37:78:62:17:0a:0b:f6:b3:60:
         a9:e3:1a:12:82:0b:51:8b:0c:af:4a:9b:0f:ac:c6:c3:d4:39:
         52:97:19:97:ec:51:1f:a3:86:03:95:06:9e:4b:bb:f8:57:87:
         05:a7:b1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----