Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File:                     rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier:          AcVGTNk346V7hqigtWoGRSY4wx/Bd0NAAbQPZksfxfM=
Subject key identifier:   3A:35:27:4C:19:31:00:A1:1C:37:12:26:48:38:4F:6C:42:A9:BB:9D
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer:       /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial:       01962F744607583559D7A73A1D1AA0E8ADD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number:          06BD
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=)
                          2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: MQfmyiDNQonpnix05M0yv7l1YsaI6CKoVgoj28cyWGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:46:07:58:35:59:d7:a7:3a:1d:1a:a0:e8:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=3a35274c193100a11c37122648384f6c42a9bb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:12:01:6a:bb:5e:5e:8d:6f:3e:18:7a:36:
                    b3:cc:9f:bf:55:d2:64:12:b7:a4:36:01:71:7b:11:
                    00:07:4b:48:c9:1a:6b:4b:01:1b:9d:78:da:8e:0f:
                    62:cf:70:32:c9:64:0f:52:b1:dd:66:1d:63:59:82:
                    1c:36:94:fc:3d:1b:79:24:95:2b:6a:8c:f0:0b:f8:
                    05:f8:fd:70:0c:70:cf:cc:39:44:c2:f5:b5:57:3b:
                    00:65:de:05:0c:d1:56:9f:05:0c:a9:9c:b9:db:eb:
                    6c:75:fc:e6:92:30:27:e0:17:69:0f:20:d9:36:c1:
                    e0:8c:71:ed:a1:35:a6:46:5b:32:a2:18:65:b7:32:
                    54:24:6f:bc:4e:64:67:f3:24:ed:ac:71:ee:88:00:
                    74:89:b6:e4:48:a8:d2:d9:2c:4f:34:d8:f0:9c:53:
                    40:e1:e0:f2:4e:5b:4d:96:65:33:0f:00:bb:40:16:
                    a2:e8:f6:0d:99:27:5e:53:0d:5c:03:f5:93:f7:74:
                    d8:cc:2a:cb:00:a4:99:39:15:2f:e3:ba:23:49:57:
                    cf:a8:13:5b:67:b5:47:31:85:75:87:9f:20:50:df:
                    6b:f2:66:e7:d5:ad:45:09:11:00:03:b9:a0:00:ba:
                    41:dc:05:d8:0b:38:4b:0c:32:70:1f:78:1e:08:a4:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:27:4C:19:31:00:A1:1C:37:12:26:48:38:4F:6C:42:A9:BB:9D
            X509v3 Authority Key Identifier:
                keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:b7:4e:69:23:92:44:c6:f6:de:33:ee:d7:27:65:22:b1:
         ed:d2:8a:59:47:dd:10:b0:e9:0a:77:0b:21:cd:98:a2:9f:08:
         b5:48:86:47:ee:6d:15:f9:49:97:f8:18:f5:d6:88:c5:ae:e0:
         0f:e3:85:bd:bc:a2:9d:94:dd:6e:0e:4e:98:da:2b:00:fa:6a:
         2f:0c:0d:f5:2a:fa:00:a3:a4:77:ae:58:d0:a8:41:d5:20:6e:
         e6:78:41:fe:c8:c0:ee:f4:64:54:88:b7:dd:e7:b7:97:b6:29:
         6f:8d:fa:99:c0:0e:6a:3b:04:7a:3f:6c:a9:94:f2:48:a3:32:
         76:00:a1:1d:ad:e8:29:11:d6:12:2f:1a:66:9c:38:f6:16:da:
         8d:f1:23:c2:a2:41:ef:1d:e5:1f:4d:8d:bd:1c:18:b0:57:4c:
         6b:d6:c9:35:26:2a:93:e9:f4:f3:2a:cc:23:07:45:14:91:e4:
         43:49:0c:32:32:3f:64:31:a3:1b:a6:dd:1c:b0:49:cf:75:b5:
         9b:a0:4a:62:29:61:43:f6:16:24:80:6c:7e:8e:1c:a8:83:aa:
         b8:33:ad:e3:19:2e:27:2b:8c:ce:b8:c6:82:ac:e2:b8:14:97:
         f9:8f:a3:54:99:1f:c2:0a:96:ec:66:42:d8:1a:37:8b:0a:2c:
         0b:84:18:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEYHWDVZ16c6HRqg6K3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4
MjVmMGMwHhcNMjUwNDEzMTQwMTExWhcNMjUwNDE0MTQwMTExWjAzMTEwLwYDVQQD
EygzYTM1Mjc0YzE5MzEwMGExMWMzNzEyMjY0ODM4NGY2YzQyYTliYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVASAWq7Xl6Nbz4YejazzJ+/VdJk
ErekNgFxexEAB0tIyRprSwEbnXjajg9iz3AyyWQPUrHdZh1jWYIcNpT8PRt5JJUr
aozwC/gF+P1wDHDPzDlEwvW1VzsAZd4FDNFWnwUMqZy52+tsdfzmkjAn4BdpDyDZ
NsHgjHHtoTWmRlsyohhltzJUJG+8TmRn8yTtrHHuiAB0ibbkSKjS2SxPNNjwnFNA
4eDyTltNlmUzDwC7QBai6PYNmSdeUw1cA/WT93TYzCrLAKSZORUv47ojSVfPqBNb
Z7VHMYV1h58gUN9r8mbn1a1FCREAA7mgALpB3AXYCzhLDDJwH3geCKSJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo1J0wZMQChHDcSJkg4T2xCqbudMB8GA1UdIwQY
MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt
OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5
LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6i3Tmkj
kkTG9t4z7tcnZSKx7dKKWUfdELDpCncLIc2Yop8ItUiGR+5tFflJl/gY9daIxa7g
D+OFvbyinZTdbg5OmNorAPpqLwwN9Sr6AKOkd65Y0KhB1SBu5nhB/sjA7vRkVIi3
3ee3l7Ypb436mcAOajsEej9sqZTySKMydgChHa3oKRHWEi8aZpw49hbajfEjwqJB
7x3lH02NvRwYsFdMa9bJNSYqk+n08yrMIwdFFJHkQ0kMMjI/ZDGjG6bdHLBJz3W1
m6BKYilhQ/YWJIBsfo4cqIOquDOt4xkuJyuMzrjGgqziuBSX+Y+jVJkfwgqW7GZC
2Bo3iwosC4QYBQ==
-----END CERTIFICATE-----