Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File:                     o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier:          zG4SXmjMtuuXtqAqeAfApwYmX6qjE3wVlSVm+MBizCM=
Subject key identifier:   67:82:3E:22:97:0C:3D:A2:05:EA:35:9E:8E:F0:DE:02:45:B4:73:76
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer:       /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial:       01962FAB777A057AD4C3D4BD3B560D6BE11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number:          0E69
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
                          2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: AuKZGAKjTREzfAKXL2ajAjnMZNqRm2B8t++QQafSIGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:77:7a:05:7a:d4:c3:d4:bd:3b:56:0d:6b:e1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=67823e22970c3da205ea359e8ef0de0245b47376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:71:32:80:57:6b:23:4d:88:8c:a4:cc:34:
                    46:27:cb:84:a6:bc:4c:64:ad:a1:45:42:f4:c7:44:
                    ea:8e:6c:a4:54:bc:28:f0:03:2b:21:c4:ad:31:1d:
                    46:52:e5:11:a1:2d:3d:db:5f:7b:fc:85:48:e6:91:
                    f4:14:7f:4a:d5:a5:04:81:7a:3a:f0:e6:8f:ed:6f:
                    54:73:96:52:a2:55:8d:12:bf:56:e2:32:99:e1:98:
                    27:d9:c2:96:c8:a4:7f:88:54:3c:f8:35:ee:b9:5c:
                    17:3d:c5:ae:33:b3:1c:78:1a:2e:58:ac:0f:07:80:
                    eb:39:a1:10:c0:10:7b:76:00:23:2e:74:ab:8f:5d:
                    3d:70:42:4b:63:64:49:cb:b3:66:63:3f:d2:70:d9:
                    7e:c3:91:51:50:5d:05:4f:2d:69:9c:73:9f:45:e9:
                    6a:a1:ed:cb:18:17:04:64:99:2a:07:49:c1:b2:81:
                    89:f7:03:36:a2:35:8e:b3:b8:fa:8a:96:5c:d5:e6:
                    63:89:28:16:97:7e:8e:48:8e:02:90:03:44:ea:65:
                    e7:8a:9e:ed:3c:ee:77:25:51:24:91:ee:7e:9d:f3:
                    57:64:a7:4a:e3:d1:76:98:ce:59:3c:d0:8a:6f:96:
                    6a:86:f7:9c:31:e1:39:e2:6f:0d:2e:a1:76:f1:25:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:82:3E:22:97:0C:3D:A2:05:EA:35:9E:8E:F0:DE:02:45:B4:73:76
            X509v3 Authority Key Identifier:
                keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:d8:45:ff:e6:d3:7a:32:2b:73:5b:44:8e:47:f9:21:59:
         69:1d:79:40:62:42:48:24:11:4e:57:6e:41:7f:0d:24:1d:57:
         38:bc:18:aa:27:a6:ec:cd:4d:69:5c:a1:f0:f0:8e:20:e6:47:
         38:fc:82:16:da:5a:ee:27:75:cb:4c:86:56:1a:79:f6:99:45:
         17:44:79:3d:9a:4f:7e:97:12:b0:a6:d3:dd:74:97:64:17:c9:
         a1:39:a4:92:fa:4f:9a:f6:4d:d4:6a:54:78:90:d8:41:16:f2:
         ad:dd:fd:95:65:53:d4:9c:6d:bd:9f:94:ca:6a:4a:6f:f5:e1:
         3b:29:c2:5f:3c:6c:74:8a:09:fa:37:97:0d:6f:bd:2b:8c:4a:
         c8:a3:f8:a0:7d:55:07:36:43:cf:eb:36:a4:1a:c0:68:5e:e4:
         df:0e:42:7a:54:fe:58:df:ae:f4:a9:50:d0:ab:6f:16:16:ab:
         80:4d:b1:03:35:8a:ac:31:b9:ac:69:bf:16:1e:5e:2e:79:e5:
         30:21:c8:90:b1:7a:90:cf:f6:d1:4e:63:be:10:a5:fe:40:06:
         a6:48:40:3f:49:2c:fc:d4:a2:e2:b5:a3:b9:c9:ad:d1:eb:c1:
         ae:d6:84:04:f9:40:74:60:05:88:ce:0d:12:bf:a2:7a:4a:d0:
         f9:a6:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----