Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
File:                     OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft (raw, json)
Hash identifier:          aehY9HrjX4ErxTieuQnAQwKKY4PBcC8MDrq/8imdUjY=
Subject key identifier:   F8:D8:B5:F7:9A:FA:7C:18:80:F3:D3:DC:37:82:3B:98:EA:1E:C6:FA
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Certificate issuer:       /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial:       01962F067B0DABD77656934F93E87BDD270A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
Manifest number:          0643
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl (hash: Shj/2jmiflDVD1t9/NilP+U0mp0/JenLiFqHt1LphHs=)
                          2: rjNkcaWpx4NgEp7EebCLdM3ILZM.roa (hash: gP4yiejn3v7lSwj9QDjHhQARpfcTwm6Zlm/8oXwlSSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7b:0d:ab:d7:76:56:93:4f:93:e8:7b:dd:27:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=f8d8b5f79afa7c1880f3d3dc37823b98ea1ec6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:59:54:77:bb:dd:de:2b:52:41:69:eb:1a:
                    e6:c4:39:b3:d5:a7:d6:a1:87:56:9f:c4:2c:05:47:
                    8a:56:f5:5a:26:03:00:ac:cf:86:42:ca:fb:e1:81:
                    50:a2:f6:99:5d:c3:1c:40:ec:88:de:4e:7d:b2:7b:
                    14:9e:f1:7b:f9:04:e2:96:93:8e:e8:81:1d:0d:a0:
                    bc:bd:8e:3a:d4:aa:61:a1:71:93:6b:e3:a0:f7:f7:
                    46:dc:40:94:e1:2d:77:8d:85:36:3d:f6:4d:89:34:
                    fb:ad:34:55:b3:43:4a:05:c9:42:d6:f6:47:5c:bd:
                    ad:db:2a:67:ab:dc:7a:4b:e7:13:04:ff:7e:db:ac:
                    f8:c4:99:41:83:a7:55:a6:a6:84:28:d1:dc:0c:46:
                    4f:35:b2:16:64:a8:27:f0:a3:97:db:d4:be:19:3d:
                    68:fa:54:eb:28:6c:4b:7d:8a:66:23:17:40:63:95:
                    d6:79:44:c3:71:ae:46:e0:b7:4b:06:4b:7e:25:8d:
                    6b:6a:d7:c4:84:67:ca:b3:ed:35:30:06:5d:95:fd:
                    7e:c7:25:f0:0e:6d:a5:98:27:bc:23:83:b4:4e:1e:
                    5c:f8:c8:84:36:fa:94:17:a0:f5:7c:84:4e:5a:13:
                    79:4c:e0:a7:eb:9c:aa:77:a8:cc:be:8b:5d:5d:dd:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:B5:F7:9A:FA:7C:18:80:F3:D3:DC:37:82:3B:98:EA:1E:C6:FA
            X509v3 Authority Key Identifier:
                keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:35:a5:94:f7:68:bb:14:5c:96:15:14:d4:03:cb:9d:80:8b:
         12:b0:6b:47:f5:69:75:07:ba:84:6c:f5:ba:18:ab:6f:e1:13:
         00:43:81:2d:1b:ed:1b:68:cd:d9:34:6a:e3:a7:30:23:42:c6:
         ee:3d:05:ff:2a:24:86:d3:66:33:33:e1:6f:7c:4a:a7:4f:29:
         e7:3b:e6:21:cf:bd:c7:5d:ee:de:c9:a9:15:3a:db:de:89:e9:
         f5:e9:f2:3e:6f:c5:64:74:20:d9:e7:0a:2b:4f:87:b7:88:59:
         8d:46:05:a4:48:ed:91:97:bf:5f:3a:69:25:9a:b2:c9:d3:4b:
         11:1b:72:61:09:41:fb:a7:66:c3:77:03:5e:bb:b7:98:86:56:
         d4:b1:34:4f:93:0d:83:ed:6c:05:0d:9b:85:6c:26:16:1a:23:
         62:dd:6a:5e:6d:ee:79:d5:84:36:d6:1d:83:6d:f0:b0:8f:55:
         5a:d4:29:1c:3a:25:36:2d:d6:3e:7b:fb:e8:3f:94:28:ae:81:
         93:8d:e7:62:f8:62:d5:ea:66:e6:ed:7c:32:74:9a:83:a5:6a:
         63:59:91:e6:0f:7c:a8:42:63:00:ae:89:55:98:59:93:d5:ef:
         dd:c1:8f:00:d5:83:b0:1c:ad:f2:81:8c:65:d8:64:e2:9c:50:
         db:d5:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----