Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File:                     o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier:          qsdSBPodgNU4fmNuJJEOM9VNyLzh0PFngPrWNH/Fj9I=
Subject key identifier:   9D:3A:6F:84:01:E3:47:22:D9:9F:C4:9F:6F:2C:68:55:9E:8B:AF:14
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer:       /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial:       01962DF3AEA4F8DEB39B270C437276C14646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number:          0C79
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
                          2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: qLRDvs4/SEkO85lZTdHaVf2MK45xU6hyF/lXAmKykIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ae:a4:f8:de:b3:9b:27:0c:43:72:76:c1:46:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=9d3a6f8401e34722d99fc49f6f2c68559e8baf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:50:c4:6b:ff:9a:bd:4e:18:8b:97:3d:96:
                    6a:53:50:8c:94:0e:3b:35:cc:22:00:e2:2c:c9:35:
                    ae:8a:17:39:91:df:ed:c4:bf:48:7d:2e:0e:a3:58:
                    e9:18:e1:15:f2:bd:7c:a1:c9:f0:30:d2:b4:87:0c:
                    5e:5c:46:3a:97:d0:7c:e4:91:0f:cd:56:bc:33:f1:
                    ff:1d:2e:d3:8e:84:1d:6b:6a:67:6c:6f:2e:22:92:
                    a6:9f:b5:6b:aa:ee:d9:fc:42:72:76:55:ff:41:bc:
                    ee:ce:a4:ee:d4:e0:55:62:c9:42:85:e0:18:4a:fe:
                    6f:4e:f8:7c:29:ed:e5:6c:87:b6:d0:07:fc:b4:36:
                    eb:c0:73:05:9f:ca:1a:23:65:6c:51:78:74:1a:90:
                    cb:5e:7c:d1:55:ff:bb:46:a7:ce:c3:a0:c0:db:1f:
                    66:78:b6:3c:b8:d1:6c:97:3f:3c:82:53:4f:ec:b8:
                    20:ed:7a:5b:c6:8f:68:2e:82:2f:ef:97:95:05:8f:
                    89:24:d9:52:d5:37:cb:cc:54:64:02:5a:9a:32:ee:
                    e2:68:b0:ee:3d:92:5c:5e:ac:5e:a8:7c:94:8d:b5:
                    ed:db:79:54:55:fd:5b:1a:20:81:56:25:0e:1f:0c:
                    a7:32:57:3d:99:f0:43:69:cf:61:84:6e:f1:45:e4:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:6F:84:01:E3:47:22:D9:9F:C4:9F:6F:2C:68:55:9E:8B:AF:14
            X509v3 Authority Key Identifier:
                keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:8b:b1:df:51:8e:01:25:de:bf:dc:eb:a7:e3:82:58:30:
         0c:d2:9b:8b:7f:e1:1f:1b:5c:23:cb:d9:de:c0:df:d6:f2:f4:
         a3:6f:da:37:e4:9f:c4:09:5f:dd:e0:1a:73:2c:0d:6f:68:12:
         ef:ea:32:8a:c5:4a:b7:f9:de:c0:4c:ab:11:a3:e2:2e:7f:e4:
         7c:6d:e9:39:cf:e1:24:5b:32:9d:5f:89:52:01:4a:f6:5e:4b:
         ab:3e:52:50:df:69:1b:09:b8:09:53:60:60:17:09:85:1a:5c:
         48:7c:e8:46:3c:aa:67:87:66:99:68:e9:8c:dd:a6:01:70:be:
         6c:8d:46:c1:8e:6b:63:ed:49:04:ce:d6:81:33:36:49:95:ed:
         eb:ec:af:61:08:39:8d:66:61:ac:3c:2f:23:ff:52:30:42:0d:
         2d:7d:52:d4:42:2a:a8:84:1d:d7:9c:fa:ae:b4:b5:8b:b9:10:
         b8:44:6a:4a:39:1e:d0:cf:6c:c5:06:02:54:0e:ea:77:91:67:
         a7:0f:01:40:cf:8b:bc:d6:01:c9:2e:60:8c:2b:99:60:ab:a4:
         10:0b:1c:2b:f8:3c:4a:2b:ab:79:39:cb:8a:97:55:ea:e9:5c:
         1a:84:fa:4f:cf:c4:92:30:7b:3f:80:d5:ca:ca:79:32:50:ad:
         ac:e2:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----