Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File:                     ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier:          5Qq02q2TCSgVE0BgRBsV8FoEkxm09IAG00snBDFDWcM=
Subject key identifier:   4E:69:C6:DD:36:41:31:EC:ED:3F:2D:E6:87:2D:C6:26:47:F8:6B:E2
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer:       /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial:       01962E61EFA9E2A070982D57A0352A394E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number:          0F5C
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
                          2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
                          3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: WWaB+GugjSXt0E5TGyI4Gk/Sl407RMHjLrOfuhjbpZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ef:a9:e2:a0:70:98:2d:57:a0:35:2a:39:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20cc67154b403145d139469886127ab629eb928
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=4e69c6dd364131eced3f2de6872dc62647f86be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:55:dd:65:18:88:bd:af:a7:d1:60:b3:1a:
                    89:41:33:0f:67:f8:15:34:28:e7:2e:e6:51:44:a3:
                    4e:ea:41:f7:6d:62:16:e7:bd:48:fc:6a:38:76:0a:
                    37:7e:75:03:cd:a7:17:28:f7:8b:c1:a0:e5:7a:ad:
                    26:ec:9c:f4:6d:2c:5f:0b:f2:2c:0c:12:a6:b6:09:
                    cc:f2:17:97:6b:6a:b5:81:6d:5d:de:70:c7:94:f3:
                    f9:ab:38:9a:f9:c9:f1:6f:e6:cb:d1:51:65:29:7a:
                    5d:69:db:e6:08:6d:0b:bc:b2:ba:c9:3f:50:d3:97:
                    18:84:f8:29:ec:d5:9c:94:17:e7:35:1b:05:78:43:
                    5f:b8:1b:5f:4c:d9:92:25:a8:66:1a:6e:36:9b:0f:
                    8c:fd:b3:90:b1:70:a5:33:29:f9:f4:df:6c:c1:9b:
                    6c:ae:21:84:fe:fc:6d:f0:49:d3:56:d1:e5:5e:7f:
                    2f:d2:90:85:1a:29:d4:94:a4:70:45:c2:c4:69:ae:
                    9d:a1:36:56:4f:a4:1f:76:33:75:13:cf:ab:af:96:
                    15:47:f3:6e:70:65:f0:1b:0a:93:af:80:0f:99:4e:
                    94:31:77:b1:53:12:83:9d:3e:8d:7f:b2:04:0a:a6:
                    c8:08:f3:7e:0f:3d:f8:f7:c8:38:07:3f:5e:6e:df:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:C6:DD:36:41:31:EC:ED:3F:2D:E6:87:2D:C6:26:47:F8:6B:E2
            X509v3 Authority Key Identifier:
                keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:43:92:fa:5b:db:a8:bb:63:0d:9c:a1:04:f0:53:8b:60:
         d4:d0:95:d9:4f:91:35:18:91:c3:c2:b4:ac:7b:6d:9a:f9:2a:
         85:63:2c:4a:60:e8:28:53:0b:48:66:83:5f:8d:cb:a6:94:dc:
         a0:19:02:fd:a2:6a:45:06:7f:d7:cb:f3:3d:54:92:03:1f:f3:
         f9:dc:0b:75:fb:2a:96:8e:8a:27:bd:93:64:f7:bf:f8:9f:70:
         cd:48:17:85:dd:0b:d0:9e:4a:46:7c:74:75:4f:ab:ed:97:88:
         30:85:1f:31:b1:79:8f:ef:ae:14:5b:f2:ee:35:af:24:8c:0f:
         ac:0d:a5:df:63:51:2a:60:8f:69:3c:22:ca:c9:51:4b:17:34:
         56:d6:2e:52:1a:dc:75:fa:7b:c1:2b:57:ea:2f:61:e6:6a:d5:
         78:3a:e8:2f:72:2d:d5:3d:03:39:51:ad:ab:97:31:cf:99:90:
         70:6a:fc:0c:a5:86:e7:75:08:e7:ec:56:16:54:f2:69:05:19:
         dd:6a:38:88:38:d0:da:ea:3b:f9:a3:f1:7c:58:a9:0c:cc:c1:
         44:ed:2a:96:66:06:9e:22:6d:7b:54:8a:58:ba:7f:c8:6f:35:
         5c:82:59:ea:d9:34:64:5e:df:4e:5a:9e:07:ad:f2:12:07:b1:
         10:6e:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----