Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File:                     o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier:          DVGIfR8K/rSnEgpTheVf7d3TB6tltPQ6hMhGZjZAg6g=
Subject key identifier:   81:35:60:69:CE:C3:C5:C2:26:DF:95:71:99:AE:32:83:E0:92:56:D6
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer:       /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial:       01962ECF7DD8A919BED28C28DE0CC67C3961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number:          0648
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: borZkxzd7Q70fU1OWvln2Q1-HRc.roa (hash: WT5cBwBGRYqcO3GRfgSJfVkJ2Niz57/GzD/KCZQzgos=)
                          2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: jW6Ca7ixsMotjjVt6eWXt/77wOJ/jiMKvs2UMrsOmN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7d:d8:a9:19:be:d2:8c:28:de:0c:c6:7c:39:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=81356069cec3c5c226df957199ae3283e09256d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:5c:6a:f5:47:1d:f9:3e:6f:d2:5d:ab:87:
                    31:7e:69:c4:58:3d:d0:01:ee:82:8f:8a:a9:74:87:
                    7b:e9:c1:e8:1d:1e:dd:a5:c8:00:fd:c7:96:3d:fe:
                    a8:57:6c:1e:a5:cf:51:60:4a:80:0c:e5:81:ec:c2:
                    77:4a:da:07:93:52:c0:b7:ed:82:54:37:65:36:7f:
                    d0:09:7f:88:a6:1c:d3:a8:97:a6:c8:16:50:c7:03:
                    a3:5b:d2:76:24:02:81:c8:67:9f:06:85:ea:e2:6b:
                    c7:42:fe:78:cb:09:57:77:40:3d:3a:b2:7c:a6:6e:
                    ff:99:d8:a3:55:63:4a:11:28:f5:f5:c7:54:29:d8:
                    10:ea:4a:3d:b1:1b:ad:60:58:9f:04:76:aa:48:cc:
                    bc:bb:cc:71:21:e6:1c:2b:9c:a5:6f:4c:77:08:9a:
                    c7:a5:a7:20:b8:52:e4:bf:07:52:20:12:1b:bc:ab:
                    11:b8:71:69:80:1f:65:87:6e:ad:8f:ba:fc:c3:41:
                    0a:c0:7b:87:79:9c:03:2f:f6:08:01:46:a6:c7:5f:
                    6b:ea:b3:11:68:9f:ce:23:97:dc:e3:30:96:8d:33:
                    7e:a7:04:f6:07:93:43:6a:e1:40:de:20:a4:a8:0f:
                    7f:56:b7:57:15:04:da:fa:e2:39:8b:11:fe:3e:69:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:35:60:69:CE:C3:C5:C2:26:DF:95:71:99:AE:32:83:E0:92:56:D6
            X509v3 Authority Key Identifier:
                keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:22:a4:d3:a3:9f:94:20:43:71:69:8d:37:db:94:de:70:be:
         aa:42:b1:d2:a2:6e:35:18:17:1c:73:75:0f:aa:de:0c:07:ac:
         cf:5f:c0:9c:9a:ed:8e:04:db:72:04:2c:8a:06:c1:56:78:a5:
         e6:f2:32:69:01:04:09:c2:f6:26:03:c0:82:b1:bf:81:77:2c:
         26:d1:d3:2d:eb:79:f4:0e:08:41:32:d2:0d:e5:65:43:c7:d9:
         a2:78:1d:17:2a:74:1b:fd:df:71:6c:55:53:30:a9:09:bf:1d:
         96:97:c5:c2:ca:b6:71:00:d9:09:62:ac:47:08:9c:89:f5:13:
         87:c8:e2:02:81:a8:ee:60:5e:5c:41:fb:c6:6e:a1:6d:39:fe:
         fd:e8:a9:2c:50:7a:06:cb:80:e9:ae:b6:88:1e:5f:7e:6d:4b:
         5f:12:66:60:de:e6:f4:c8:33:70:10:11:71:b8:d1:31:11:89:
         98:5e:ba:23:a6:72:08:da:34:5f:c2:71:60:6a:dd:bf:d5:e6:
         be:f4:01:5f:b6:34:50:c4:f4:7a:be:4d:7c:a2:44:98:50:30:
         70:0b:a0:f1:08:8d:5c:bc:9d:74:45:46:55:99:dc:39:2e:bf:
         ad:cc:6c:56:60:27:f4:a4:ed:14:db:da:7b:c2:bc:ea:9d:28:
         b6:51:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----