Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          cEILuWflhzWdXJJ0jK85LTU5GoQNsy0s1s8X+rbvfv4=
Subject key identifier:   15:EF:2A:33:F4:7D:6F:32:69:26:CD:66:D9:65:77:DB:EC:95:3D:DC
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       01962ECF8BC1C7B99988461A983572B4B9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          0560
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa (hash: Q3eJR3BSlZ4JFHQreAzZwVy1P41pR11wDqAIlfL2GPo=)
                          2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: H9G0Z0yV7ZK+3yUfiyRxkR/L5MFkg+BG08/ZbF9NpcQ=)
                          3: jrvfRpZvRBtk_Yg60PvxHmKAprU.roa (hash: Hyd8SOBLyLw3LBdkd19m4cdLrzfDjpQ+9epp8rr0M9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:c1:c7:b9:99:88:46:1a:98:35:72:b4:b9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=15ef2a33f47d6f326926cd66d96577dbec953ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:a7:7b:b0:59:4a:0e:39:84:d7:85:aa:75:
                    5a:5b:0d:b6:7a:ad:59:ef:be:8c:6c:94:61:8c:e4:
                    34:6c:13:30:53:0a:3a:ce:20:73:89:f4:0f:a0:b7:
                    ec:35:06:64:06:32:f0:25:ea:3b:a6:0b:b0:0a:69:
                    e1:9d:dd:ee:b3:8c:92:6d:a5:da:ec:0b:34:93:58:
                    a9:4c:7d:3c:0f:9f:af:27:25:13:4e:ec:a9:c9:e5:
                    6f:65:0c:b5:7f:c9:36:6a:77:53:91:28:3b:03:9f:
                    af:3d:e9:1f:d1:d8:59:8c:d5:93:b9:f2:e0:28:9b:
                    6e:0b:04:47:2e:3a:31:7e:77:53:40:1b:7e:47:cc:
                    4e:51:65:38:72:cb:24:55:d8:03:cb:bd:59:1a:a5:
                    f1:a7:1f:2e:1c:6f:0a:82:0c:10:b3:3b:ac:9f:08:
                    6d:0f:91:bb:75:c1:63:2d:88:9c:c9:91:80:cb:5d:
                    97:4d:48:ce:bf:5e:85:41:59:23:79:f8:39:13:e3:
                    7b:39:e2:88:a3:61:73:75:d6:1a:fe:49:d4:12:f0:
                    e0:49:ec:40:31:e2:0d:43:bb:81:a4:95:1d:a4:72:
                    9c:9f:c2:c8:5a:17:b5:75:8d:5f:89:c4:df:0b:00:
                    12:4f:8b:5c:ae:7a:46:e7:c3:08:8d:b4:b8:41:8a:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:2A:33:F4:7D:6F:32:69:26:CD:66:D9:65:77:DB:EC:95:3D:DC
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:6f:aa:9d:43:47:06:f0:0b:47:db:61:85:18:b9:fe:9c:
         66:f1:f9:1b:6d:b9:97:30:ff:0f:e8:fd:19:84:7c:4e:ec:65:
         ee:a3:94:b6:37:03:ed:6c:31:f7:fc:7c:2f:a1:14:65:77:68:
         60:9e:35:3f:02:ce:e5:37:49:6e:29:16:6e:e0:74:c8:08:df:
         e2:15:f7:3e:89:82:3c:40:06:52:db:40:a8:6b:bd:a9:36:aa:
         fc:75:18:da:40:01:64:34:48:5e:91:aa:74:e5:d5:0b:5b:3f:
         95:69:3b:10:92:9b:d9:be:1f:f8:5f:fc:26:23:60:eb:7e:13:
         cf:98:e1:38:a1:1e:51:9d:a6:6a:04:da:2c:5b:6d:d3:d4:ae:
         7a:e0:af:76:a7:7e:ee:fd:4f:1a:1c:65:d4:98:94:f5:21:81:
         9b:b3:b9:1b:d1:70:61:78:c2:7b:82:31:ea:f7:a9:55:ea:b6:
         62:52:f8:20:ef:4a:06:20:1b:c2:87:cb:ca:56:ac:2f:88:35:
         82:48:31:9b:c3:b2:b8:82:09:36:9a:ea:bb:c4:a6:0d:6d:1b:
         4e:84:92:55:97:92:43:e8:b2:14:ce:2c:a1:f4:05:27:5c:dc:
         c1:85:52:7e:d0:8a:7a:63:3d:d9:70:bd:37:2e:22:e4:a5:fd:
         e6:5a:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----