Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File:                     o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier:          ZBR+Q/PkxGfFUBmyS69K2tMkpzLs/Etus9QeyUah3a4=
Subject key identifier:   5C:07:B4:AC:A1:FF:BD:C1:FA:04:03:F8:BB:4E:ED:D3:E8:73:38:67
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer:       /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial:       01962F74E69F25CADC5E60BD8E0611B13022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: tzdcCknBohKUdyqoNgm2O9of6e8+xojIbR3LvCJyAKE=)
                          2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e6:9f:25:ca:dc:5e:60:bd:8e:06:11:b1:30:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=5c07b4aca1ffbdc1fa0403f8bb4eedd3e8733867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:a9:09:50:8f:a5:e0:a7:15:aa:ef:93:b5:
                    0f:aa:74:ae:37:63:0a:e9:6a:79:cd:8d:13:6a:06:
                    0e:97:57:d0:97:de:16:89:08:ee:44:f3:da:3b:96:
                    a1:8d:08:f2:ca:c6:5d:fa:44:e1:a2:e1:0c:3e:b5:
                    71:8d:10:e4:07:43:7f:4e:ce:dc:80:e6:b9:fc:34:
                    4e:c3:0c:af:8d:29:42:21:6e:57:32:bd:94:01:d2:
                    45:85:7b:c9:94:e7:29:57:ce:2d:45:a9:c2:ce:3f:
                    35:c7:cc:14:81:db:ef:5a:87:74:94:37:87:13:27:
                    d3:03:be:d6:51:9c:c9:b0:dc:97:57:94:4b:66:96:
                    d1:80:f2:59:8c:92:51:bb:e9:1d:8d:e4:0d:81:b7:
                    ae:d6:a2:cc:8a:69:dd:f8:c1:9c:3e:60:4d:f7:b8:
                    21:7b:72:d2:00:c0:08:a1:21:83:68:40:60:5b:6b:
                    e8:e5:8e:1d:c0:33:86:32:67:ce:0d:d2:02:b9:09:
                    a6:63:90:b7:65:5e:05:62:48:0f:cc:97:1f:89:91:
                    35:17:76:d9:50:cc:46:52:fc:a3:9f:31:55:2f:13:
                    42:69:94:6f:49:e0:6e:bd:f9:66:39:95:47:df:73:
                    5b:59:3e:aa:7d:2e:d3:8f:c3:2d:c3:93:0e:ea:ee:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:B4:AC:A1:FF:BD:C1:FA:04:03:F8:BB:4E:ED:D3:E8:73:38:67
            X509v3 Authority Key Identifier:
                keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:ae:0f:33:66:fc:e0:6c:c4:50:b5:91:31:0d:e1:2f:87:
         6c:ba:39:89:ee:03:56:a4:7d:bf:a7:d0:f9:45:cf:a5:c9:bb:
         1d:f1:ca:f7:79:50:ec:a2:0d:ba:92:14:8f:05:4c:a7:61:70:
         40:5e:9e:5b:3c:62:e3:44:f5:19:3b:38:55:0c:b7:dd:ec:cf:
         2d:5b:19:b6:44:4e:66:7f:c7:aa:31:70:d1:50:90:18:71:1e:
         61:28:67:ab:54:79:15:aa:27:c3:92:be:91:43:1f:f3:40:ac:
         a7:06:f8:d0:35:b8:d9:dd:2c:1e:4a:40:20:ba:d8:28:b2:f3:
         f0:3f:a3:ad:44:7f:78:a0:dd:45:1b:60:6f:85:8e:a7:fa:ed:
         27:80:73:e9:d6:0b:f1:b1:d5:ec:9e:fa:8a:cb:dc:cb:ac:0c:
         4d:4e:f2:e1:dd:7f:35:8d:cf:9d:03:85:50:68:a3:d6:af:d4:
         27:a0:b2:a5:20:5d:84:6b:af:76:0b:a8:04:9e:93:4d:2a:e1:
         b3:15:be:c4:55:30:88:b8:d9:29:50:0e:e3:fe:26:04:29:7d:
         ea:c9:11:4a:ea:64:86:54:d0:9f:e1:29:d0:7f:d0:10:96:b7:
         16:d6:dd:54:5c:14:68:7a:c8:bc:a3:5b:ab:01:bd:7b:e0:f7:
         88:43:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----