Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File:                     oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier:          Asv4gupZKLVYQmxPn4N4bic7Yf4rjwSmffQLMB3/ZeI=
Subject key identifier:   19:EE:D4:AD:2E:5D:D2:A9:DA:43:86:06:E4:92:FD:4D:44:2B:76:60
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       01962FAB7051CEFC71D88F6A98C8FFC1D67B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number:          06FD
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
                          2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
                          3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: s0AdRzi9XWxdH8QQL8JYPUScd7x5pHXCrAXvEJr5mxE=)
                          4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:51:ce:fc:71:d8:8f:6a:98:c8:ff:c1:d6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=19eed4ad2e5dd2a9da438606e492fd4d442b7660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:5a:8b:14:a8:5e:bc:98:a5:d0:17:c9:78:
                    cc:5e:ba:b4:74:06:c1:af:9c:44:5a:cf:10:0d:1b:
                    80:ff:1d:41:85:b2:ee:10:f4:9e:2e:a6:4f:39:d0:
                    0b:1b:a9:40:e8:86:5d:55:37:af:67:de:1b:45:81:
                    72:69:c8:9a:f2:e4:2f:2d:9d:9f:6f:4a:6d:9c:27:
                    73:31:06:a3:bd:23:82:82:38:49:63:4b:af:21:ac:
                    19:4e:02:b8:07:30:11:c9:74:cd:91:aa:7e:e9:43:
                    0f:29:89:2e:b3:8f:8f:4c:4a:b0:8c:15:ad:b2:62:
                    cd:cb:27:11:57:73:a3:88:76:35:bb:84:3b:35:cd:
                    68:86:d5:b6:9b:b9:2d:0e:cd:ab:69:ac:64:a8:e7:
                    19:07:30:5f:27:b7:b2:bf:a6:62:73:bb:8e:4d:59:
                    6b:d1:50:42:42:fe:76:02:f9:09:be:e8:55:d0:75:
                    e3:10:0a:5c:c8:e5:68:31:f2:8c:08:ba:6d:67:6a:
                    31:d3:81:fc:6e:8a:f8:9c:39:28:c9:82:72:ed:4e:
                    21:55:31:27:26:1d:ec:86:13:2b:30:a1:ac:0a:cd:
                    ac:63:a0:4c:f4:5a:44:91:be:c1:15:06:75:3f:85:
                    28:9a:ae:75:05:fc:4c:1c:dc:b1:dd:e0:2a:ba:21:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:D4:AD:2E:5D:D2:A9:DA:43:86:06:E4:92:FD:4D:44:2B:76:60
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c1:9a:63:bf:d6:7b:8c:a2:16:f9:e2:28:02:31:1e:c9:30:
         a9:43:e9:9c:35:ef:dc:7f:b8:65:22:14:6b:b7:bc:7d:3f:75:
         71:e3:ca:ac:b1:99:5f:6f:15:67:84:d8:43:dd:bf:1b:32:f5:
         7d:44:ce:c7:d6:60:46:35:22:1b:fd:02:68:05:63:bb:68:ad:
         95:d5:d5:b6:bd:22:bf:ff:20:33:25:9e:b5:dd:91:67:09:37:
         d7:f6:06:a1:81:d8:d6:66:0a:9b:78:3e:c0:f6:78:6e:1f:85:
         c4:36:6b:0e:45:c5:92:4c:f3:cf:c4:ed:59:55:3c:e1:4e:b0:
         2b:c9:f1:a9:78:11:8d:02:88:06:17:55:a4:b3:06:49:37:26:
         c5:2a:69:66:fa:a6:e3:8c:44:5c:20:3c:4d:18:78:6e:16:91:
         be:26:81:14:b2:5b:95:b1:66:d2:35:5b:a9:13:4b:6d:14:93:
         5a:8b:3c:34:d9:5d:1e:e4:b9:86:b5:60:9d:64:97:cb:3e:84:
         36:97:95:19:b1:c2:f7:a6:82:b0:91:72:f3:f5:28:e5:d3:6d:
         ee:d3:bb:9d:8d:b8:7e:ba:37:4f:e6:4b:17:4d:92:65:0d:2b:
         ad:d4:f5:9e:e8:ac:61:75:31:55:58:b2:d4:85:ec:10:f0:56:
         05:5e:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----