Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File:                     OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier:          UhDXqOLFeNt02FZfcW0iwWZQQgFo1HHu9Yk7e5XHdmY=
Subject key identifier:   B3:63:4B:8C:81:1C:03:7B:80:96:B6:78:A7:55:61:03:2A:44:F3:7A
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer:       /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial:       01962DF44E64783E2117EF4441B4FBCC8BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number:          02AD
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
                          2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: qJg1layHTUVOdOyzG+gHYwce+1meWclFJomXJ3KS+Q8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4e:64:78:3e:21:17:ef:44:41:b4:fb:cc:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=b3634b8c811c037b8096b678a75561032a44f37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:9a:e4:35:ba:d3:9b:7f:3e:d5:10:1b:7a:
                    9a:77:b9:9a:66:cd:d5:0c:df:53:1c:25:c4:75:89:
                    a5:08:0b:7c:34:84:65:6c:92:a0:00:14:fd:a4:6d:
                    40:f8:72:4c:80:87:6b:bb:48:6f:84:10:f0:12:aa:
                    e4:ef:db:55:94:5d:ed:c8:c8:dd:cb:a7:a9:52:01:
                    90:61:ae:21:e7:dd:81:ea:3a:04:b3:c5:52:86:9b:
                    45:f9:2d:c5:95:5c:2b:fd:8b:d2:7a:ac:ba:7e:48:
                    bf:70:7c:6d:79:90:b3:a3:79:f1:ce:03:c0:16:68:
                    e0:86:c8:36:92:b7:5c:ba:86:17:70:66:b1:d2:08:
                    23:b8:ea:ad:4e:d0:d9:5f:b0:c6:d1:7d:3e:f2:47:
                    1f:16:39:d4:ca:fe:46:46:95:c9:73:e1:43:8c:0b:
                    a8:93:4b:04:bc:de:7f:8d:f1:4b:9b:e4:b4:ce:88:
                    69:44:c7:0d:a3:b7:0e:47:0f:17:e8:3b:35:f6:b5:
                    a4:0c:89:0e:43:98:a9:27:88:f4:8b:40:0b:ee:b1:
                    6b:dd:70:84:f5:94:f9:be:c2:b3:72:a7:7a:d9:ed:
                    0e:8e:10:bc:3c:85:f9:54:64:b6:4f:2e:da:c9:e8:
                    12:1c:e4:75:95:d6:a1:29:1d:d6:95:89:69:b0:d0:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:4B:8C:81:1C:03:7B:80:96:B6:78:A7:55:61:03:2A:44:F3:7A
            X509v3 Authority Key Identifier:
                keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:45:a5:6f:67:de:29:dc:d5:84:61:32:b8:2f:87:c5:22:
         91:e1:e7:33:d3:f1:08:55:31:ab:e5:38:91:0c:ab:58:e3:6b:
         4f:74:74:52:e1:0d:d7:e3:02:7f:16:00:5d:0e:56:f3:0c:6b:
         d6:5b:ca:bb:e4:97:a3:c4:38:b0:ef:28:df:a4:53:b0:f9:94:
         d7:62:a0:23:ff:95:5d:7a:4e:f8:3d:5c:28:b7:73:3e:ce:b8:
         d7:9c:9d:2a:23:8a:a1:30:6d:65:0c:e1:26:44:05:8e:10:3a:
         75:6e:bd:63:78:ae:ac:6d:2a:fe:4f:a5:28:85:60:b6:ec:24:
         cb:54:46:d0:c1:1b:3c:01:a5:e9:f4:78:4a:58:28:4a:02:81:
         4d:40:75:82:28:0c:f7:ae:6c:ab:b0:e0:65:07:98:bf:cd:4d:
         ae:52:96:fd:b9:d9:ad:7f:0e:1e:88:15:f4:b2:6e:29:ec:2f:
         cc:f6:99:5c:48:f6:03:93:3e:85:a2:7b:c1:9f:2f:00:14:cf:
         3b:82:19:ed:d4:8a:49:87:a3:27:ac:3b:53:71:3d:91:0b:9f:
         aa:a7:e6:7d:9e:d1:d0:a1:c6:de:b7:b2:75:74:c4:8f:d0:2a:
         b6:47:c1:50:eb:c8:3e:cb:02:ae:4e:06:58:63:7b:c2:91:4a:
         9b:d9:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----