Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File:                     oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier:          LOutzCqhvfDqG19my8pku6m71adSvscaI2FHPLcbLQs=
Subject key identifier:   38:57:C2:BC:21:1D:16:13:9B:F3:56:1E:D0:74:D7:30:CC:34:CB:51
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer:       /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial:       01962F06BCE66AF65DC5CE60C50083F6C781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number:          0C71
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
                          2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: aWYisbhtm8ir6sGEunGVCa/5KVanY4vztiTJDJJHHrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:e6:6a:f6:5d:c5:ce:60:c5:00:83:f6:c7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=3857c2bc211d16139bf3561ed074d730cc34cb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:e0:0e:e5:16:25:b3:23:a1:6b:4c:4b:06:
                    ee:ab:9a:43:02:3c:ec:18:f0:9f:ae:a9:86:1a:7b:
                    04:2d:14:cc:0d:47:74:df:14:34:b4:51:74:03:57:
                    bb:25:84:1f:13:31:fe:7f:6d:29:40:dc:c7:ad:87:
                    d5:9b:d1:a9:97:54:a2:2a:68:7c:c0:9b:57:86:d7:
                    3e:c4:33:ce:81:24:0b:4b:71:ff:0b:f8:4a:fa:a5:
                    fd:43:17:d8:88:5f:6e:cf:16:48:22:50:d9:70:50:
                    ef:1d:a5:df:98:53:6b:bf:3a:0a:88:7c:57:8a:43:
                    2c:6d:79:02:f5:08:ca:0f:5b:db:1f:1a:03:17:01:
                    1c:43:32:e7:f3:3b:34:b0:27:55:62:c7:b3:cf:d5:
                    41:37:7e:8c:7f:09:19:87:e9:4e:af:d7:86:83:a7:
                    70:41:15:70:f6:a6:37:61:c9:29:df:e1:6e:f7:01:
                    a5:f1:4f:ec:ff:1a:cc:2b:d5:f9:2c:89:16:f4:36:
                    32:46:f0:fa:64:2f:75:43:2c:5f:47:62:60:2f:95:
                    d8:ef:bd:cd:6a:32:52:93:fc:d5:70:75:7e:18:f4:
                    50:cb:2f:ac:95:0f:f6:b3:a3:31:08:5c:94:e6:47:
                    b4:2f:ee:7b:c2:33:95:a6:f9:0a:4a:95:87:63:7b:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:C2:BC:21:1D:16:13:9B:F3:56:1E:D0:74:D7:30:CC:34:CB:51
            X509v3 Authority Key Identifier:
                keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:cd:e9:0e:91:25:36:0c:33:c2:f6:14:5a:d5:a2:a3:d1:
         ec:38:0c:f9:7d:6d:4a:b5:fa:fb:db:e6:92:d9:5e:0e:5e:8d:
         df:f3:8d:ba:89:40:a6:f7:d0:d9:0f:d5:29:22:d6:57:87:db:
         16:be:59:ea:81:cb:3e:af:19:bc:95:0d:2f:d5:e5:af:f5:48:
         c5:91:0e:6a:5c:67:3d:4e:53:17:a6:89:1b:66:9f:5a:7b:c8:
         14:ab:1a:b2:72:89:e6:f6:2b:50:3b:8e:a3:dc:7f:9a:e4:b7:
         a2:b0:8c:f2:0a:41:e3:65:58:14:eb:b7:8a:15:c8:d3:58:74:
         60:8c:23:a3:36:01:a7:94:4a:63:77:45:5f:b5:7f:be:d4:d1:
         5d:94:28:db:13:dc:77:8f:af:4c:5b:73:59:ae:e5:4d:5e:2f:
         a2:80:0f:cb:85:a6:c8:1c:89:f7:63:f3:40:32:63:87:88:7a:
         28:d4:b4:61:1f:bd:95:27:fb:68:43:d6:f5:83:0a:cf:db:0d:
         e6:2a:b9:28:95:9e:49:04:4d:93:df:fd:81:1b:20:7f:69:7d:
         62:c2:a3:1e:33:70:c4:f6:71:93:08:98:ad:72:5d:b4:6c:0a:
         e1:8a:85:4e:48:06:f2:28:55:26:6e:18:0d:8e:fc:0a:71:b7:
         44:4a:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----