Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File:                     ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier:          3eaEEQOdsjY8piNeahg3akNqfTdErQbknlXpceV/PIg=
Subject key identifier:   C0:B2:66:B8:18:20:39:3C:64:82:85:9A:EB:7B:C7:C0:64:C2:5F:E4
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer:       /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial:       01962F74248ED3B8EAC9A3DAB35042F3FB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
                          2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
                          3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: pkRs2vxpkfizaQoCanDzlHlbGorF5iTmOp6sO9vs2/8=)
                          4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:24:8e:d3:b8:ea:c9:a3:da:b3:50:42:f3:fb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=c0b266b81820393c6482859aeb7bc7c064c25fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:51:91:8d:c3:e5:d3:80:77:d4:47:b2:8d:
                    49:0f:50:df:47:af:7e:c0:d7:eb:b1:df:3c:7a:e0:
                    48:8a:bd:6b:f4:cf:10:de:bb:6a:33:7b:36:76:04:
                    45:8d:c2:4f:db:eb:90:68:8a:ff:98:fd:d4:ed:61:
                    15:81:21:e0:70:85:76:2f:6b:8f:54:d3:1e:3b:a2:
                    af:d7:a6:c0:24:20:b3:37:87:11:3c:49:76:f7:b1:
                    b8:46:7d:45:a8:ed:17:30:14:73:9f:69:e5:db:b7:
                    cc:66:0b:d9:51:02:e7:4d:ff:5d:cd:54:62:79:a2:
                    a3:b9:e6:3b:b3:d9:89:9d:06:5e:1f:58:91:73:87:
                    77:10:94:7d:9f:7a:ed:d5:a9:82:13:91:af:b5:1e:
                    dc:87:30:76:40:31:b1:4f:24:4c:fa:37:1a:8c:89:
                    95:8c:7c:43:3d:84:7f:1e:5d:0c:d7:a7:8c:bc:c8:
                    d2:58:83:4f:c0:5d:8b:4c:cc:3b:49:e0:cd:11:57:
                    26:f0:1d:33:3d:23:f3:92:0b:91:23:cc:d6:92:3a:
                    c0:23:2d:42:1e:aa:92:d7:52:82:eb:ca:6a:91:b7:
                    c8:3f:16:5d:da:bd:6c:f5:17:e0:3a:b8:59:91:3c:
                    12:bc:99:d2:0c:19:6e:9c:4b:25:b2:47:72:3c:01:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B2:66:B8:18:20:39:3C:64:82:85:9A:EB:7B:C7:C0:64:C2:5F:E4
            X509v3 Authority Key Identifier:
                keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:05:1e:d7:7e:5c:ea:e4:86:eb:6a:e0:f8:88:a0:f2:4e:
         7a:2c:85:43:0c:ca:ba:2a:81:8d:a3:10:1c:9a:c5:b1:55:68:
         f1:95:b5:ca:b6:f7:a0:ba:6f:73:cb:83:10:8f:3d:5f:8c:d9:
         a3:11:3a:6e:8b:48:36:79:6b:23:b9:76:0b:31:d2:38:4f:12:
         d7:25:7f:c5:f0:07:70:bc:b3:4b:97:29:ef:64:9a:75:34:be:
         0b:79:f3:6f:82:b5:b3:45:9e:97:13:54:dc:91:f4:2a:c1:9b:
         8d:b2:35:e1:93:fe:75:1f:1f:a0:5f:51:97:b9:01:d8:09:fd:
         ed:4f:b1:85:a4:91:86:f2:9a:5e:96:c6:2b:eb:8a:70:f6:6b:
         1a:0b:3d:81:1c:cc:0a:3f:91:80:eb:c5:fa:27:bf:c8:ae:0a:
         98:5f:80:ad:93:a3:06:5a:9d:cd:f2:06:a3:6c:df:e5:26:f3:
         4a:5c:6d:74:b7:ce:8d:34:28:dd:c4:da:c6:b2:dc:62:f2:e2:
         2b:32:2a:58:f4:e5:bc:67:71:84:e6:c4:a0:97:ac:a6:10:91:
         b5:fe:41:f2:39:bd:35:7c:0c:b0:5c:f6:32:d0:c9:a3:1c:eb:
         27:63:b5:54:53:7c:c6:6b:39:01:40:67:03:51:fd:83:83:b8:
         32:62:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----