Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File:                     OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier:          83UlZpwnVPdtQ2sN6i9FPLdD86rzVcuyzihBTz4a2Wo=
Subject key identifier:   1C:A9:C7:9A:B2:C6:9C:14:CB:D5:B8:23:91:12:09:92:79:59:90:E8
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer:       /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial:       01962E98ACFDA3E8D33F73E691050BD7FF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number:          14B3
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: Qe9dw7i9uJWSWQkjPjurmS/8W7JTpC3wB0oaGWt4qRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:fd:a3:e8:d3:3f:73:e6:91:05:0b:d7:ff:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=1ca9c79ab2c69c14cbd5b82391120992795990e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:a0:27:ee:94:4b:55:4c:cf:f9:70:18:33:
                    0c:1c:13:7f:80:9b:9a:78:e7:10:b8:34:1d:f4:de:
                    c4:6e:5c:da:3d:42:29:77:e8:7c:7b:40:f4:b4:e0:
                    ff:c8:b2:86:f4:1b:6a:c5:65:c0:6c:b6:a2:f3:ff:
                    20:7d:4b:72:8e:62:a5:19:a8:3c:be:03:6d:41:a3:
                    c2:f6:42:90:f3:68:e6:34:ed:f5:31:d4:eb:bc:7c:
                    32:99:e1:3c:bb:6c:8a:31:b1:a3:b3:c9:bc:a3:b2:
                    8c:4c:1c:48:ae:99:d7:80:5d:52:19:a1:60:e2:ea:
                    b7:6e:9f:4a:08:84:a0:31:b6:af:19:41:25:c4:ff:
                    30:cc:d9:e1:ad:9e:11:0b:09:da:2f:bf:07:c2:de:
                    d6:26:12:56:cb:16:d7:70:f2:77:5d:b7:e8:9b:92:
                    ef:16:b2:ad:d0:b2:3c:52:c6:93:e6:a0:73:81:74:
                    ff:a3:6b:42:6c:df:79:cc:b9:26:fe:16:0c:02:1f:
                    76:0b:5e:55:78:0a:66:4d:ea:23:ba:e5:40:23:9e:
                    55:d3:a9:68:1e:10:7a:91:6c:b8:0c:f9:c2:bf:b4:
                    38:d7:db:53:2c:24:6d:a2:b6:6c:ff:28:3f:39:7c:
                    94:1d:9e:a6:b4:e9:c9:1a:64:a6:2c:7d:5e:ef:25:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:C7:9A:B2:C6:9C:14:CB:D5:B8:23:91:12:09:92:79:59:90:E8
            X509v3 Authority Key Identifier:
                keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:06:9e:47:a9:72:26:88:7a:43:9f:1d:fb:d0:b7:b4:8a:9e:
         ad:95:74:a4:c8:13:4a:9b:56:f3:9f:51:94:ca:42:e5:56:39:
         ae:7f:76:de:52:d2:c6:b1:df:ae:bf:58:e4:1c:2e:ff:5d:05:
         1b:df:be:8c:80:aa:80:9c:e9:66:b1:65:35:11:e3:7e:b1:14:
         45:61:ed:83:1f:02:21:3e:ba:df:27:1d:df:5d:5f:d4:b1:d4:
         b6:41:1c:6e:ff:c0:de:84:03:3f:1a:e8:55:99:b6:d0:86:4a:
         6f:2c:4b:92:c0:c4:df:e7:b8:33:fa:df:68:8c:00:20:d8:22:
         24:5f:24:54:f5:66:eb:e8:07:24:c8:51:60:79:7e:12:c9:e3:
         35:80:f8:4b:e8:1a:ce:cc:64:1d:47:4a:4c:f2:1c:d6:9f:fd:
         b1:6a:df:65:1b:6d:02:4a:86:ae:41:78:ae:9f:6b:28:d9:e7:
         a1:76:40:4a:56:50:4f:fc:0f:30:80:91:85:2d:f1:9c:d4:e0:
         fd:e6:eb:35:31:f7:b9:41:c6:57:04:8c:3e:26:11:9c:10:5b:
         08:2b:82:8b:59:ca:75:77:0b:1e:0a:a6:d3:78:eb:8b:e0:64:
         28:c6:c5:12:30:11:13:50:a3:59:39:2c:ec:dd:c6:3c:fa:b7:
         d2:49:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----