Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File:                     OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier:          eMSfFe7/eaU1gObwpF+B3KOYUw+XbqKKfH7ZA3iYszY=
Subject key identifier:   F6:6A:BB:5F:FB:46:28:F1:FD:F5:25:3E:38:B4:38:3B:01:E4:A6:04
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer:       /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial:       01962E9866B7FFE0363670FD0F277ED5EB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number:          03DC
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: 7uw+c/Gk2CZaHk77ZAULxQ800CTu4o0llGRsCfkWjBs=)
                          2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:66:b7:ff:e0:36:36:70:fd:0f:27:7e:d5:eb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=f66abb5ffb4628f1fdf5253e38b4383b01e4a604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:ef:8a:1b:c7:48:0e:7a:b9:45:53:ec:40:
                    59:a7:dd:64:67:fb:a1:33:fb:e0:61:3d:6d:9a:91:
                    0c:fd:7e:e2:84:bb:9b:4b:ee:e4:51:b2:b6:73:d5:
                    c8:b9:5c:08:3a:98:de:95:7c:63:80:01:7f:05:94:
                    bd:fd:bb:29:8e:dc:e8:19:ac:4f:88:5a:99:8b:d7:
                    08:40:4f:8e:b9:95:be:d6:e7:28:19:0b:31:f3:04:
                    97:fd:23:60:e1:d1:66:91:e5:39:db:3d:3a:a4:91:
                    89:93:3c:8d:b8:23:4e:89:ff:f1:b2:f0:93:cc:a9:
                    81:ad:09:50:88:b5:89:19:05:2d:5d:d5:1a:f9:66:
                    6a:1a:c4:56:ad:5f:f9:8a:a8:93:b1:7b:81:bc:37:
                    ee:af:27:d6:c7:4e:01:0c:16:a2:79:25:6f:c4:93:
                    56:5c:a4:0a:d3:54:f0:e7:a5:0b:0f:34:b5:a3:09:
                    8d:6d:99:b6:13:08:72:a7:12:17:9c:5f:4b:f1:a5:
                    18:e8:77:d8:9a:9d:49:a7:9e:4e:11:70:85:de:ae:
                    52:b3:f3:ea:9f:f2:b9:a3:47:51:85:cc:42:c4:de:
                    cf:38:27:6b:e8:e5:18:fb:f2:7e:bf:f7:ea:71:f8:
                    bd:32:9f:e5:20:bc:74:a7:1d:54:9f:91:1a:bc:ff:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6A:BB:5F:FB:46:28:F1:FD:F5:25:3E:38:B4:38:3B:01:E4:A6:04
            X509v3 Authority Key Identifier:
                keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:00:bc:82:a3:a4:df:be:3a:5f:a4:ba:9e:5b:52:6c:b3:
         76:08:8f:af:49:1e:f3:92:b2:2e:1d:cf:00:b6:2c:d9:62:e9:
         be:5f:da:5c:f4:17:93:2f:34:52:47:9d:ff:02:ee:7b:81:ec:
         7c:7e:66:6a:af:da:44:a5:3f:5b:0a:db:f9:db:00:0b:62:37:
         5f:7f:89:1f:0e:c0:ec:d8:ed:b0:19:58:0b:7a:43:96:44:b6:
         a2:a5:ec:79:68:96:2f:17:17:b1:c7:88:2f:6b:2f:97:9f:27:
         7f:b5:50:6d:ba:a3:79:63:fd:da:7f:8c:04:b1:d0:91:36:8a:
         a4:cf:ad:72:55:56:1f:16:86:92:00:07:29:1c:61:dd:f6:fc:
         25:d2:5f:b2:49:af:7a:57:20:8b:5d:99:9e:ef:84:f9:b9:f6:
         26:d6:88:3f:44:de:93:43:1d:51:c0:49:c6:e7:99:3a:b1:5e:
         2b:bb:0e:33:9d:dd:a2:5f:65:43:92:10:84:48:55:64:a0:b6:
         6a:db:11:1d:5d:56:2e:4e:74:69:21:e1:ec:b7:f5:a4:57:53:
         73:90:aa:9e:55:5b:03:d4:39:0a:06:7d:dc:ba:d4:90:11:44:
         e2:74:18:6c:de:c8:27:09:d2:1e:f6:4e:08:8d:ab:b3:c0:d2:
         38:ca:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----