Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          k8BHJSkiuWWg3L/arDpVh6z/eXcII+/30LLzBHLfgEE=
Subject key identifier:   70:55:F4:A3:F4:DF:C7:12:27:B8:58:49:E3:01:6D:BC:34:AE:85:B3
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       01962F749F9BBD348DB4FDF5B1EEC6632756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          12F0
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
                          2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
                          3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
                          4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: WqEa2ndo9WyHVq/LITdGODtFnlHJuKcNQ6QwNLxGJ+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9f:9b:bd:34:8d:b4:fd:f5:b1:ee:c6:63:27:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=7055f4a3f4dfc71227b85849e3016dbc34ae85b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:99:ee:70:0f:53:70:6c:b0:ac:40:a1:4d:
                    93:78:ac:fe:33:e6:cc:6a:96:2d:76:03:03:b8:a6:
                    f0:37:4d:e5:08:52:53:dc:46:a6:85:1a:69:4d:c2:
                    a5:74:5b:a7:71:f5:1a:fd:7c:dd:cd:5f:99:04:33:
                    6a:47:42:06:b6:4c:6e:13:e2:78:4e:cd:b6:9b:e3:
                    4c:6a:a1:b1:81:02:83:0b:a1:de:b9:89:96:78:c3:
                    59:b5:fd:e8:c6:c0:7b:1c:8c:f3:d5:f5:f8:df:ff:
                    1e:49:67:26:f8:52:23:92:0a:c5:8b:9c:aa:bc:7b:
                    86:1e:9d:cb:a3:21:05:32:c7:f7:a6:dc:af:d6:2c:
                    5f:45:1e:e3:ce:c7:ea:d8:24:56:e1:27:0c:f3:df:
                    2c:10:6a:80:83:d1:28:e9:36:51:77:6b:37:c4:28:
                    42:61:ac:1c:93:8e:f2:9e:94:4f:25:99:3f:2e:0d:
                    8f:53:ff:15:49:e2:bd:50:a2:c4:e1:92:22:ec:9d:
                    84:f8:90:40:69:2b:c5:56:bb:4a:a6:51:d8:40:e2:
                    eb:74:9c:f3:86:08:e1:40:a5:3d:26:a9:f5:55:8b:
                    99:ad:ae:90:25:e4:cd:9d:e3:c0:3a:0d:6e:8e:fb:
                    41:6b:10:6b:33:c7:02:e3:dd:8c:22:bc:62:db:28:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:F4:A3:F4:DF:C7:12:27:B8:58:49:E3:01:6D:BC:34:AE:85:B3
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:4e:a6:99:74:34:d8:39:00:4c:93:12:ce:5f:08:43:62:
         5c:27:89:b5:e9:ea:10:46:60:34:fd:36:b0:78:37:bd:e3:4e:
         f4:18:f3:70:1c:b3:97:dc:49:94:04:9e:f3:87:4e:ef:a7:68:
         7e:d1:a6:a0:51:36:a6:86:99:b8:62:42:9d:7a:4f:73:de:d3:
         47:00:36:b5:bc:7e:89:aa:71:23:99:88:4e:b6:70:fa:cf:83:
         38:7e:f8:12:c6:26:c0:80:fa:e5:48:c6:30:2b:a6:49:07:f4:
         00:68:a8:c6:c2:6c:a4:30:b5:b3:2c:7c:45:2f:f3:57:3f:ed:
         b8:03:bc:20:79:d7:3f:52:04:ba:45:81:84:fc:50:40:5a:cf:
         86:14:a0:6d:7d:6c:a9:89:1b:38:58:3d:8f:12:e1:0e:05:c8:
         8f:89:cc:26:1f:fe:6c:46:64:6e:6a:1d:56:c4:e6:6e:2e:9f:
         ba:57:9a:05:46:bb:dd:b0:fd:40:12:5b:fc:e2:39:1d:d1:8f:
         6d:b7:87:ae:68:15:7d:f9:1b:72:29:ef:cd:54:95:0a:b4:e5:
         3f:52:ec:07:a4:ac:44:a1:8f:04:89:57:5d:23:25:b5:ec:75:
         1e:43:99:78:c3:6b:71:36:df:0c:15:dc:0e:d7:f1:c7:1d:22:
         dc:39:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----