Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File:                     OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier:          PkbUA6v8S/cQHKbHxPPdZGXOnCEiyVIp9AwJpOIu060=
Subject key identifier:   E3:32:43:BC:DE:1D:16:35:E3:C3:82:2C:4D:3F:D5:08:51:09:27:0A
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer:       /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial:       0194BC04B18D082144A452491A6C1BAB082B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 11:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:11 +0000
Files and hashes:         1: 0i27NjvnFtlwbFJL8brWgH_dw8U.roa (hash: YML80PmXT345DJiCwX4apNsJ7UtnB8nEMX5Dpv2Ctsw=)
                          2: FX1SpsCHHWTuiAeQxCws4Hj1-bM.roa (hash: +oobSVkF7j0dzWBT9UBFQT7D4zEppXINPjwMfAIBl3c=)
                          3: OfxxmNtzJcdCBkWeVovM4im8aiY.roa (hash: WRZK3jUR3eiSqkPuuJOy87KYkFs/X19TJQecAHmPTCA=)
                          4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: YkdjdpEKOZDg1X1P16UMzW2Y6dMHmz37HMInYremF+Q=)
                          5: ct0UdU9tbjVu5vnRCDtuTGBSo4c.roa (hash: 2wetSh/WjuBgx0H+sbj7Aow3E9vqoUt+MG+BDwetShE=)
                          6: pZwUUb6x4Lez1tW_jvxd_X_PyY8.roa (hash: weF+c7Ta8anbMKz4f67ACPq7m1FTdbmyMymH/ZhAy3g=)
                          7: vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa (hash: 1s2dWFQ6yIEmp8FiTPqLYuMVpLoqmko/eqoHIt276/8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:b1:8d:08:21:44:a4:52:49:1a:6c:1b:ab:08:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
        Validity
            Not Before: Jan 31 11:00:11 2025 GMT
            Not After : Feb  1 11:00:11 2025 GMT
        Subject: CN=e33243bcde1d1635e3c3822c4d3fd5085109270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:33:21:cf:34:8f:27:8b:01:66:2d:09:72:
                    67:e8:09:45:81:73:8e:cb:59:1c:ec:b2:07:dc:4f:
                    d4:b2:57:e4:d0:21:22:34:8d:cf:8b:79:be:b0:5c:
                    d8:1f:28:7d:c3:fb:2f:5a:9b:a7:68:81:cd:54:c3:
                    b7:e8:a1:da:03:42:5d:6d:74:f5:ea:61:27:57:fe:
                    44:4a:e4:5e:9d:de:95:39:4f:5f:f0:96:4b:d3:f7:
                    af:ed:fa:e0:f1:d7:7a:1b:32:97:f9:7f:43:c2:d5:
                    68:a4:7f:23:49:9e:6e:ce:21:91:96:43:6f:f6:f1:
                    32:8d:3c:43:8b:39:3c:4b:e1:76:f0:a6:9f:24:02:
                    f6:43:55:bc:0d:7f:af:05:6f:87:12:36:c9:fe:6f:
                    66:52:d5:d7:85:ef:1b:84:e8:f3:48:8c:13:d3:64:
                    53:2f:6a:e9:a1:64:18:02:6b:47:4a:11:71:f4:d6:
                    2e:3e:c1:ea:73:1e:f0:d1:a2:32:19:61:db:9a:c5:
                    92:50:1e:a0:f6:c7:54:af:ba:b1:bb:4e:5c:e2:5d:
                    4f:4c:c8:ae:28:0a:6a:07:d5:f8:99:ce:08:ce:51:
                    91:f2:f1:ac:a2:56:d5:d9:be:84:12:c6:8f:a2:0f:
                    ec:cc:e6:7e:14:1a:51:96:7e:57:36:df:3b:6a:92:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:32:43:BC:DE:1D:16:35:E3:C3:82:2C:4D:3F:D5:08:51:09:27:0A
            X509v3 Authority Key Identifier:
                keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:10:a2:15:3d:51:3c:f1:e9:6d:e9:47:88:79:35:75:69:
         a7:2f:78:81:62:06:f6:5e:f1:c8:ac:39:38:27:fd:d6:44:9f:
         d1:88:61:03:fa:85:21:7b:9a:9a:84:4f:a1:ed:0f:2e:34:25:
         a1:2f:b4:62:dc:37:cc:21:6e:0c:7c:49:7a:4f:c6:0c:3a:1e:
         32:51:21:0d:51:2e:1a:53:82:cd:f4:e2:46:0d:29:34:80:5e:
         89:27:18:ea:13:76:d3:19:3a:76:47:52:dd:3d:ce:43:ea:93:
         1c:d7:3e:f3:e9:e4:42:70:d6:bf:d3:6e:db:1c:60:a8:9a:b5:
         7d:65:e5:5c:ff:c4:93:47:c3:fe:8f:a8:fb:ab:9c:c6:b6:e5:
         94:10:e4:58:b0:b7:37:f4:69:b1:91:0a:cf:54:08:2d:d1:ce:
         8d:34:f7:0a:b9:4a:02:a6:b3:e3:eb:ee:a5:cc:f2:34:10:10:
         45:57:3f:9f:94:97:26:15:50:0e:a7:ee:ef:b4:73:d1:c9:5c:
         e0:ec:c5:bc:30:5f:4c:87:f7:81:5c:db:e2:23:ae:f6:ee:02:
         ff:82:0f:58:37:c6:ee:bd:db:33:c8:2b:8b:0d:f2:c3:ab:3f:
         7a:4a:0e:a8:25:9a:72:2f:72:c9:af:fd:ed:96:f1:8f:93:9c:
         d6:d4:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----