Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          R/Ffl3A2fhkFn/w6dW38OARQfePkMKl1YoFhp6oQ4B8=
Subject key identifier:   7A:1F:E0:3C:C9:C0:5E:B4:19:FC:C0:EF:CB:92:82:DF:01:13:A5:96
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       0194BBCE891FBCA75E901C52E68C2F33AE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          04A6
Signing time:             Fri 31 Jan 2025 10:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:02 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: nCqTh7oaw/fsbOgJ9hVHlg2wUv4eo3fImp8oEu4qhnI=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:89:1f:bc:a7:5e:90:1c:52:e6:8c:2f:33:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jan 31 10:01:02 2025 GMT
            Not After : Feb  1 10:01:02 2025 GMT
        Subject: CN=7a1fe03cc9c05eb419fcc0efcb9282df0113a596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:a6:13:cd:7b:4f:4e:67:94:55:07:e0:54:
                    09:d4:00:ce:4e:1f:5c:bc:13:2c:a5:4b:ba:a0:c0:
                    43:95:f6:61:00:53:7d:c4:21:07:8e:89:7e:da:45:
                    ee:c3:30:12:25:2c:e9:a8:c4:85:7a:00:30:5f:4b:
                    b1:8f:b5:a5:77:98:e1:af:95:3d:6c:de:bf:1d:dd:
                    66:8a:31:a9:22:62:04:d9:74:9d:ca:18:2d:26:ee:
                    3b:c6:62:fe:6d:28:06:fb:7c:7d:4e:8e:c9:3a:66:
                    6a:76:35:8c:8e:83:d2:e8:2d:65:46:e8:5c:65:97:
                    41:04:4b:47:dc:be:1c:cc:70:18:36:e1:36:7a:a4:
                    83:50:fc:26:f5:1c:e0:57:58:71:72:f7:8d:07:25:
                    9f:fe:ac:2a:fd:e0:24:d3:35:71:0c:fb:bd:93:a4:
                    6d:9f:83:a1:e5:96:5b:33:35:dd:1f:39:90:73:c7:
                    c5:40:25:03:78:e8:54:d8:01:a6:1a:5e:d9:e2:01:
                    30:52:a5:df:09:d4:56:e3:9b:75:ea:f9:ab:d1:29:
                    b5:14:2b:70:dc:0a:93:b4:60:9c:7c:58:a2:87:79:
                    d3:79:f4:7a:8a:ba:15:55:2a:fb:f3:42:c0:71:f1:
                    07:81:38:41:d5:43:9e:91:4b:67:f9:f2:3c:96:50:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:E0:3C:C9:C0:5E:B4:19:FC:C0:EF:CB:92:82:DF:01:13:A5:96
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:c1:86:79:09:30:5d:ac:28:cb:fe:e6:04:05:a4:98:22:
         aa:be:fc:80:9f:64:a6:b5:aa:2c:87:73:7a:b7:ab:e4:74:b7:
         37:99:3d:4f:a0:6f:36:53:e0:e8:e7:f5:09:66:37:21:6c:e0:
         e7:82:79:eb:5c:26:91:74:bd:a4:0e:38:aa:dc:de:00:e0:b6:
         1c:a5:66:f3:7e:ce:f5:15:a2:0b:09:dd:73:7f:8d:aa:ca:22:
         21:50:0a:55:2b:f2:f7:78:c9:17:bc:52:6c:b6:f5:3b:7e:ee:
         92:6e:6c:36:ff:d2:3e:b7:82:1f:c3:41:7b:d7:a2:10:98:86:
         1d:9e:b9:43:14:e7:ab:97:fb:df:d6:f3:dc:e5:d4:03:ef:8c:
         e9:ab:a6:73:d0:ad:d1:f6:91:3d:25:8d:79:f9:8c:cc:06:1f:
         24:02:a6:c8:52:b5:a2:05:72:07:54:cb:40:15:f2:e1:a2:64:
         32:e9:47:72:c1:87:3a:52:cb:85:9e:9d:a0:87:c6:a1:4e:d6:
         11:98:43:52:31:69:9f:d7:8c:4a:21:de:5d:b9:40:a7:50:90:
         97:3f:c0:44:c3:3c:d6:74:d7:4a:98:e9:e6:2e:32:67:47:bf:
         ae:54:e3:7a:10:8f:72:ca:28:52:8e:66:85:c9:5b:eb:74:e6:
         04:ba:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----