Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
File:                     ooinzLTItWvoPCxXZZ3A2W6VZig.mft (raw, json)
Hash identifier:          xcVcEYrrrdssCgaMq4jGaAgdrtsSNA9BTTi+c2/dh3o=
Subject key identifier:   93:03:CD:3B:25:A2:B1:39:96:4D:0A:5C:A4:9C:53:23:8A:DF:36:B4
Authority key identifier: A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
Certificate issuer:       /CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Certificate serial:       0196895C04C302DD9F2A6DABA4469F70FA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
Manifest number:          07E0
Signing time:             Thu 01 May 2025 01:00:30 +0000
Manifest this update:     Thu 01 May 2025 01:00:30 +0000
Manifest next update:     Fri 02 May 2025 01:00:30 +0000
Files and hashes:         1: ooinzLTItWvoPCxXZZ3A2W6VZig.crl (hash: T26A0W/PetHoH5KlaM/V1V4R/zVGT0bQozVb2nrsWlE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:04:c3:02:dd:9f:2a:6d:ab:a4:46:9f:70:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
        Validity
            Not Before: May  1 01:00:30 2025 GMT
            Not After : May  2 01:00:30 2025 GMT
        Subject: CN=9303cd3b25a2b139964d0a5ca49c53238adf36b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:88:70:c6:59:44:51:49:5d:02:0a:3e:49:
                    66:33:18:69:4b:07:23:9d:24:e2:77:ae:c5:26:1c:
                    0f:3b:5d:f7:26:e4:55:b0:5d:1f:fa:a5:0c:62:cd:
                    b9:33:42:a8:ec:b9:a4:60:2e:de:8e:f7:28:47:a6:
                    c3:2c:2b:91:d0:7a:23:6b:9f:0e:75:4a:6a:27:04:
                    9e:5d:12:63:f9:e1:8b:4d:73:cf:21:cf:35:0c:5b:
                    ac:13:83:d2:98:39:03:21:01:e9:46:34:ed:58:3d:
                    7a:35:26:51:ae:4a:9f:63:11:ce:5b:7a:84:6c:75:
                    a4:b4:a2:c3:fc:6c:d5:62:5b:1b:d2:72:24:c4:78:
                    a1:8a:e9:c6:76:8f:30:c8:ce:23:d8:eb:96:f4:93:
                    7a:99:75:88:8b:86:6e:5d:f2:86:83:e8:bc:47:bc:
                    84:6c:e1:b9:66:a3:91:1a:9e:c7:e9:bf:12:29:49:
                    fb:c3:27:80:2c:33:d1:20:b5:59:7d:a9:7b:93:80:
                    64:8d:65:9a:af:6a:93:82:8a:70:ad:ae:82:0d:3c:
                    a6:84:de:78:30:59:70:77:b0:38:b0:04:32:e2:aa:
                    3d:87:07:d0:00:0f:24:cb:9c:70:c1:4a:05:13:d2:
                    22:1a:f2:58:89:6f:42:11:97:77:6b:14:73:be:e3:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:CD:3B:25:A2:B1:39:96:4D:0A:5C:A4:9C:53:23:8A:DF:36:B4
            X509v3 Authority Key Identifier:
                keyid:A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:de:36:a7:4f:b3:fe:9b:e6:9b:b6:eb:e2:ca:1b:de:ba:86:
         f3:95:34:7f:f1:ba:0c:af:47:2d:ed:07:c2:47:45:c0:ad:fe:
         94:48:00:1d:43:2a:f3:c4:14:46:37:75:d4:0c:6e:38:ff:66:
         1e:d6:4e:79:ba:57:cb:45:06:e8:a1:7d:02:89:48:03:d5:08:
         82:a0:dc:2f:dc:29:8d:83:bf:ee:75:3e:46:29:df:25:66:ab:
         2c:0d:8e:6f:e8:3d:a4:e1:96:9d:a9:1d:d6:af:03:9b:24:34:
         05:f8:3c:36:c1:0d:b2:e3:f3:12:a0:52:8d:93:67:42:d8:2b:
         70:18:a7:23:c4:86:4d:61:73:83:2f:cd:94:e2:50:96:df:f2:
         14:a2:cd:9a:b1:14:7f:2c:ec:da:f1:3d:0a:13:86:5a:37:e5:
         80:de:50:32:6d:ab:a5:00:69:10:d0:23:37:ef:12:2b:c1:76:
         7f:ff:ff:91:2a:1b:cd:22:11:c0:de:3c:03:11:26:3d:51:de:
         8f:31:97:d0:a8:72:58:dd:e5:c7:85:b0:fa:c1:b6:58:2d:de:
         7a:98:b0:23:58:da:5d:aa:34:0d:05:0a:b0:1f:12:a7:c1:6a:
         4e:94:c4:d3:3c:0e:99:86:ee:a2:87:e3:b0:12:c0:94:99:7c:
         33:91:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:26:13 2025 by rpki-client