Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File:                     soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier:          rE7MR1700zoyE3VM2hutdDmthFABVBJLyhdXTb6vSaU=
Subject key identifier:   D8:FE:49:BE:41:D1:1B:CB:2A:AC:E8:63:25:28:5F:32:91:49:12:7B
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer:       /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial:       01962F073BC44D27B24C99CC739B7B585B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number:          0DDA
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
                          2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: +dschnD7tgBuX8iKjarBRSbc8ICzzlfFpTf+Ejp5FO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3b:c4:4d:27:b2:4c:99:cc:73:9b:7b:58:5b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=d8fe49be41d11bcb2aace86325285f329149127b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:8a:f9:0c:8b:70:4b:11:77:a7:b0:ae:a4:
                    5c:93:64:03:87:22:2b:5f:63:da:e6:ed:b9:14:7a:
                    01:19:72:99:0f:5e:f1:29:db:b7:62:9a:f4:bb:a6:
                    fe:53:01:c0:41:8f:ce:4c:32:e7:9e:03:52:7f:78:
                    97:1d:66:e2:d8:4b:63:10:32:60:fe:d5:5f:94:c2:
                    fa:08:7e:d7:96:c5:a8:af:46:82:41:44:45:12:49:
                    14:4f:b9:68:b6:fc:16:60:3d:88:f5:39:4e:ad:54:
                    45:83:3b:b0:75:54:10:8a:4b:8d:d9:00:5b:68:88:
                    0a:8f:df:e6:28:fd:79:fe:8a:b0:5c:7b:3c:0b:97:
                    e7:1e:72:eb:da:29:22:9a:71:70:f6:f1:4e:eb:8d:
                    e9:af:27:71:cb:d4:ad:a4:79:17:08:16:1e:85:46:
                    fe:29:c8:15:b6:2c:78:7c:db:e3:89:fd:4b:48:9d:
                    45:71:4f:d6:91:38:98:09:e0:fa:82:59:e1:e9:74:
                    ee:09:5b:7c:55:ba:46:0f:58:6f:00:3b:14:6c:94:
                    29:11:3c:f7:f7:38:d0:a0:a6:e5:4d:b4:24:45:0a:
                    6c:53:a4:38:d7:5f:c2:69:88:b7:15:5e:d5:40:ed:
                    ce:5b:85:13:42:00:92:7e:4c:50:be:92:be:2d:df:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:49:BE:41:D1:1B:CB:2A:AC:E8:63:25:28:5F:32:91:49:12:7B
            X509v3 Authority Key Identifier:
                keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:47:41:60:24:80:38:74:2d:43:22:32:2d:94:8f:9e:3f:05:
         6f:27:cf:64:56:b5:f2:fe:46:31:8d:93:d5:72:c2:66:c5:15:
         68:bc:a4:46:f1:4a:ec:e1:37:4a:ed:51:d8:d9:7c:c0:a8:d1:
         72:b1:9c:0f:c4:f4:a1:09:e0:23:4e:98:61:0f:62:cc:fe:e6:
         41:05:bb:ac:f2:31:0a:3b:3b:e2:44:0c:26:ff:b8:a1:ff:27:
         21:1b:3d:d5:30:59:30:b0:25:b9:9c:f6:98:67:45:d2:90:47:
         64:c9:01:77:b4:ae:b5:72:5a:30:fc:06:ea:3f:fb:97:69:67:
         a3:a7:66:df:8d:c6:1b:60:06:3e:52:65:75:9e:77:8a:18:75:
         41:0d:b2:51:bb:56:aa:c6:ac:e8:90:63:ad:98:e9:31:b8:f3:
         32:ba:4e:09:44:d8:7c:10:8f:44:f9:4b:1f:c5:17:bc:1b:a1:
         0f:fb:a2:f9:8c:5a:b4:be:d5:ed:0d:3a:65:82:c5:94:45:28:
         d2:fb:43:f3:96:44:d7:a2:4e:89:f3:4e:df:53:18:2a:38:fb:
         63:75:e5:fc:d8:45:58:31:4d:47:5c:1b:8d:49:3a:01:1e:9f:
         67:c9:14:2e:6d:af:a4:54:7a:51:ab:cb:70:d2:78:04:fe:21:
         bf:39:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----