Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File:                     b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier:          oV/7+V8PS0tYA1adNja9fwwpEjmxbGzwl5n4muWeaug=
Subject key identifier:   18:5A:89:55:93:96:A6:3B:A1:04:D9:0A:FF:70:D5:FD:9D:3B:2E:F9
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer:       /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial:       01962DF3CB9CB7BBD9C4F3B4E2EACB4523FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
                          2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: iZvKO0qkjXhm+aOZUt6ggmpzMgRPDHVgiuEy6ntuXYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:9c:b7:bb:d9:c4:f3:b4:e2:ea:cb:45:23:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=185a89559396a63ba104d90aff70d5fd9d3b2ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:b3:fa:fb:3e:12:7c:1b:c1:4a:1a:c6:04:
                    c8:ee:e8:01:c7:60:24:32:4d:eb:92:90:25:3f:00:
                    70:8f:a6:49:9f:b3:a3:96:20:a2:ce:99:be:3a:40:
                    87:f4:8d:bf:06:a2:f7:f1:5f:6f:6c:34:68:f7:70:
                    cf:ea:3f:33:ef:55:ce:fd:64:0e:e0:0d:0e:fd:80:
                    65:52:c2:0e:ef:24:7a:14:c3:91:4a:d4:55:98:6c:
                    a9:32:c0:a0:d7:22:e0:43:6e:82:d9:c2:aa:02:a7:
                    55:e6:c5:91:c3:cc:60:34:d0:d0:bb:2e:63:99:f4:
                    90:0a:e5:42:b9:31:d0:5a:fb:1c:15:d4:4c:33:4d:
                    f7:12:f1:33:64:de:83:0c:c7:ba:5c:74:5e:00:e6:
                    cb:2e:c7:db:cf:b0:b5:0e:df:c8:77:96:03:23:8d:
                    5b:56:27:d1:58:a5:6d:b4:29:c5:e3:db:6b:31:ce:
                    94:01:11:4a:40:8c:09:a7:ad:47:30:c6:39:87:3e:
                    d2:3a:aa:4c:38:65:46:8d:98:4a:16:92:b0:63:80:
                    70:ba:5e:c4:18:b1:58:31:3d:00:85:a4:8c:99:61:
                    3a:a3:04:c0:dd:88:86:d2:4f:fe:fe:f6:bb:ba:b3:
                    2b:f9:ba:63:98:84:e0:c0:e6:0e:c8:89:b6:63:5d:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5A:89:55:93:96:A6:3B:A1:04:D9:0A:FF:70:D5:FD:9D:3B:2E:F9
            X509v3 Authority Key Identifier:
                keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:ea:57:ce:a4:5e:71:8f:f9:32:3e:cc:01:f9:f0:f7:9f:
         be:68:9b:f9:0e:99:cc:a2:3a:7a:76:5c:9d:05:e5:a0:cf:c8:
         9f:60:20:c2:fc:e7:fb:4a:09:2d:c7:b1:b5:da:07:b9:0b:83:
         35:e9:fa:00:f2:b8:5c:c3:9d:43:07:43:a1:c0:b8:b6:63:d6:
         52:c5:51:20:6a:92:95:e4:a5:ff:99:5d:1a:62:12:6b:12:1b:
         cd:0b:dd:f7:70:41:cf:df:9e:be:c9:dd:38:e5:f0:27:c9:f8:
         f0:a9:bd:8d:ed:3a:bf:16:a5:95:7d:9f:c9:7b:c8:33:71:d8:
         07:43:4b:e6:f6:83:7a:97:d4:ec:17:56:20:53:87:9e:9b:63:
         92:70:67:6a:b5:84:1f:bb:33:ff:12:39:f9:ba:8d:b1:81:6f:
         fa:80:3b:26:bd:03:41:c5:aa:86:8e:88:ad:72:4a:18:49:da:
         a2:95:78:c5:76:28:35:4c:22:34:0c:03:51:66:bf:f2:5a:92:
         a4:d6:21:31:cd:e2:40:b4:a5:87:a0:82:d6:1b:43:a8:c4:05:
         b0:13:5a:cd:a2:35:93:f9:68:44:a6:57:8e:96:1c:cf:5d:fa:
         24:a3:fe:c0:9a:db:3e:e5:a9:02:bb:b0:0a:ec:33:71:72:4a:
         d5:1c:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----