Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          DkHask5xNhWeTvUx8hbFoNtvwY8R4b7l+r2+u+z4SWs=
Subject key identifier:   25:BC:E7:48:D7:8A:72:B8:FF:5D:FA:F1:06:FE:92:89:58:A6:97:91
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       01962E2ABFE038EAA14A41646E454314024D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=)
                          2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=)
                          3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=)
                          4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: sKksWNOGIhzXI32m08l8fWM0JnEMlaq2kBF3jeoaZGw=)
                          5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=)
                          6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=)
                          7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=)
                          8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=)
                          9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=)
                          10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=)
                          11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=)
                          12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=)
                          13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=)
                          14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=)
                          15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=)
                          16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=)
                          17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=)
                          18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:e0:38:ea:a1:4a:41:64:6e:45:43:14:02:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=25bce748d78a72b8ff5dfaf106fe928958a69791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:ad:48:af:ff:eb:e0:72:83:1b:2a:a0:71:
                    57:c9:25:c1:5d:7d:43:c0:db:76:7c:88:05:0b:28:
                    40:ce:e4:a6:60:7f:1e:f0:80:1b:1c:a6:44:e2:d9:
                    5e:b0:98:1a:0f:7c:2e:a2:05:26:79:c1:1a:aa:2d:
                    fd:dc:17:2a:fa:36:a0:1c:07:b9:3f:f1:30:d2:80:
                    68:19:84:23:c7:75:90:16:dd:c9:d0:c0:58:cf:bc:
                    3c:c8:d9:59:ed:ac:e2:86:64:dc:1b:a5:d6:33:9a:
                    5c:4e:0b:24:4c:15:ee:9e:74:b9:f9:b0:94:ce:5f:
                    57:83:88:53:48:29:56:18:91:fe:1c:e6:cc:dd:84:
                    8a:1d:48:16:54:68:08:e9:89:b3:b7:00:50:4f:83:
                    0c:ae:f4:7e:e5:49:c8:1c:ce:44:be:ed:d2:54:1e:
                    bd:56:f6:6f:7a:b3:0b:3a:c9:5d:42:9f:38:ed:6f:
                    cf:39:a9:7a:01:5b:df:a4:4d:53:5d:43:2e:8e:6f:
                    b6:ac:de:cf:73:a6:10:41:62:31:8e:a5:27:e9:76:
                    3f:26:1a:a1:7e:6d:77:3c:e8:f4:76:0c:2a:45:af:
                    13:e7:74:b9:a5:7e:98:f0:04:8a:17:72:23:99:02:
                    d0:37:23:e6:bd:89:b8:8f:0c:9d:46:bb:cc:b0:76:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BC:E7:48:D7:8A:72:B8:FF:5D:FA:F1:06:FE:92:89:58:A6:97:91
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:ee:d2:b8:c9:e1:ae:71:56:13:65:11:c1:05:a5:bf:16:5e:
         d1:2d:c5:3c:36:14:99:c7:64:97:78:c9:44:6a:2c:e7:7e:ae:
         c7:9b:9b:9c:fc:59:9d:c4:bf:43:f1:e2:e2:e4:f5:5f:ad:f8:
         d4:7d:9e:13:90:8a:23:50:98:a6:6b:aa:5c:36:6d:00:af:08:
         16:62:52:e2:36:26:3d:ea:f7:e4:29:e2:c7:42:19:5c:68:de:
         09:5b:5e:b7:77:17:88:be:50:8b:06:30:dd:12:53:d2:e3:8a:
         0c:5d:44:92:02:d2:ea:1a:eb:e7:2e:56:f2:d0:84:8a:17:51:
         38:fd:da:40:e3:4d:4d:e5:9a:3f:39:4b:a6:8c:98:9b:9b:d5:
         cb:2c:6a:81:9d:75:96:63:1a:c8:4b:c0:61:6c:8f:51:1a:f8:
         31:ff:9f:e6:e0:aa:5a:19:ab:43:91:78:f7:a7:a6:2d:32:6a:
         1a:3a:6a:2c:c1:a9:c7:59:bc:9a:22:2e:df:09:b9:8f:21:f7:
         9a:61:96:c3:2b:6a:9e:79:99:c5:ac:ea:47:7a:d5:c9:08:62:
         24:0e:9d:1f:1a:93:b2:e7:a1:d5:a9:a5:02:e0:2f:ee:49:ca:
         7d:d4:36:02:53:c4:72:28:af:4e:51:78:50:74:1e:cf:a5:21:
         5d:e6:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----