Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File:                     ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier:          DwOX3T9tEWmR1ljKKY5dP0UxTDFK/uH96yV8KpBf5xw=
Subject key identifier:   62:95:E1:61:7D:A1:F9:26:2C:60:87:20:83:57:08:73:5D:21:4E:1A
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer:       /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial:       01962F3D9ABC50F0327FD208B7BA0DBE9F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number:          0F20
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
                          2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: z3IEFdWbmYLhMgxEcbAsIKM+GWm4g54zjqr/UX/3xjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:bc:50:f0:32:7f:d2:08:b7:ba:0d:be:9f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=6295e1617da1f9262c608720835708735d214e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:58:a7:53:ed:05:c6:b8:3e:ab:bd:3e:a5:
                    23:51:1c:f6:5b:39:96:f8:f7:50:53:78:70:41:2b:
                    af:88:a8:63:01:93:71:d5:e3:0c:6a:0c:cc:6a:3a:
                    4d:32:46:80:e6:71:d2:d7:6d:8b:bc:4e:e0:b7:60:
                    da:bc:e0:6a:17:fa:6f:c1:f5:df:32:2f:2f:e5:42:
                    ac:f9:5c:bb:c7:d7:3f:ba:43:f9:56:d3:26:a2:05:
                    5c:b3:e5:54:7f:53:3e:2e:40:0d:49:88:73:ea:8a:
                    2d:f4:e3:6d:0f:85:b1:f6:9b:ef:d7:fe:71:ca:6b:
                    56:ec:d1:61:42:54:39:dd:4e:15:ad:16:ef:f4:f7:
                    b5:49:0e:98:04:3b:26:66:41:12:25:fb:ef:1d:3e:
                    27:1d:68:a3:71:df:b1:0f:4a:b6:db:3b:e5:de:7a:
                    3c:1d:59:ad:14:a2:26:e2:ac:87:47:dc:aa:6c:1d:
                    86:69:27:fd:56:90:11:5a:1b:80:d7:80:42:7f:da:
                    e7:6a:b3:8c:f5:bc:d6:5c:16:ad:99:e2:02:3f:79:
                    a6:b8:22:31:64:4f:af:4a:44:8d:aa:f2:8d:b3:31:
                    04:4f:3b:f3:b4:44:bc:f7:0e:83:ea:d2:3c:07:36:
                    a3:ec:09:78:18:a0:1a:28:a8:3f:9f:98:5b:61:37:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:95:E1:61:7D:A1:F9:26:2C:60:87:20:83:57:08:73:5D:21:4E:1A
            X509v3 Authority Key Identifier:
                keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:d2:97:d5:be:63:67:63:d4:1c:78:69:72:18:89:f9:0d:
         e2:96:e3:16:31:00:79:9d:73:39:01:64:75:dd:b4:ed:26:87:
         dd:16:2d:0a:b6:0d:b4:15:fc:d8:36:89:0b:4b:b4:20:32:15:
         f4:cb:3e:77:8f:3d:a0:a2:22:c4:e7:84:c5:29:18:cb:7c:14:
         a1:b2:f4:98:d5:b5:de:58:6e:9d:3c:df:fb:9b:05:a2:40:8f:
         8c:ea:1d:e7:a4:d6:01:24:07:62:07:86:c8:ae:c5:ac:5a:84:
         be:d0:d6:99:4f:fe:ed:93:72:20:c3:94:05:bf:75:04:e9:04:
         36:33:9f:83:a3:a0:d7:94:32:50:1b:7d:54:4d:31:37:f5:9d:
         61:20:01:a2:e2:38:ec:86:d7:7b:9c:f3:51:8f:b7:d1:c8:55:
         6a:fc:60:29:82:27:49:f6:08:b6:47:b4:b5:b9:b4:59:97:42:
         f0:ae:18:f7:63:e3:74:7f:f0:5e:1e:79:df:c9:f8:6e:00:75:
         fa:6f:ca:7e:be:25:63:93:ea:1f:30:cc:52:29:81:7c:57:1a:
         73:c1:5a:28:39:97:d5:d2:79:6a:16:87:a1:e9:7f:05:0c:10:
         be:96:d8:3e:c7:5a:ad:74:f1:a1:57:28:c2:d4:67:66:b3:02:
         41:46:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----