Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File:                     RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier:          uni90OSRkpgrnRRKsh8zkMGounImK2z1hrcKubW3duk=
Subject key identifier:   7D:AA:84:A3:D1:B4:68:8C:09:FD:B5:B7:A1:03:96:65:93:33:A3:E9
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer:       /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial:       01962DF43FC2A53FDEA22FD8936F015EB1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
                          2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: RJPIQUsAOLgkio9tTYpVrIh+Miy5Spe4eoLeB4Z+fKs=)
                          3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:c2:a5:3f:de:a2:2f:d8:93:6f:01:5e:b1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=7daa84a3d1b4688c09fdb5b7a10396659333a3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:56:20:ab:df:d7:fa:0a:1c:11:c9:2a:5f:
                    03:c1:27:77:75:05:f4:15:57:65:21:2e:1d:a6:c5:
                    25:fe:ad:21:95:53:f1:04:87:36:46:20:4a:fe:9a:
                    ee:1e:ad:6f:a9:67:8e:e1:ec:6e:ca:fb:4c:51:4e:
                    1c:51:1d:e3:79:fd:d5:b0:11:49:04:a3:10:cf:3a:
                    54:07:b9:e6:6b:02:6e:88:cd:9e:a3:8a:02:6c:c6:
                    38:b9:0a:97:c7:75:6c:f7:17:00:13:cb:33:62:c0:
                    0d:2a:7f:a5:2c:bb:4a:1d:92:ad:70:73:16:11:c2:
                    76:e3:cb:55:77:0f:a2:c3:9d:f1:f2:71:44:0a:2e:
                    80:1a:88:18:47:c9:8b:ec:b9:e4:d4:3c:b7:75:7a:
                    a6:6f:f9:83:4b:fc:8f:e8:c8:b8:26:29:c6:86:24:
                    f2:07:05:8a:37:72:99:fb:14:d8:07:8e:ca:d4:c0:
                    c1:5a:b5:68:ce:8b:2a:d9:56:db:99:9b:a5:18:f8:
                    70:97:54:f5:46:e5:bd:87:12:20:96:db:96:eb:fb:
                    e1:17:ab:79:7a:4c:d9:7f:a1:4f:51:14:eb:91:64:
                    a7:6f:72:d8:43:12:35:39:3b:53:b9:e7:4c:66:0d:
                    df:b8:96:76:7d:37:d0:6e:e8:32:4d:4e:8d:25:50:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AA:84:A3:D1:B4:68:8C:09:FD:B5:B7:A1:03:96:65:93:33:A3:E9
            X509v3 Authority Key Identifier:
                keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:e3:59:36:d6:71:0e:cc:d0:e2:b8:b5:2d:b6:81:81:2d:
         9b:51:aa:ef:ac:94:05:0e:96:92:25:ab:07:22:60:c9:28:7e:
         b1:4f:63:94:a4:a4:e7:97:7d:ff:f4:a6:66:d7:2d:7c:48:9c:
         34:de:e0:3b:23:e2:2c:13:dd:8c:50:f8:5c:61:d5:14:0f:5b:
         4e:93:0f:77:88:55:ff:1a:a2:98:c8:fd:e1:ca:64:77:0b:62:
         9a:86:cf:6d:17:33:c8:66:11:b5:c7:e3:ea:e8:cf:94:ad:58:
         46:0c:a8:a2:72:34:27:cc:4d:08:46:d6:1e:64:35:fd:eb:8c:
         84:68:8d:80:48:8f:59:b1:e3:e6:9f:db:82:22:bb:e9:d1:bb:
         57:59:f8:e9:1b:d6:0d:0d:3d:cb:dc:db:16:1f:e7:c4:f4:53:
         49:8c:ea:e7:94:1b:fd:86:32:82:33:38:7e:11:30:be:e9:16:
         ad:f3:86:58:9e:68:4e:53:50:b7:1e:b4:6c:c5:89:31:fc:bb:
         56:09:23:22:8a:e9:1d:7c:77:1d:44:e9:9d:e9:a7:c9:30:c0:
         85:c5:ba:f6:70:87:05:a3:95:4b:78:b3:b7:ee:01:93:1d:71:
         c3:d7:3f:2f:3a:a0:d7:d0:e1:63:17:2e:3d:70:be:bd:7e:e6:
         1f:9f:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----