Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File:                     7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier:          fwXFhbHfqqKla8wQvuJNINoWCSIyGfiY/RZuLrzqyM8=
Subject key identifier:   9B:DF:2A:A2:87:70:B9:FB:03:61:2F:76:D2:B1:20:00:46:B0:11:34
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer:       /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial:       01962F3DDC936293B1BB1BE7B04FCEC4D066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number:          075C
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: skFSL6A+QVLaOsR7lpiJq3OAJU41iyWaFySjug+/nZ4=)
                          2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:dc:93:62:93:b1:bb:1b:e7:b0:4f:ce:c4:d0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=9bdf2aa28770b9fb03612f76d2b1200046b01134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:a5:30:18:35:3f:68:4f:84:3b:4f:9e:15:
                    00:36:c4:7f:ca:a8:ec:c7:53:1d:a0:d5:4f:5e:06:
                    ea:0e:2b:1b:00:90:fc:c3:5b:b6:68:52:98:ac:40:
                    00:e7:c2:11:91:c0:ab:af:46:5d:b5:12:5d:69:6f:
                    e4:6a:e9:8c:1e:e6:f3:70:99:ca:fe:2b:f7:cd:70:
                    80:97:78:54:2e:55:eb:4d:98:8b:87:3d:e0:06:83:
                    d5:40:96:30:c1:2b:d0:a5:39:7b:ff:67:a8:72:d6:
                    39:77:e7:e1:56:8d:33:3b:7f:2b:c1:ed:d9:67:d7:
                    cd:3a:81:38:0b:ca:ed:59:9c:78:4b:0e:15:4b:d6:
                    00:66:1f:ac:28:24:93:b9:70:47:85:a6:de:08:28:
                    dd:32:11:7e:5c:e8:14:11:44:d2:94:66:1b:2b:17:
                    99:bf:2f:a3:93:24:cb:6a:62:bd:90:34:79:38:0c:
                    26:51:b1:86:f6:f8:5f:86:4e:55:7d:68:0d:65:75:
                    88:02:8c:57:0d:17:8a:78:17:27:95:ed:3f:f6:32:
                    55:14:b0:e5:18:21:0f:df:79:5d:c9:8c:a1:c3:f8:
                    6b:d5:cc:43:c0:77:80:a0:df:4e:dc:32:d6:d2:6e:
                    ca:35:d0:d3:16:bf:60:5a:c5:4f:c8:03:01:56:d0:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:2A:A2:87:70:B9:FB:03:61:2F:76:D2:B1:20:00:46:B0:11:34
            X509v3 Authority Key Identifier:
                keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:87:b8:1d:26:e9:dc:84:ef:da:8c:cd:c1:80:98:2f:a8:0c:
         bc:a4:fb:18:ab:1e:54:44:ce:0a:55:d9:f9:64:35:a1:3f:04:
         a2:7b:c4:9d:57:6c:1b:a5:24:9f:b5:51:d9:ec:3b:66:88:96:
         ef:6c:cc:e1:a7:ad:f1:8d:32:e6:99:49:47:3d:9d:2c:29:24:
         55:5a:5c:d0:49:f8:17:e9:bd:fa:f2:84:b5:49:b3:75:49:91:
         10:8b:79:5f:19:1f:e8:6d:e0:b7:f9:f1:61:1e:05:d7:b6:e8:
         bc:63:d4:6d:7f:85:2b:5c:05:90:f3:39:0b:2b:57:57:d6:b3:
         f3:42:3c:59:65:c9:d9:b7:d5:9c:e4:47:4a:7d:a9:07:6b:d0:
         db:7e:5f:1a:78:75:15:bb:1c:12:c4:a7:df:2a:53:22:af:95:
         41:db:7a:3f:55:46:4e:35:dd:2d:c4:e8:95:57:44:7b:1d:13:
         dd:65:7a:cd:98:03:9a:71:64:83:a8:41:08:a7:d6:45:ec:40:
         b5:e8:03:56:65:66:da:f4:af:c6:10:fc:0e:a9:ab:95:96:68:
         34:4d:0b:98:d7:8f:f4:b5:9b:2d:81:c1:67:75:e7:71:e2:5f:
         6e:49:86:64:a7:1a:e4:81:68:dc:70:53:30:5d:9b:b5:73:e6:
         77:8a:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----