Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
File:                     8OlKP3YsIdcztI_yssV0VgXCvjM.mft (raw, json)
Hash identifier:          XZAxsF9vgT00xN3IiEuw15bq+2hhbPuUXJDVqTgCvxQ=
Subject key identifier:   B9:CB:05:AC:FC:52:BC:AE:20:86:23:35:7E:BC:C8:41:9C:D5:D2:76
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Certificate issuer:       /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial:       019547ECCFFD01AEF1DABC7B409F5232A02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
Manifest number:          0F11
Signing time:             Thu 27 Feb 2025 15:00:56 +0000
Manifest this update:     Thu 27 Feb 2025 15:00:56 +0000
Manifest next update:     Fri 28 Feb 2025 15:00:56 +0000
Files and hashes:         1: 8OlKP3YsIdcztI_yssV0VgXCvjM.crl (hash: ACjgCpnlyaO0/rjWK8J/xXYUQUfIYUjv+cYdo24SSbg=)
                          2: NR9HV4acGoApHHDJDWYupOCz2zg.roa (hash: FriwYpmfuXTn7afUyv1p7OwXj5qQDdCL6/trn8iuuXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:ec:cf:fd:01:ae:f1:da:bc:7b:40:9f:52:32:a0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
        Validity
            Not Before: Feb 27 15:00:56 2025 GMT
            Not After : Feb 28 15:00:56 2025 GMT
        Subject: CN=b9cb05acfc52bcae208623357ebcc8419cd5d276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:af:2b:c9:9f:d4:1d:7e:07:c6:b8:14:63:
                    19:ee:ea:43:7c:b8:45:1a:60:64:92:56:c0:c3:0a:
                    14:58:93:0c:b3:fe:d4:92:bb:e9:2c:0f:b0:52:f3:
                    3b:fc:75:36:0a:58:e5:5b:4b:3a:ab:2d:84:92:58:
                    7d:1d:28:22:12:b3:f0:ce:07:9c:5e:b9:fd:ce:23:
                    f6:c2:37:4c:7b:2f:1b:cf:f1:eb:ff:c2:05:bb:4b:
                    52:e4:73:ef:61:cd:a1:00:66:38:ec:b1:53:12:55:
                    9e:c2:e4:ae:b1:b8:06:15:75:39:86:58:8f:a3:cc:
                    50:e7:33:9b:b5:30:ac:d3:c0:56:ca:94:73:90:4a:
                    83:7f:05:fd:9f:43:55:4b:7a:ba:b0:e6:aa:ee:f8:
                    ff:6b:5a:8e:22:03:58:20:0d:da:19:8f:98:4d:e1:
                    2e:21:1b:66:34:37:de:92:90:95:b1:1a:0b:aa:88:
                    89:4e:d0:af:08:2d:d3:49:7a:a8:42:f9:a8:af:14:
                    5e:d1:24:58:e1:39:7d:44:c5:a1:dc:5a:3a:7b:82:
                    68:e2:a9:79:65:fb:fb:4c:4c:b0:78:82:8b:70:0a:
                    cb:d5:b3:c5:0d:31:f7:2d:c4:60:12:22:24:4a:3c:
                    6b:a7:3e:c9:2c:e0:61:da:40:77:e6:7d:8c:5e:44:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CB:05:AC:FC:52:BC:AE:20:86:23:35:7E:BC:C8:41:9C:D5:D2:76
            X509v3 Authority Key Identifier:
                keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:16:00:5b:cb:ae:cb:03:6b:38:55:e0:d5:2e:ec:3a:9a:44:
         ce:14:ad:87:f5:09:87:79:14:3d:fe:3c:ca:84:42:89:d0:71:
         27:5d:58:1f:91:4b:59:1d:c7:9a:26:8a:b1:b0:8b:fc:88:7b:
         cd:ee:5c:d3:ac:8c:1a:39:e2:c8:a2:9e:df:44:bd:ab:f0:e0:
         02:3e:69:c2:91:a0:f7:87:0a:b1:15:54:5d:28:97:ee:76:24:
         bd:c1:d0:cf:d0:80:e4:e5:b1:34:31:31:5f:0e:49:24:7a:41:
         35:e1:6b:27:ee:7a:09:da:a6:18:39:fb:bc:44:81:ad:2e:ea:
         1a:57:39:b2:c0:39:dc:f6:08:41:ec:01:70:48:4f:f8:61:e5:
         50:71:de:c8:13:96:6e:82:85:18:4d:14:fd:85:6b:c0:83:8d:
         e2:ba:f9:0f:c8:11:cd:b1:80:67:12:b3:1c:f6:05:54:52:10:
         54:b5:ee:72:6f:3d:82:81:9d:79:96:d3:d4:27:58:c0:06:eb:
         32:34:8c:81:4a:3d:04:28:30:a9:54:cc:7c:bc:57:a9:6d:7d:
         4a:25:90:61:d0:89:4b:a6:c8:d2:e7:73:f1:be:33:15:df:2c:
         f7:80:e1:8b:d7:91:29:27:52:66:eb:0a:98:6e:66:09:c5:d4:
         2b:13:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----