Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File:                     xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier:          WxuJsW5rTHUPUot5wxiOhwpTSfYFgVeePPNqbWTQOq0=
Subject key identifier:   0D:D5:0C:DD:C3:FD:65:C5:CF:1A:8E:CF:83:6D:BD:38:34:5C:00:26
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer:       /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial:       01962E99982922EBF1BB884A8D96733A1DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number:          0350
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=)
                          2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: YE63OwADOktTfR7sEL9TBXBgL9pAn44mhxhw4PCuJ2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:98:29:22:eb:f1:bb:88:4a:8d:96:73:3a:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=0dd50cddc3fd65c5cf1a8ecf836dbd38345c0026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:b3:8d:3e:50:b9:d5:f7:52:c5:b9:e6:44:
                    e1:7a:91:b7:b8:d5:9c:ee:f3:73:03:dd:45:de:96:
                    f4:ef:50:51:3e:8e:50:39:0b:21:a8:f4:09:7f:de:
                    c3:9c:72:a6:70:5f:de:a1:be:ea:af:5d:7e:84:e2:
                    d3:20:1a:8b:a3:54:bb:92:2c:af:af:10:55:6b:70:
                    de:03:f9:f6:23:0e:73:98:44:34:ca:25:ab:c5:0c:
                    c7:af:42:03:2e:04:67:8a:87:e1:78:85:c7:7d:20:
                    bc:1d:d3:e5:db:e8:0e:98:f6:79:f0:ba:54:df:1f:
                    12:15:2a:2a:db:25:c9:b2:5b:31:75:92:d4:2f:da:
                    e7:96:e0:23:f0:13:39:14:8c:a2:cb:16:0d:c0:6f:
                    8a:d7:c0:12:8b:19:82:5c:11:4a:8d:de:37:53:51:
                    d6:73:76:da:28:92:5b:b1:00:76:cb:35:87:c3:f1:
                    5c:dc:f4:c3:9b:3d:11:c6:8f:a3:1e:c1:77:9c:7f:
                    f4:7b:9d:e6:6e:23:b8:29:46:ab:8d:7e:b9:b1:f1:
                    91:ca:91:55:f2:f2:6e:46:4e:09:81:f1:e8:08:f7:
                    f9:c9:7b:e7:50:e3:8a:49:40:49:22:cf:08:2a:06:
                    f4:df:c4:2f:40:e6:2b:18:2f:3a:88:62:28:cf:cc:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:0C:DD:C3:FD:65:C5:CF:1A:8E:CF:83:6D:BD:38:34:5C:00:26
            X509v3 Authority Key Identifier:
                keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1e:14:26:ce:7d:65:e6:34:a7:3d:ec:73:a6:14:b6:29:d3:
         00:93:d8:06:5f:ef:7d:70:a2:b0:56:12:9a:1b:c0:cd:cf:f9:
         60:d9:10:84:6c:5a:5d:2e:b2:55:a6:f1:dd:83:62:0e:dc:1a:
         07:16:b9:3b:d7:28:7c:29:9d:ed:4f:87:92:41:e7:50:d4:38:
         54:57:6f:bd:d1:c4:fb:a6:df:ed:0f:85:2c:a7:42:cf:28:b7:
         69:dd:1a:6b:cc:c4:23:18:28:57:4a:9c:97:81:d4:a6:42:4f:
         08:c2:be:a8:ef:46:b0:8e:6b:76:5c:7d:77:16:a5:e1:a2:8e:
         8d:50:58:db:84:69:9e:bf:f4:f2:b5:a1:13:b6:d6:4b:3a:86:
         9c:f7:f7:0d:e4:e5:1e:b2:c5:5d:37:70:7f:62:95:52:ee:15:
         e9:69:ba:0a:a4:5c:b9:d1:49:13:ca:e1:9a:58:ea:01:60:3d:
         5a:5a:d6:45:5d:74:a4:b7:e7:6f:e1:a6:85:fe:21:d1:a4:ac:
         4b:48:d1:70:93:f5:af:87:cc:4c:ce:ae:6c:58:26:34:51:7e:
         eb:70:aa:1d:b9:7c:1b:12:01:2f:65:72:ff:82:f4:e7:77:3a:
         9d:4a:88:b1:ef:ae:ec:a3:3c:55:d6:e4:47:de:63:40:ba:d4:
         6c:29:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----