Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier:          jjELIyUCEvN1kpesbON8sSUNvQnwHbCFu9+F0/TzE/U=
Subject key identifier:   A6:51:EC:68:34:F3:7D:BF:07:9B:4C:80:95:F9:27:90:04:77:B9:10
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       01962E98EB6865F2796BF631C1F06D6ACA07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number:          07FA
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
                          2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: r6KTwPMn108RHmf3q4HxNVx1sTtdHWhApT2PXQMEkRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:68:65:f2:79:6b:f6:31:c1:f0:6d:6a:ca:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=a651ec6834f37dbf079b4c8095f927900477b910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:22:c5:5c:39:c7:6d:15:f2:ed:ae:b0:31:
                    0e:4d:56:f2:c3:a8:7b:f3:75:f1:a8:83:46:65:76:
                    e1:17:1d:9c:ca:d5:8a:51:99:df:40:0e:f4:6c:27:
                    15:f4:c7:5c:a0:38:0e:89:09:24:11:af:4d:47:6a:
                    ea:a1:34:3b:2e:bf:2e:78:22:8d:f2:67:de:80:c4:
                    d0:d7:b4:ff:ca:60:b7:e6:75:62:ad:99:4f:8e:f6:
                    53:d7:cb:a2:83:36:e5:43:73:eb:4b:ad:2e:cf:97:
                    5b:b2:73:cd:bb:73:c9:ea:86:1b:c1:6a:49:5d:7a:
                    a6:5b:bb:9a:c9:2d:3c:43:25:a6:6e:fd:b8:f2:14:
                    7f:66:c5:d7:e1:32:85:38:5f:96:81:d8:0d:b9:30:
                    00:34:81:bb:4d:0f:8e:83:7f:5e:1a:f6:bb:9b:e4:
                    6e:5d:e8:f6:4c:18:0e:42:b6:55:8d:89:de:1c:75:
                    16:15:03:a1:ad:b9:97:8e:cc:b9:40:59:1b:b1:a2:
                    88:2b:91:d9:34:b5:f4:9e:1e:e6:96:39:94:32:e3:
                    8b:06:3a:5d:d9:bb:e4:16:6b:f4:28:d7:e4:4d:2b:
                    6c:35:97:ef:bc:1c:92:ae:08:79:6d:a2:d7:91:b4:
                    f9:4a:0c:cc:d2:68:7f:95:75:8a:cf:9a:0a:25:35:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:EC:68:34:F3:7D:BF:07:9B:4C:80:95:F9:27:90:04:77:B9:10
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:79:72:43:04:87:e5:3e:5b:87:7b:bd:1f:d2:91:9a:da:7d:
         57:33:6a:d1:7d:ae:c9:42:37:fe:10:4b:e2:ca:50:fb:93:3f:
         fe:6e:6d:5f:6b:0f:cb:92:4c:f1:bc:83:0b:a5:2f:1b:1d:b6:
         55:2e:ef:36:fc:07:31:f8:7d:0d:7b:0e:7d:d4:c1:bb:3a:40:
         c4:f3:45:50:9e:08:91:1b:9b:e7:b1:75:80:a3:43:90:08:72:
         f5:38:bc:0d:0d:eb:37:88:62:20:e2:77:1d:01:31:96:cd:27:
         01:31:4a:10:e7:ac:ec:6d:11:3e:64:cd:15:fd:60:ba:af:5f:
         4e:91:25:c1:ab:e4:3d:32:3b:d1:5c:35:04:88:44:af:20:da:
         5f:6d:bc:4a:4e:ce:8a:5c:9c:9f:69:75:57:a4:e5:e7:1a:1a:
         b6:dd:d5:90:b9:e3:ed:72:10:f9:b7:45:51:45:29:6f:21:6e:
         91:fe:49:52:a5:2c:e7:26:5c:2d:5d:e1:e9:eb:4f:4a:51:d8:
         b9:af:c7:af:fe:c3:1c:b3:0f:7f:8a:5b:7c:3e:36:42:d1:ef:
         f1:c2:a1:6f:af:db:44:f3:a8:0a:59:50:1e:f8:83:85:c7:8a:
         ce:d2:d7:e6:de:69:60:97:5f:1f:2b:1d:40:e5:a3:39:3b:86:
         37:a3:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----