Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File:                     8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier:          qbF8jcQc+2qMblFZimwgnbUWC4GCchIoo4Zi3RuvLmw=
Subject key identifier:   4D:C5:F7:A2:DB:3F:42:10:18:23:E7:15:1E:28:08:76:EB:3E:FB:AC
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer:       /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial:       01962ECF80AEE77FE7D98C1FA89B46E0E8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number:          03FA
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
                          2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: OwcGKONkNb8M6svv+YYBPKQuXHIDeymlZtn5rItR83w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:80:ae:e7:7f:e7:d9:8c:1f:a8:9b:46:e0:e8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=4dc5f7a2db3f42101823e7151e280876eb3efbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:f3:6d:cd:e7:30:d4:26:55:38:b4:80:14:
                    e1:86:7c:36:dd:cc:13:ed:22:ca:16:17:21:17:35:
                    43:c3:ef:da:3b:7e:05:2c:bf:08:34:45:51:44:4e:
                    8c:2e:68:80:c5:52:e0:73:f1:be:d0:82:fd:1b:20:
                    6b:9b:25:7d:bc:fb:5b:51:b1:c4:a4:80:c5:d0:a2:
                    72:13:fd:05:ab:98:ad:c9:30:cc:bb:75:91:60:f0:
                    67:9f:82:ef:2f:ed:a8:86:69:d2:25:49:8d:70:24:
                    38:36:93:00:4c:1e:b5:d1:1a:a2:12:35:fe:95:d9:
                    5a:a9:5b:75:5f:02:d8:1f:17:37:f3:61:56:b4:a6:
                    99:d3:22:2c:19:61:43:49:b3:1a:2d:ca:d9:68:c7:
                    a3:b1:8b:cf:3a:35:83:d8:69:70:82:04:a5:2d:4c:
                    e2:b1:dc:ba:f6:81:5b:4e:5c:f1:29:98:88:80:04:
                    57:6b:b3:94:8d:fc:0d:a3:a1:00:3a:76:11:c5:b9:
                    da:8b:a0:8c:6a:9e:45:6f:ad:d8:6f:5d:16:a7:1a:
                    f0:64:f8:8e:ca:7c:a3:13:6e:1a:03:f8:48:3c:a8:
                    15:df:67:e9:c5:22:de:1f:53:e1:7c:35:a3:67:60:
                    0b:bc:17:d8:3e:a6:02:b7:83:bd:fb:d0:b0:39:96:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C5:F7:A2:DB:3F:42:10:18:23:E7:15:1E:28:08:76:EB:3E:FB:AC
            X509v3 Authority Key Identifier:
                keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:a1:2a:04:35:ed:d2:dd:a7:17:da:05:d0:be:7a:e2:2a:
         02:76:43:d0:3c:a0:ab:e3:97:dc:80:db:84:c9:7a:2d:ee:db:
         c7:75:7c:80:b6:fc:ab:7f:79:ff:65:e4:7e:0c:dc:a3:de:13:
         5f:06:d9:a8:2e:3e:f9:68:5d:e6:4a:3a:08:46:e2:54:44:7d:
         2c:fe:d8:e7:76:22:23:c2:e1:57:e5:d4:aa:89:c8:af:38:35:
         df:a5:17:0c:8d:41:5f:d1:25:bf:e3:e6:31:6c:11:f7:55:d5:
         96:96:6f:35:22:52:04:fb:bb:4c:ac:6e:31:e9:b0:34:ed:de:
         5f:07:d0:b9:fa:db:a3:c0:10:87:1f:bc:c4:9e:60:a6:f8:f1:
         74:d2:9a:e5:cd:a2:c9:40:cb:7c:7f:6e:9b:06:76:ee:c4:19:
         84:a6:5b:f6:04:ce:d5:e5:78:30:66:bc:a8:c0:19:4c:cd:b7:
         15:dd:e8:57:e0:47:54:6a:8a:b5:89:8e:5c:fa:0d:98:b1:2a:
         78:bb:dd:3e:86:f5:89:4e:01:e9:ba:25:2a:65:6d:87:ea:2e:
         5a:ad:1c:f6:c3:d4:a2:60:cc:70:2e:14:a7:52:64:7c:cf:37:
         83:07:3d:6c:4e:f7:e0:2f:6f:46:4d:a9:55:29:30:79:be:71:
         a0:dd:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----