Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
File:                     OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json)
Hash identifier:          Hg0lDtz1XqwsbcmepCs0VG+Ov3/IfoTH1pV4ELdIRzw=
Subject key identifier:   7B:A5:03:81:DC:77:20:3E:C3:A2:C1:13:C7:5D:7D:0E:74:D1:BC:51
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Certificate issuer:       /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial:       01962F068CFEC87A9FE42EC828D3D79309D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
Manifest number:          1450
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: KBKNSo54C-UjedwUMFB9xB41sio.roa (hash: EOnhGNtgG2NlhPSt6QkJfBoHbT869foRrNlEhdeoqqA=)
                          2: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: xkCLZTWJA5F8guz2BcZMgRQYY9dq2LOLS6nW/LBqABw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8c:fe:c8:7a:9f:e4:2e:c8:28:d3:d7:93:09:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=7ba50381dc77203ec3a2c113c75d7d0e74d1bc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:52:4a:f0:c3:0d:75:42:b1:c0:3a:7e:07:
                    f5:fc:06:f3:b5:e3:a7:29:a3:84:92:72:3f:ed:0a:
                    43:6a:7e:77:3a:a3:03:14:7a:eb:46:59:25:a7:1e:
                    a6:96:6d:01:e8:59:87:7d:a5:41:c0:38:2a:56:b7:
                    cf:84:60:9f:ef:a1:2b:75:8a:03:d4:70:de:1c:26:
                    94:78:b7:ee:48:11:28:d4:86:90:65:5c:9a:65:74:
                    d0:17:49:72:7e:10:f5:e9:90:69:6b:fc:b7:66:ab:
                    e1:4f:a5:27:a2:4d:be:63:2b:5d:68:8c:ad:77:3f:
                    99:c0:90:2a:a8:3d:62:24:8b:14:d4:69:54:42:99:
                    82:88:0a:a5:42:47:b7:35:bc:3a:f0:f1:83:ae:15:
                    0a:71:56:e7:72:4d:80:a0:be:c2:38:79:91:06:e3:
                    8a:a7:d0:63:0a:ef:26:bb:60:49:cb:78:bd:80:77:
                    0c:b7:90:fb:fc:58:b9:39:14:38:87:33:1f:35:c4:
                    de:ed:1f:7c:72:92:7c:b8:63:46:c2:1b:f6:84:ed:
                    d9:1d:e9:19:ef:9c:4a:8c:80:29:da:77:78:60:9b:
                    bb:e1:a4:5e:b5:bb:1d:50:ab:de:0b:b3:82:70:e2:
                    f1:b7:61:ce:a2:c3:53:b6:2f:67:6f:47:d9:93:8f:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:03:81:DC:77:20:3E:C3:A2:C1:13:C7:5D:7D:0E:74:D1:BC:51
            X509v3 Authority Key Identifier:
                keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:2e:6d:1f:af:c6:87:85:69:8f:f9:8e:52:ae:99:30:ec:
         b3:c2:3d:d0:4f:46:76:d9:3d:7a:a0:d0:3e:3e:29:ef:86:f7:
         a5:93:02:79:34:7a:6a:f1:75:08:4d:3a:c6:90:46:64:08:19:
         0a:dc:0f:54:ad:fd:11:c6:2c:c8:08:8f:44:e8:69:17:8d:b9:
         f8:6a:83:06:92:d1:17:1f:97:8c:4a:4e:d1:f4:00:f6:63:ec:
         8f:e6:b8:6a:ba:71:aa:d9:eb:88:b8:6f:da:86:d8:76:c6:cb:
         bf:d9:d0:30:20:6f:e0:28:49:36:c2:4d:c0:3c:e5:27:eb:97:
         9f:4e:26:6e:0b:df:91:ff:95:cc:53:ac:81:07:88:76:c1:39:
         bd:3e:29:e8:92:78:fb:61:91:54:c8:7c:2c:a0:36:b1:66:f8:
         31:25:41:07:6d:1e:77:20:8f:7e:94:ae:d9:93:08:db:08:9d:
         db:3c:d9:bf:cb:cf:ed:0f:79:03:53:aa:4c:36:27:0d:84:7f:
         5c:f0:fc:e0:97:b6:d7:93:1a:5f:ec:00:3e:1f:ee:35:6d:bf:
         bd:c6:be:1e:01:d0:6a:11:f4:3d:7e:88:e5:41:7d:d9:d8:c7:
         f3:96:d2:b5:c0:6d:1f:a2:85:22:06:b1:2a:5c:41:14:56:5f:
         bc:79:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----