Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File:                     OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier:          ndSnZfS74t2LqnKJ23Z3aLxEJFHicl5wg5eQGdjVtug=
Subject key identifier:   5A:22:D4:1A:D1:F0:6B:AE:74:6D:D3:05:4E:47:29:65:2B:2E:D7:8F
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       01962ECF87E2CFBD3D25C10A6FA9E1DAFC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number:          01EA
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: 3qaAKakIMsPQPGc4UUY39x2O6NBNWKVq9Rpsrxg2gEg=)
                          2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:87:e2:cf:bd:3d:25:c1:0a:6f:a9:e1:da:fc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=5a22d41ad1f06bae746dd3054e4729652b2ed78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:12:94:18:00:e1:03:d4:4b:2a:4b:1c:f3:
                    48:3e:a8:06:2a:6a:3e:e1:d0:4e:f2:0d:28:00:f1:
                    34:a4:75:69:1f:7d:5e:5d:36:bc:c6:9e:6c:49:bc:
                    69:40:ab:9c:a4:c3:95:2a:b4:0d:91:35:ef:98:bc:
                    92:1b:0b:45:d8:db:1f:4e:d3:97:a2:e0:a4:bf:d2:
                    28:96:ac:b3:56:c8:9a:c9:11:b0:f5:d1:c2:71:41:
                    f8:a7:84:b8:0e:3f:03:08:58:85:6b:c4:9f:c8:ad:
                    3a:c2:f1:06:4c:11:e7:f8:e8:4f:11:eb:54:e0:0b:
                    84:6c:0e:41:ff:7e:a0:84:26:ed:15:b6:49:c7:87:
                    ce:39:4f:fb:ec:22:ad:81:10:ab:6f:0f:a6:ef:c0:
                    7c:80:26:a5:b9:43:57:df:6d:95:44:76:d9:09:4f:
                    ba:72:87:b8:db:61:e6:99:c6:2b:71:c6:70:ce:1d:
                    ac:2f:b6:2b:09:5a:b2:ce:0e:a8:be:a7:05:e4:39:
                    52:73:91:f6:16:ad:cd:a9:c2:64:5f:ab:a3:0c:34:
                    53:e8:fc:81:20:60:3d:f0:b5:3e:fb:c6:65:79:58:
                    a7:b4:35:7f:81:55:b2:67:c9:ac:3a:ba:25:a2:df:
                    cf:a4:d3:0b:ff:45:cb:48:09:e7:f1:a2:d4:9b:f3:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:D4:1A:D1:F0:6B:AE:74:6D:D3:05:4E:47:29:65:2B:2E:D7:8F
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b3:cd:a1:10:53:93:fd:c4:e9:bd:1c:52:37:69:61:8c:69:
         20:49:a3:a4:10:52:86:f1:89:55:f7:33:a2:06:42:bf:15:8a:
         5a:c6:de:b5:4e:27:fb:9a:72:32:1b:e2:40:18:fe:09:aa:e7:
         e3:5e:db:f8:99:94:2f:0c:66:23:b4:88:64:d1:f4:22:d5:94:
         bf:2c:18:73:f1:b5:12:9c:a6:2b:3c:6a:83:6d:76:83:c0:4d:
         8e:1a:21:53:ed:34:9d:01:1d:b1:09:f5:2f:dd:19:56:61:ee:
         a9:22:c6:63:ef:9d:1b:0f:00:c6:6f:58:5d:92:98:2a:b0:ef:
         f1:d9:98:80:90:8b:3b:a8:cf:8b:5e:38:85:c6:48:50:b7:ea:
         f4:e8:8c:32:df:d6:aa:8f:53:40:14:38:9e:da:2e:39:5b:39:
         f8:45:8c:8f:c8:a5:ed:01:a3:6e:f5:b9:08:92:88:b0:00:94:
         02:a9:aa:12:32:a5:19:54:32:86:e7:49:18:a4:c5:9e:e9:96:
         90:ea:02:b6:94:e2:17:e3:b2:7e:93:1e:1a:db:e5:da:ab:2b:
         e7:c8:bc:79:87:5c:ed:69:c0:46:58:91:41:a2:04:62:b6:72:
         a4:3a:f2:69:99:39:aa:fd:8f:c3:b9:7b:a6:92:4a:ed:c6:30:
         cc:68:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----