Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File:                     Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier:          CX+rD745EADTXha9IiIMKquIj5B6fhVLy6/T9d0FS8Y=
Subject key identifier:   B6:FB:EA:7D:E6:12:F7:EE:6B:B3:98:F2:3B:A5:BE:22:A4:2A:4B:FB
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer:       /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial:       01962F3DD2F170957E96FACDF85215A4270A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number:          1004
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: oqYw6ZXAQ9j6zYZNgCTu53u/h+SugruFktkvEgrwyW0=)
                          2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
                          3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:f1:70:95:7e:96:fa:cd:f8:52:15:a4:27:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=b6fbea7de612f7ee6bb398f23ba5be22a42a4bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:e1:6e:d5:64:0d:ea:c2:3c:2d:e6:4f:dd:
                    43:d5:38:4c:11:5b:4c:71:ec:17:11:5c:32:46:44:
                    94:5f:86:1f:be:e9:99:72:d3:58:98:e3:4a:9c:ea:
                    48:df:db:08:de:52:48:80:9e:50:e4:f2:f5:80:30:
                    03:67:2e:bf:3e:13:04:d7:d4:6f:31:dc:d0:60:8e:
                    d2:b7:a7:57:5f:87:67:60:9b:7e:7a:da:d4:b3:6d:
                    dc:c0:14:09:0a:51:3e:2c:43:15:dd:7f:59:54:75:
                    d2:68:5d:b0:70:66:67:2c:31:73:2a:e7:88:64:07:
                    d2:ad:97:1f:66:65:f2:8c:62:d5:ae:67:75:2d:21:
                    cc:c8:e3:30:76:ff:8c:88:e3:fd:78:b9:7a:a3:b1:
                    fa:b4:0f:24:3e:08:f2:c0:66:f0:34:71:a6:ff:63:
                    7e:55:74:45:7f:b5:3c:e4:65:e7:10:49:5b:03:22:
                    0c:bd:cd:9a:59:50:77:81:14:c1:7c:c1:a3:04:17:
                    ac:87:e4:d4:fe:9d:c2:87:19:30:9f:ec:9f:dc:d9:
                    a6:6d:60:ed:25:2e:a5:b9:30:be:99:07:83:80:4c:
                    00:b0:60:15:0c:00:87:95:a1:83:50:3a:ea:e2:8b:
                    d6:4a:00:4f:8e:00:f1:1f:0e:d0:8d:b0:96:92:81:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FB:EA:7D:E6:12:F7:EE:6B:B3:98:F2:3B:A5:BE:22:A4:2A:4B:FB
            X509v3 Authority Key Identifier:
                keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:55:3c:de:78:0b:cd:a6:e5:5c:cb:ef:d2:19:fb:44:85:38:
         b6:94:34:fb:19:60:cf:e3:e7:de:65:cb:d7:c2:d8:7d:e7:a4:
         2b:3f:6f:d5:98:41:b3:27:d0:9f:c1:f5:76:0d:2a:bf:d7:29:
         84:ec:16:56:c3:41:1f:37:00:39:a7:a7:c6:b6:7e:cb:b7:77:
         18:19:6d:92:e9:f6:ba:3f:c7:a3:08:91:de:8e:8a:37:59:bb:
         ed:10:92:52:89:24:cb:6b:20:a1:66:0d:3c:ef:5a:18:a0:0a:
         69:b0:10:62:55:da:40:cf:0f:57:e7:30:61:2d:b7:98:c8:12:
         c0:1a:f0:c0:5b:d9:64:e6:65:96:08:38:44:ab:03:29:0f:bf:
         c1:f5:0c:94:6e:dd:ba:1d:9b:af:3a:74:14:a4:61:c6:23:5d:
         ca:80:3a:37:bb:40:0b:46:67:df:88:94:c4:f9:0d:00:25:f1:
         56:e0:c0:8f:2f:82:40:9a:c7:6f:08:c6:da:84:fd:06:73:29:
         21:65:fd:be:99:17:db:c9:5d:3f:8e:2d:82:9f:19:a9:20:12:
         a1:6e:ab:f7:53:82:71:a4:e6:ed:bb:4c:89:d6:d0:b2:ab:3c:
         6c:0b:9b:c2:e7:9b:80:00:02:ac:b1:da:80:8c:ca:44:e6:1c:
         8b:55:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----