Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File:                     dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier:          JK85oCYPXhFIP3qF0FC2n8LuuOkpixHRgD24aH9VRKc=
Subject key identifier:   CA:B8:8A:64:53:C0:C0:36:06:D7:A5:AC:7D:32:87:95:A9:2B:CC:78
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer:       /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial:       01962F3D5B22544491A8F5E9EF2DCEAC97C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: ycYxl1T6VFdWsBfqi9hxuPuaF/27R9yJ5CU0RelLfEs=)
                          2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5b:22:54:44:91:a8:f5:e9:ef:2d:ce:ac:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=cab88a6453c0c03606d7a5ac7d328795a92bcc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:2a:97:e1:19:c9:0b:9a:5e:b6:93:a7:59:
                    3a:c5:78:e3:cf:c2:c9:9b:7f:22:64:af:6c:d4:a4:
                    78:6a:80:65:65:b2:8e:07:df:94:c4:d4:9a:a8:d8:
                    c2:b2:1c:c1:2e:49:e6:46:c9:96:75:45:20:86:e5:
                    a4:aa:24:8e:47:62:66:17:b1:35:2b:c6:39:7e:cb:
                    69:6f:df:d6:75:8a:0b:ee:f8:29:39:f5:8e:04:8b:
                    c3:a2:44:fd:bd:25:24:56:99:37:55:07:86:20:52:
                    e6:f2:ed:02:b6:e7:a0:10:1f:59:1b:1e:a1:b2:54:
                    32:3a:cb:ab:20:e7:9d:80:a8:60:d9:ea:c1:9f:ad:
                    79:f0:0b:7f:a3:00:6e:e7:59:a7:2c:a9:36:d7:7e:
                    34:69:15:0e:a3:07:34:c9:3d:20:97:80:06:74:d6:
                    8c:59:3b:93:6d:c7:0e:c9:17:55:28:cb:b2:ee:c2:
                    73:e2:b4:6c:af:a3:c7:9e:5a:66:b2:c7:3c:a5:5e:
                    27:2c:67:96:b5:cb:68:de:ac:f9:75:06:30:a2:0e:
                    4c:8d:01:42:5b:5c:d2:e1:6a:40:b1:f0:2a:39:c8:
                    bc:c5:80:1b:e7:6b:3f:57:48:30:5f:4c:c9:cf:f2:
                    8e:08:28:40:f4:e3:4e:6d:c0:e4:a1:19:61:dc:5c:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B8:8A:64:53:C0:C0:36:06:D7:A5:AC:7D:32:87:95:A9:2B:CC:78
            X509v3 Authority Key Identifier:
                keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:68:f0:a3:30:37:4c:56:ee:17:84:d9:6f:15:57:45:ab:0b:
         15:60:87:d8:c9:15:d8:53:63:11:89:84:70:31:12:57:e9:31:
         bc:5d:cf:80:a3:39:55:22:9f:3a:6b:9a:4a:a7:78:e1:31:87:
         fc:83:a5:f8:f6:aa:d3:fe:97:cd:b4:27:4f:4d:a9:66:45:97:
         ce:76:f4:a6:c7:fd:b1:b1:ca:fd:bb:d6:03:cd:42:df:8e:24:
         61:a5:73:32:bb:77:1d:a9:fb:4d:28:68:dd:ba:2f:a7:b5:8f:
         84:98:db:f1:4c:09:43:34:15:16:d5:5e:9c:eb:bb:f1:f6:15:
         7b:76:76:ba:c0:b4:11:44:52:2d:51:f6:89:6b:48:73:d6:ad:
         47:eb:2d:c9:86:2c:bd:ad:54:1b:90:30:1c:4d:b3:a7:d5:3d:
         c5:c9:5d:92:1e:8c:99:53:35:80:ed:d7:e1:ae:0d:b6:ef:dc:
         7d:b1:54:f5:97:82:db:4b:cb:44:68:3a:ef:ca:8f:89:60:29:
         fe:30:c6:45:7f:a2:81:b2:3b:04:0c:90:e5:e9:ce:51:5a:32:
         a0:b2:94:22:0c:f8:c4:e0:a8:a4:d0:b1:4c:70:52:da:55:3e:
         f5:2a:ed:1f:ab:f6:f4:2b:8d:83:3f:60:40:44:9d:cf:2c:5c:
         e0:bf:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----