Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File:                     0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier:          H7f7JN27aZuw691aXjqWzCIRzt+FxVHU+dcmuUx0RpE=
Subject key identifier:   8D:18:9D:27:CC:02:22:4E:8E:13:46:78:A4:2C:A0:BC:4B:B3:98:E4
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer:       /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial:       01962E61C33FFF406551F70C0A67B807D99B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number:          088B
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: 8gl3oKqqUAMyrYoaGvRTh+SEzZtYUtUZ/mM0rt/eomI=)
                          2: 6bHyeOEehy6z9J4cC74z4dwZNZM.roa (hash: 7kMISVfjOHaOb0aCdvVe/tfRxRtprtZa+5IWqp1XpCc=)
                          3: 6eoj3HW_5TpgQ42VV6W-eRXWJRY.roa (hash: Xh4eenBYRtemEIOmT0DFdL/CXzx7ji9eMIWiGg2yj/0=)
                          4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
                          5: CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa (hash: 5ONFhg1QF43WPksHVSGaT4R+hEeMibeNW7Yj6pnVbKM=)
                          6: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
                          7: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
                          8: xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa (hash: 43WOZICTIxPYcL8p7aD3gmAQjRkX3uJE7dpL5l+yfxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:3f:ff:40:65:51:f7:0c:0a:67:b8:07:d9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=8d189d27cc02224e8e134678a42ca0bc4bb398e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:99:d6:4c:d1:ca:46:5d:96:36:23:97:f9:2d:
                    4f:57:24:05:8c:01:0d:86:36:44:6d:a3:29:40:20:
                    ef:aa:29:a6:3c:3b:f8:9b:01:09:a8:8d:ef:42:1a:
                    83:95:a4:2d:25:92:b6:1e:57:6b:92:c2:75:d3:95:
                    d2:98:43:89:ec:4b:1b:4e:5e:2d:ae:22:10:92:b0:
                    bc:ee:3d:a2:6b:d2:29:d4:75:38:94:6a:7d:57:9e:
                    fd:8d:cf:3a:a4:43:ae:2d:9a:5a:84:01:3a:94:9e:
                    56:5b:f9:31:4b:71:c6:9c:05:95:f3:ac:e9:79:6d:
                    e7:21:84:24:7b:26:78:77:68:c7:f3:19:a7:a1:7c:
                    8d:68:46:78:b7:a1:10:6b:9f:54:ed:79:a3:4e:c3:
                    f1:cb:b0:8a:85:78:84:42:96:51:e8:1f:6d:bf:eb:
                    85:e6:1a:0c:01:82:7b:cf:31:88:95:8b:3f:06:7b:
                    f9:40:4e:a2:c3:1a:ad:eb:d5:d3:ab:3c:35:3a:15:
                    52:fc:89:54:98:a0:92:5d:dd:7e:0e:69:d5:4c:a8:
                    90:b8:11:b4:6c:f8:40:cf:4d:7f:1d:21:42:9e:eb:
                    68:5b:3a:4f:a5:6c:91:21:b2:5e:85:80:e6:5b:78:
                    5e:00:24:6b:07:6f:02:c6:45:89:eb:df:46:75:e1:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:18:9D:27:CC:02:22:4E:8E:13:46:78:A4:2C:A0:BC:4B:B3:98:E4
            X509v3 Authority Key Identifier:
                keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:54:4e:3f:b5:69:eb:27:45:a3:e3:a2:7b:bf:bd:a8:99:
         fb:72:d5:be:54:3a:91:ed:5e:ed:a0:08:91:d3:c1:cc:4c:5b:
         75:3b:a0:24:2b:e3:16:77:54:0f:42:4e:53:07:25:6f:3c:6f:
         42:97:51:fb:cf:79:f1:98:b1:a0:82:af:08:c9:d2:8c:6b:14:
         b1:47:1b:1b:0c:20:1f:88:40:a8:c7:34:36:d5:75:50:0f:93:
         b6:e5:17:ea:eb:91:51:ca:2c:7a:92:04:28:d2:e9:5a:e0:5f:
         d1:d6:c6:94:2f:48:51:1d:cd:a7:16:32:09:8e:39:a5:ac:7d:
         c4:66:76:f0:c6:b0:49:05:03:18:c4:59:9b:de:62:99:98:20:
         68:46:fe:4c:97:8b:61:92:57:8c:d6:0f:3c:c9:32:90:94:da:
         4a:32:0f:46:78:2a:d2:4c:c0:76:f2:c9:ef:0e:d4:20:2a:7a:
         d1:58:06:c1:ad:ff:84:8d:f2:60:40:b5:c3:b9:76:7b:96:ac:
         31:4c:58:5d:f9:66:00:34:2f:a3:bc:6a:db:46:45:33:1f:1c:
         de:08:ff:99:5e:df:08:1e:c1:da:c3:88:c5:1d:d5:41:fd:a8:
         41:bb:27:d2:0c:fa:8f:78:bd:46:f9:8c:6a:98:d6:1b:4b:81:
         42:ff:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----