Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File:                     OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier:          GEfYQMTFwUQnqAK92zFH7fZByNDAPlA956qN+LdEzLw=
Subject key identifier:   0E:76:89:F5:75:91:BE:40:13:AA:44:47:7A:54:86:75:EA:00:E7:08
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer:       /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial:       01962E991E9A7A3B2DD48411E757C84B88A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number:          0B80
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
                          2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: h38QbfbihPykt0FeB7Cf8is1qHy7xRmv0ZeQ2zdM+S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1e:9a:7a:3b:2d:d4:84:11:e7:57:c8:4b:88:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389755423f832a528c93136110f0fe4b10453582
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=0e7689f57591be4013aa44477a548675ea00e708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:ee:cf:23:ac:20:fd:ce:35:ae:9e:38:8b:
                    77:f4:39:8e:3d:a7:cc:95:39:f0:78:31:52:ff:0d:
                    e0:75:e5:74:bb:e0:72:f9:ec:60:f3:33:5d:32:fd:
                    74:fb:36:1c:fb:20:09:dc:bf:5c:4d:55:bc:d5:3c:
                    11:fc:06:77:0c:94:db:b5:f0:1b:fb:32:89:20:04:
                    58:9b:51:33:22:c9:c8:7f:6c:70:93:b7:10:f7:9e:
                    89:42:bd:ac:3c:c9:07:24:90:a6:4e:9f:df:07:33:
                    db:56:3b:4b:e3:8c:1e:d5:14:35:8e:cd:47:55:3e:
                    90:43:46:2b:13:04:40:f5:b0:2a:92:e5:1e:bf:41:
                    8d:f1:d9:77:e8:aa:74:22:af:0e:57:f7:f4:77:87:
                    47:a2:21:6a:9a:c2:b9:5d:73:be:4f:55:1e:51:04:
                    e0:fc:a4:9c:f9:83:84:ad:4c:81:3d:0b:7c:74:1a:
                    64:76:44:c7:ba:63:82:66:ec:db:de:b9:de:b8:aa:
                    f4:20:92:5d:ac:94:d6:d6:59:84:f2:cd:fc:99:43:
                    37:3a:ea:d4:9c:f4:8d:8f:1b:ca:24:38:66:bd:0a:
                    ac:75:35:d2:2e:b3:e2:27:bb:3f:77:03:f5:bc:d9:
                    06:6a:15:62:19:98:3e:29:4d:02:58:83:29:b4:ca:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:76:89:F5:75:91:BE:40:13:AA:44:47:7A:54:86:75:EA:00:E7:08
            X509v3 Authority Key Identifier:
                keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:25:e8:b6:dd:04:46:26:3c:aa:16:a2:4f:f5:cd:ef:db:
         41:e9:6a:d2:52:e2:f3:e4:11:1c:94:d6:88:d9:98:af:1b:c2:
         2c:1e:2e:68:4f:f2:d9:6d:80:54:02:ae:4d:24:48:1e:29:8d:
         77:12:7c:13:2e:74:98:e3:d1:00:13:de:06:ff:eb:65:2d:e9:
         81:ab:4a:0c:04:70:93:98:be:1b:50:c9:12:65:5c:28:0a:74:
         2b:99:43:73:2e:8a:26:01:b4:9f:06:3a:b6:a1:88:30:d2:3a:
         c3:02:a8:ec:e7:4c:7b:df:75:d4:97:d4:a1:11:4c:7a:cf:d0:
         72:46:b4:cc:fd:f8:ec:d6:ee:07:31:24:4f:bf:94:c7:c9:88:
         64:5d:2a:bf:7e:d3:b4:47:e7:b3:5e:8a:6f:61:b7:ca:31:8e:
         2d:70:90:15:45:6f:32:20:b9:6a:a4:c2:d7:17:f1:08:11:3e:
         30:87:62:1c:7b:b5:fc:78:ad:50:ee:46:70:93:5e:aa:fe:a9:
         21:dd:bf:78:85:4f:8b:86:30:8a:f0:cd:62:20:12:69:44:4e:
         58:9a:18:5f:d9:4f:2f:f5:9b:fa:fd:cc:74:b8:b4:66:88:db:
         01:26:04:ef:62:ea:38:f2:c5:9f:d8:a2:68:13:99:ba:b4:75:
         e0:83:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----