Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File:                     Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier:          ox53SWX2nwJkcdWkXOo2cHjytlWGUx4W5nb8bpZDrXk=
Subject key identifier:   3C:63:EB:70:05:C3:C1:CB:C2:86:20:70:EA:4A:1F:9D:F4:81:4D:66
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer:       /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial:       01962E6176040C56E45285B77E7068C6A7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number:          0EC6
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: WymcBjOO61BljAyCo1xRyWPlTzxkyQllDZNZYS/R3EY=)
                          2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:76:04:0c:56:e4:52:85:b7:7e:70:68:c6:a7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=3c63eb7005c3c1cbc2862070ea4a1f9df4814d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:81:bd:7e:bb:81:73:10:ff:41:e9:ac:6d:
                    2c:f5:ef:3d:f4:e4:61:b6:0e:ab:82:ba:d2:95:a7:
                    65:80:88:90:21:3d:a7:00:fa:39:25:f7:cd:ca:4f:
                    da:15:99:bb:83:b7:51:e9:b9:a4:34:09:a7:dd:7e:
                    b7:fb:83:07:47:d0:10:c4:b8:12:31:fd:a4:25:81:
                    6c:cd:82:f3:27:b7:8d:06:56:53:40:7d:e2:a7:c2:
                    99:0f:79:02:15:01:b1:68:d0:16:96:39:49:ef:46:
                    ae:50:65:32:85:c4:6e:b8:22:cd:04:e9:7e:86:bf:
                    e8:02:5c:96:50:7d:d2:8d:5c:df:ac:64:82:c3:4f:
                    1a:db:f8:70:84:84:bd:9e:ef:f1:80:17:85:73:ba:
                    13:83:38:8f:84:40:6d:eb:0c:64:ae:10:64:12:45:
                    86:78:af:a2:e5:c9:55:d2:7b:bf:6d:51:9f:f1:13:
                    bb:85:58:9a:c8:90:3b:54:cc:fc:5b:47:90:62:39:
                    f1:5a:41:6e:8e:1a:cc:de:6f:75:04:cc:4d:5d:44:
                    49:98:0e:a4:69:46:b6:b2:93:33:75:e6:9c:a1:00:
                    a5:bd:de:71:87:ac:25:e1:2f:d0:71:51:41:81:00:
                    c8:72:68:2c:8e:31:75:c0:6e:14:bc:88:ab:f6:45:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:63:EB:70:05:C3:C1:CB:C2:86:20:70:EA:4A:1F:9D:F4:81:4D:66
            X509v3 Authority Key Identifier:
                keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:21:15:84:66:09:21:eb:a4:c4:0c:bf:39:e2:fc:41:79:01:
         3c:fd:a4:10:da:eb:35:d9:20:cf:d7:ea:66:d6:d8:f3:f4:e6:
         9d:79:70:de:78:84:1d:5f:1d:b8:87:20:fe:4d:bb:b5:a5:5e:
         42:af:c1:b5:63:77:29:b8:65:dc:9b:4e:c7:b7:d0:b5:9a:5e:
         bf:5b:f5:35:5d:b5:e3:0b:55:a1:f7:2a:d1:83:b2:74:9b:fc:
         1f:85:79:22:52:fe:f8:1a:85:28:64:9f:a5:6b:00:67:ef:95:
         4d:bf:f8:1a:4d:10:a0:86:f0:45:f1:6b:37:3f:22:91:f9:e1:
         ce:82:f0:be:60:b1:02:99:02:02:86:19:86:cb:d3:84:ac:44:
         1c:02:97:ac:c0:47:79:c8:82:69:cc:ab:93:42:80:97:c9:a0:
         fb:a5:bd:9e:f9:f1:27:3a:72:74:3d:14:1e:4d:77:52:c0:4d:
         aa:26:ed:e7:7a:be:57:e6:dd:34:55:0f:b7:c0:4d:01:a1:8a:
         2b:50:b7:23:75:d9:f8:f9:bf:5b:64:ad:55:ec:40:87:04:06:
         df:8a:e8:4a:f4:4c:8f:73:50:0a:a8:08:0b:f8:12:a5:02:8b:
         19:28:8c:4c:00:30:5d:9e:08:c6:2a:eb:a6:32:1a:9d:6d:64:
         ff:79:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----