Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File:                     o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier:          SYAsXTcJ+2RNcXc9DzacUv9CHncNb85URF62cvgj2kw=
Subject key identifier:   D8:19:90:B7:23:D3:76:7B:EF:AA:1F:29:31:B8:23:6E:75:B7:5A:74
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer:       /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial:       01962DF3E152E9FE84DD7E428AE1FEB230F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number:          0653
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (hash: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=)
                          2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: hr2BHu/oaA5oA/wDD6rnO4TTdTlcbDnSGLFs/b1TKy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:52:e9:fe:84:dd:7e:42:8a:e1:fe:b2:30:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=d81990b723d3767befaa1f2931b8236e75b75a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:ba:4b:f0:9c:7b:ad:ee:f2:1e:a7:04:65:
                    24:20:6b:c7:d1:ee:62:77:9e:8f:19:2e:83:1d:3f:
                    ac:23:4e:e5:5f:99:60:fb:9b:7e:65:73:81:09:38:
                    40:94:2f:b1:d5:af:5a:10:1a:2d:5f:bf:20:e0:4e:
                    9b:2b:a0:9b:9c:a7:8f:44:55:97:20:91:39:55:2a:
                    51:f9:a2:cc:04:cb:21:d3:33:1e:e9:76:24:58:44:
                    4a:c9:3c:42:fa:95:13:f7:1d:84:e2:49:02:91:fe:
                    be:b3:7b:16:15:a7:16:4e:88:00:2c:fa:0a:4c:71:
                    84:d9:75:c4:f7:7c:d2:47:e1:45:31:8e:f2:a0:8e:
                    d0:e9:eb:54:d1:d8:a8:e0:9f:ca:38:96:8a:73:50:
                    e5:ad:7c:58:ee:ea:e4:ac:06:e4:0c:c0:e8:39:b8:
                    67:bb:62:67:48:af:2b:87:bd:e0:cb:bc:3d:68:a4:
                    e8:6c:5a:7f:49:14:29:0d:df:f4:5c:f9:47:05:81:
                    9a:86:d5:3e:20:0f:66:15:f5:83:d8:c8:4a:0e:c9:
                    2d:1b:bd:e6:8a:fa:8f:d5:bf:da:cc:8c:a3:92:c9:
                    7c:8b:2d:27:5f:d5:6d:95:01:3e:74:ab:9b:ba:72:
                    9e:29:58:ab:0b:d0:1f:7d:e0:fc:bf:11:60:27:0d:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:19:90:B7:23:D3:76:7B:EF:AA:1F:29:31:B8:23:6E:75:B7:5A:74
            X509v3 Authority Key Identifier:
                keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:09:6e:0b:3a:b1:f9:63:ad:47:7e:04:45:e6:4a:5d:49:1e:
         12:62:05:38:89:b0:cb:4c:c5:1e:9d:a5:7a:c9:5f:7c:00:cc:
         2c:37:a3:fe:13:6d:59:de:ab:aa:1c:d5:ac:81:c5:85:05:d6:
         1e:a0:c9:4e:66:9a:ee:49:b4:08:b2:b7:48:69:71:ac:cb:e3:
         80:a8:77:78:f2:ff:2b:05:d0:6e:e1:03:d0:c2:6e:39:60:70:
         3c:ed:96:cd:7f:a6:48:b6:de:81:c4:11:7d:e2:df:17:8d:2d:
         0f:fa:82:a7:33:bf:f1:c8:02:6c:04:b9:77:29:ef:61:08:77:
         c9:70:a2:43:59:9e:49:52:90:ae:19:a2:01:a4:66:87:f5:21:
         3e:a9:4e:16:4b:bb:c9:12:4e:8f:ea:99:d5:1d:35:dd:ba:f5:
         46:37:b1:b9:48:27:47:78:09:17:d4:9d:74:6d:79:50:ff:9d:
         f5:65:b0:fd:09:5c:e2:1d:cc:f2:04:5f:ca:89:d5:d7:31:8b:
         24:6b:12:9a:c6:e9:bd:33:0a:ff:b1:14:e5:cf:0d:4d:1c:75:
         07:ec:8e:f6:b3:88:88:5f:58:88:f6:d3:fe:67:fd:8c:e8:b2:
         e0:52:1d:96:6c:9d:31:41:01:88:27:74:35:4f:8f:a8:28:1c:
         36:9e:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----