Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File:                     OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier:          0282slDTPSnEjFxY3AxUMToMdJW10AKpJfdqM8JdrRs=
Subject key identifier:   A1:4E:A4:5A:84:61:F6:79:ED:1D:5D:DA:A6:35:6B:E5:C1:EB:10:89
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer:       /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial:       01962F743F2F4F4AF173BC7F265B949EA83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
                          2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: dq54b4TsYaC1+aA1aJWMytIS4AC/W3Pz7k9cwkpIfgo=)
                          3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3f:2f:4f:4a:f1:73:bc:7f:26:5b:94:9e:a8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=a14ea45a8461f679ed1d5ddaa6356be5c1eb1089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:48:79:50:c4:23:7d:25:90:16:e2:7e:8c:
                    70:51:93:95:47:64:c4:ca:5e:80:86:a6:74:53:be:
                    8e:31:b0:93:4a:cc:b9:36:4d:96:b5:3a:c6:4f:de:
                    0a:d3:64:aa:d8:3b:f1:68:72:2a:1f:ca:8c:5b:56:
                    64:19:ba:27:d9:df:a4:0f:12:eb:16:59:20:52:89:
                    50:5c:56:45:f3:23:ec:08:d0:bd:93:15:ce:f0:37:
                    12:d3:61:65:f8:4f:f2:98:a8:d9:57:a8:7a:8e:91:
                    9f:ef:29:ed:b2:f2:e8:ef:49:65:bb:b0:63:5a:d3:
                    b8:39:2d:bd:8f:6a:df:2a:a3:54:7c:9b:52:af:88:
                    37:a9:dd:6c:e3:89:cb:34:01:c8:d8:21:6b:a2:f6:
                    4f:7a:fd:d9:58:70:5b:42:4c:00:4b:0c:e8:6a:fd:
                    d9:f2:b1:30:aa:5f:24:44:ec:a6:17:36:ef:8b:5b:
                    eb:d7:be:ba:66:d9:55:26:44:6f:c2:b4:b0:73:b3:
                    17:6d:f5:40:61:75:99:c6:65:a4:49:48:f1:f8:15:
                    b1:f3:56:50:7e:84:14:99:83:fb:36:26:68:e7:79:
                    8e:d7:34:ca:0f:10:c3:a7:cf:0c:e9:7c:47:2d:64:
                    40:1a:c9:76:e5:fa:3b:53:dc:e2:37:98:ce:a0:51:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:A4:5A:84:61:F6:79:ED:1D:5D:DA:A6:35:6B:E5:C1:EB:10:89
            X509v3 Authority Key Identifier:
                keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:88:17:53:26:99:19:ff:f1:c1:68:e0:c2:d4:e5:2b:91:
         36:5a:8d:0d:47:d8:64:ab:00:13:50:2b:c4:68:34:cf:1f:7c:
         6a:18:93:cb:85:c0:68:b9:71:08:d3:f2:6f:14:10:fd:6c:bd:
         74:8d:7e:ab:0a:e3:a8:30:1b:df:a1:a3:65:c3:82:8a:e1:e8:
         d0:f7:e4:e1:ac:9d:e9:86:5c:39:8c:06:d7:7c:d9:a6:a3:c0:
         0a:da:5b:80:f0:16:4c:7f:76:b5:8e:41:f4:36:aa:d8:31:35:
         f9:a2:df:c6:fe:c4:f9:00:e8:f9:84:20:a4:1a:e6:26:4d:cd:
         38:34:1b:8d:67:de:30:c5:ba:f3:d9:17:6b:73:f0:02:54:78:
         a7:27:b3:4c:0c:6e:ed:cc:25:ba:d2:c8:80:54:81:a7:55:ba:
         42:30:99:78:61:0a:84:f0:30:5b:ef:4d:0c:56:92:4d:aa:27:
         9e:c9:d0:c1:7d:6d:d0:f9:1f:3d:9a:8e:15:aa:97:1e:fb:5c:
         db:43:fc:11:c9:83:65:81:fb:06:c3:5e:96:09:5a:de:50:b7:
         76:1c:a7:a0:f1:a9:d4:c7:99:00:dd:2d:21:cd:df:40:15:9a:
         f2:ee:1d:67:25:f9:9f:06:96:ff:9d:96:f7:07:0e:fa:8f:16:
         02:b8:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----