Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File:                     HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier:          WIHRPrQp4MYP02IHyZPAKqY3eP2Vixzd4tfYgIPqRV0=
Subject key identifier:   B7:99:C8:21:8A:A2:C0:61:86:04:66:9C:3A:7D:E0:38:55:79:CA:6C
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer:       /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial:       01962E987720A9265CF16302CBE66DC33861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number:          120D
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
                          2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: 8JG64Oy6nEYQx2ccw5mQ5zIKJOuKeU40xLyWFIqs0b4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:77:20:a9:26:5c:f1:63:02:cb:e6:6d:c3:38:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=b799c8218aa2c0618604669c3a7de0385579ca6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:1c:bd:7e:2c:ff:e5:9b:b6:e3:22:05:3c:
                    7d:95:78:2c:49:3b:7a:92:56:aa:b6:60:91:c2:57:
                    ee:d2:7d:ce:e8:1b:a4:57:fc:fb:7b:2b:12:68:ca:
                    12:2b:78:e3:7f:fa:6c:a9:47:a8:62:2d:66:cb:75:
                    da:00:bd:c4:2f:2e:5a:2c:ce:a6:22:1a:01:87:5d:
                    ad:36:2f:e0:93:b1:25:e5:7e:87:ad:7c:76:a5:80:
                    51:4d:1f:3d:55:5a:aa:6f:b7:59:89:71:bf:b9:83:
                    75:83:f4:d0:96:fe:a5:b2:2f:00:89:70:c9:ac:42:
                    70:f3:b1:ff:2a:a1:5e:a0:bb:2b:c3:cc:c9:4a:83:
                    fe:a1:e9:67:7c:72:07:90:5a:0a:80:48:c5:30:e7:
                    da:0c:69:24:57:07:b9:e0:b9:b3:d9:15:63:32:0a:
                    22:b3:32:de:9c:c4:4d:10:03:74:db:7c:bb:6a:e1:
                    be:e1:a9:b7:ea:b1:5c:f4:7f:d0:49:c6:a2:2e:03:
                    1e:bb:4d:80:c4:69:b5:b7:72:1f:d9:79:6a:67:4a:
                    5c:fa:2f:fc:8e:1f:93:5c:a5:46:6e:e1:38:a1:3d:
                    22:a7:a2:8f:87:54:a6:e7:09:6b:8d:dd:94:59:73:
                    43:80:11:6e:bf:03:ad:66:be:f9:c7:49:d8:f5:7f:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:99:C8:21:8A:A2:C0:61:86:04:66:9C:3A:7D:E0:38:55:79:CA:6C
            X509v3 Authority Key Identifier:
                keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:77:45:a9:c0:3e:50:1a:fc:46:e5:b6:a0:74:7a:27:9c:
         ab:b2:d7:f8:5b:86:d6:9d:7d:3d:f9:ee:b9:db:ac:db:6b:a6:
         4c:ee:05:0c:4b:a4:fe:a0:ea:69:10:00:8b:47:3f:c9:6b:b9:
         bf:f6:aa:5e:14:75:29:1e:b8:35:7f:d1:7c:c8:56:ca:ae:d6:
         f9:6f:90:32:ee:c5:f1:99:06:98:a5:48:06:90:73:16:a1:32:
         01:8d:e4:1e:c5:8d:11:60:c0:e2:64:29:a3:f9:a0:6d:a0:ef:
         27:4c:b7:76:ef:b7:12:f3:2e:5f:36:87:df:20:60:4d:74:74:
         0c:ac:5f:b8:af:e4:e8:d9:89:2a:ae:dc:06:85:d2:41:85:14:
         c1:e7:3b:23:f5:5c:39:79:a0:5e:0d:d1:4b:27:17:b1:2b:56:
         88:91:d8:8b:9b:3f:29:6b:07:14:17:50:cf:30:e3:d6:ba:ba:
         86:8a:77:fb:ea:74:9c:e6:69:fa:65:5e:59:dd:de:9c:92:44:
         5f:e8:5c:11:c8:9e:8e:4a:c0:bb:87:e5:b3:26:81:1a:c5:80:
         7c:80:eb:57:58:4e:d6:0b:60:ab:22:b4:b5:b4:1d:aa:b8:cd:
         aa:b3:a8:e8:ea:b9:69:cd:62:b0:66:11:16:52:fe:17:93:13:
         5c:9c:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----