Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File:                     hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier:          sZRaev2mR/70GZFB7umIUurHj+ly1a2+Xa+LHbYdBdI=
Subject key identifier:   0A:C5:E4:CF:74:69:BA:3E:05:E8:72:F2:C8:5E:AB:22:F6:DA:83:A6
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer:       /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial:       01962F748F5404DEA4D5752A33A2472D5F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number:          0DEA
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
                          2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: hUCY9E1zxKcWQ5cuo7ZIfp1tRkuJ8F/srd8OhrIsANM=)
                          3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:54:04:de:a4:d5:75:2a:33:a2:47:2d:5f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=0ac5e4cf7469ba3e05e872f2c85eab22f6da83a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:58:98:1d:6b:e1:bf:00:0d:88:9e:36:d5:
                    ac:bb:83:fe:1b:9d:fb:49:aa:84:a5:7e:8a:1c:27:
                    08:56:3f:3e:54:35:2d:54:35:ce:ee:68:00:30:a1:
                    e4:ce:4a:5d:bd:bb:4f:41:07:81:a3:0e:18:f5:4b:
                    57:6f:57:a4:32:59:69:6e:6f:d9:91:02:a2:dd:6e:
                    31:d2:07:f2:86:71:35:02:41:e9:54:62:cf:45:e5:
                    47:73:03:3c:bf:c7:17:dc:b7:1b:4d:d0:15:a3:61:
                    6e:a5:9c:b5:88:e6:50:3d:59:e6:8a:82:6d:3a:2d:
                    95:83:db:ed:43:b9:d4:05:b1:7f:a8:88:73:c7:ae:
                    ba:81:54:69:55:c5:7b:99:48:ef:75:7b:78:8b:4a:
                    7e:7c:85:9f:af:47:7e:49:34:a5:7c:42:f5:7d:4a:
                    9e:2b:2c:6e:4d:7b:43:4a:bb:1c:41:e6:73:b4:41:
                    a2:fe:16:b0:ab:c3:7f:11:29:cd:68:91:d7:7c:0e:
                    9a:d8:d0:66:ce:56:7d:e6:ef:fc:0c:db:f3:80:52:
                    a7:e1:ce:ab:85:f7:2e:70:8f:21:98:af:dc:dd:3d:
                    f1:67:5f:d6:af:2b:0b:c0:df:91:c4:0d:f3:ed:04:
                    6e:ab:1a:a3:63:32:87:ff:a2:99:ef:95:4e:d4:ed:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:E4:CF:74:69:BA:3E:05:E8:72:F2:C8:5E:AB:22:F6:DA:83:A6
            X509v3 Authority Key Identifier:
                keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:0f:e0:82:5a:66:0e:ad:6b:1a:66:11:2d:d1:20:85:1c:
         7b:7c:ef:f9:b3:73:39:68:d3:39:7a:6f:15:3c:65:00:ee:75:
         08:d5:87:91:04:2c:8b:80:0d:f4:c1:6b:2f:32:69:44:c3:66:
         4e:4f:b6:10:41:67:79:eb:75:00:6b:42:70:5f:e0:92:2a:14:
         94:e5:b7:8e:86:b0:46:11:d8:21:44:07:f7:54:22:ec:e3:05:
         e6:ed:75:f1:71:97:42:35:93:10:ce:01:af:29:49:70:8a:7b:
         a8:f0:c1:b6:c5:d0:bd:84:7b:ea:63:87:ee:90:d3:d3:45:e6:
         c8:c1:26:7e:12:22:cb:e5:9b:f1:c2:08:7d:f6:0b:a8:06:b5:
         92:66:71:68:c6:bc:28:9c:5f:ff:0e:38:eb:e6:a9:ca:a5:32:
         18:a7:a2:cf:cd:ce:fc:ae:ee:6d:c1:0c:09:6f:0a:4f:be:fb:
         0f:74:2b:04:e6:84:5a:94:f9:cb:1c:59:2f:6c:6b:3d:f1:b3:
         75:51:80:f3:d6:76:81:41:50:e6:a4:45:d9:de:46:dc:8c:93:
         25:bd:19:cb:e9:ee:4a:27:e9:9a:74:e9:b8:db:90:01:40:08:
         b0:75:b7:a4:b0:2f:c8:25:de:b3:f1:72:96:dd:a2:f7:89:e7:
         95:85:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----