Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
File:                     0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json)
Hash identifier:          a4rFegUjERh81XZ8evptWf3V7ygRDe8EMh10govrxL8=
Subject key identifier:   80:3F:C6:D1:D7:AB:17:9B:79:FC:3E:B7:87:5A:6D:7F:F3:E1:69:95
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       01962F07430FE76F3047FB5A9A5C50991994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
Manifest number:          1543
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: Hk7VN/Yd6nZ2Tj9f3G58k5+9gO5C3hHFPqnAp0ObnU0=)
                          2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=)
                          3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=)
                          4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=)
                          5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=)
                          6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=)
                          7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=)
                          8: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=)
                          9: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=)
                          10: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=)
                          11: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=)
                          12: KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa (hash: s7jbrR/tYQZH56SCp6DZfaO9EeWTAe129IHD4mNW6qQ=)
                          13: Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa (hash: 7Jrxd3qwLriiBdyBMLT8U/Q6YrwgSz/r4ZzkDOjpxzQ=)
                          14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=)
                          15: OJRKFrAGazOzJ40gSGoefwXYAYk.roa (hash: PYjRffHLN9ZeR3WG+z3kihL+ssNvEEg9dtGsRN0k3fI=)
                          16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=)
                          17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=)
                          18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=)
                          19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=)
                          20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=)
                          21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=)
                          22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=)
                          23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=)
                          24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=)
                          25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=)
                          26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=)
                          27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=)
                          28: ps4Flj1BkuW7sLiIgaxaOcmRga0.roa (hash: z/miJktON8vN7qBgG9XGiJDAvY3R13S1nLYmw94yLfM=)
                          29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=)
                          30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=)
                          31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=)
                          32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=)
                          33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=)
                          34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:43:0f:e7:6f:30:47:fb:5a:9a:5c:50:99:19:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=803fc6d1d7ab179b79fc3eb7875a6d7ff3e16995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:3d:07:0c:49:3f:92:36:a5:21:41:7c:f5:
                    81:cc:b8:ca:1c:80:b0:6e:f1:d3:d6:67:2f:79:74:
                    fd:c9:d6:c2:1e:43:8a:ea:95:22:46:e6:6e:80:fd:
                    b4:98:92:50:8a:de:25:12:71:9a:14:a5:02:c8:4c:
                    53:74:03:c8:c4:ba:92:7d:b9:0c:69:47:d0:5d:e5:
                    21:c0:58:eb:7d:f3:ce:c5:98:ad:4f:40:18:fb:1b:
                    17:3c:5b:10:80:03:1c:ad:02:78:ad:35:6c:ba:f7:
                    c1:bf:83:e6:e9:fc:a9:4e:90:17:d1:d0:a0:ae:2d:
                    58:70:08:af:27:06:80:f4:4e:1f:c4:70:00:fb:45:
                    ba:0d:e7:1d:1c:8a:ab:1e:f7:f4:79:41:80:f4:54:
                    52:a8:3c:24:07:1a:fa:e3:5d:1f:a0:bf:59:7a:cd:
                    c7:e7:71:90:31:03:4e:96:da:2a:e2:d2:2d:95:4e:
                    f1:4d:11:4a:ff:dd:28:d7:86:ab:7e:19:c3:eb:f5:
                    52:e6:66:3a:2b:fc:e9:96:97:59:8a:dd:95:ea:89:
                    e1:3c:04:46:d6:50:20:d5:30:1c:d9:68:a5:cb:e6:
                    68:24:71:a1:04:5f:f5:c9:54:14:ce:06:81:bf:0a:
                    80:6d:68:5c:9a:ea:84:1e:1f:f1:70:c5:b0:49:ed:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:C6:D1:D7:AB:17:9B:79:FC:3E:B7:87:5A:6D:7F:F3:E1:69:95
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7a:14:04:98:18:ec:9a:23:a1:42:0a:d6:9f:ac:fe:d3:2f:
         07:b6:cb:9f:e4:c7:30:aa:1c:2f:d5:ae:79:ba:29:69:c7:36:
         ef:59:91:a6:67:ac:09:d2:e0:aa:95:e8:cb:6f:ec:e6:8e:de:
         74:8e:1d:7f:c5:36:84:b8:60:c5:54:94:07:61:49:6c:95:df:
         03:b6:33:15:37:5a:20:ab:ea:f7:8a:eb:6d:98:9c:e3:c3:11:
         ee:de:29:18:e0:6f:e0:e0:a9:97:b0:13:af:22:41:98:08:cd:
         1b:48:74:ed:1d:38:53:7d:d6:5f:f8:83:03:ad:fe:75:44:37:
         28:77:84:b4:6e:03:e7:8b:47:cc:7e:96:38:f2:be:f4:47:17:
         8b:0a:b7:13:2c:b0:ca:68:69:0d:26:ef:cb:75:47:db:05:d7:
         ea:ec:98:dc:0b:f6:0e:c5:be:53:35:db:cb:46:7b:04:c7:72:
         ad:8e:9e:e8:49:b6:b5:12:9b:5b:3a:ac:7b:03:12:94:88:3e:
         bd:fb:b5:14:77:eb:0a:6d:ff:24:c1:90:c0:24:41:94:4f:49:
         24:ab:98:f0:d4:e4:85:9b:de:c8:c7:a2:e4:5d:2d:3c:96:69:
         98:a0:78:ad:d9:f7:dc:75:34:7f:75:46:3a:0e:ec:fd:24:8c:
         3e:7e:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----