Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          BxMFDCQqq5XNJQb1A4HXC3IM9eRMIw8ua2AG/z53gd8=
Subject key identifier:   5B:CE:0E:24:74:00:5F:D2:B7:52:48:C1:BF:BD:7A:B2:B5:21:40:AB
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       01962F74EF5EB9A463997693C970B4F8930C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 7aUz8499DPhigJrtymvFDvH_yp8.roa (hash: XTyGxDVpkkql4iOBZC2KvGPinizfN4vZAGbc34EqO8o=)
                          2: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: 2Wo6ErI4zceA6qAiCYkrXCceFlifjgzLQpSfyFsOXCY=)
                          3: bAq7NCQg3KQUq0C73n9DTh9N3QA.roa (hash: pzC3spTIvf8gdOkRG+uQC8E+FO/P4+4NR9s5ZCQt3sM=)
                          4: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (hash: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=)
                          5: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (hash: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=)
                          6: qV3R0UAizgijs5QCSxdT_ZxyeJU.roa (hash: jWqqT/TB6ljo6j5Y6hMA8Ua3/FJYmLx0V80plcSr/6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ef:5e:b9:a4:63:99:76:93:c9:70:b4:f8:93:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=5bce0e2474005fd2b75248c1bfbd7ab2b52140ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:2d:1b:25:d3:4b:c1:45:bd:ef:7e:c2:64:
                    0d:77:be:44:ab:94:9a:c7:8d:7b:35:bf:ff:e9:35:
                    80:6f:10:85:d0:47:9f:17:c1:1a:28:5f:e9:5a:16:
                    6d:05:40:91:b7:75:41:b0:fc:50:e0:85:a8:42:ef:
                    df:13:9b:68:7f:c4:c5:57:b1:bb:01:91:c3:a3:ac:
                    d2:fa:95:a8:d9:af:e4:28:d5:4c:ff:e0:1f:fd:e8:
                    d4:36:fa:88:1c:4b:20:25:06:a7:48:23:ea:1c:8d:
                    8c:ed:bb:78:79:4b:ee:38:cb:7c:30:ea:db:48:7d:
                    6d:07:7f:11:a3:9b:60:b3:38:98:60:4f:04:a3:15:
                    9c:27:71:c1:fe:ef:90:ed:f8:dd:e0:61:4a:6c:26:
                    ce:35:b8:dd:14:7b:fc:f2:6e:08:44:a2:cb:27:1c:
                    38:3f:87:9a:a6:ad:2f:29:36:69:92:07:60:ab:ba:
                    5e:ca:09:56:70:b5:69:10:77:42:69:8d:be:d4:26:
                    26:ee:3a:aa:a9:ac:74:a6:f6:6e:3e:5f:65:14:73:
                    ba:ff:fa:14:96:8d:b8:f4:e1:f9:32:5c:37:bd:f0:
                    b4:9d:ab:50:44:e4:dd:92:18:6c:a5:14:04:68:ac:
                    4f:be:6f:15:dd:92:c3:01:e4:fc:a3:d7:ef:75:23:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CE:0E:24:74:00:5F:D2:B7:52:48:C1:BF:BD:7A:B2:B5:21:40:AB
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:56:2b:36:49:0b:af:ef:f1:aa:0f:a0:89:9f:4c:37:95:73:
         6a:5f:97:73:9f:f1:bc:bf:aa:c5:d9:87:67:48:b3:c1:12:b2:
         f7:88:69:e7:5e:93:32:1a:5b:69:66:e4:16:8e:68:07:95:ee:
         41:ed:ba:56:7f:33:c7:1c:d4:d1:3c:14:1d:ae:af:bd:18:91:
         73:ab:99:29:e2:c7:65:b3:67:42:94:eb:2d:65:77:92:2b:4a:
         56:a9:dc:d6:3e:c1:a1:bd:bf:9d:e9:15:53:a5:7f:60:e8:49:
         75:ff:3a:2c:19:7a:6c:47:86:cf:b1:2c:23:04:33:39:88:af:
         2b:53:cd:9b:67:92:3d:55:3c:e0:31:18:73:8d:ce:99:da:09:
         47:86:12:ce:d5:4b:4d:1b:89:95:ce:d1:ae:14:31:cf:8e:00:
         19:39:4d:4d:ac:c5:2e:7a:de:b3:6e:2d:fd:c5:fd:b4:71:31:
         57:40:9d:50:ac:ea:44:e2:1a:2f:6f:79:63:5a:2e:33:ee:3b:
         85:ae:37:8b:a3:e2:18:e4:29:ce:eb:d8:d9:1e:77:89:44:ea:
         4e:54:bb:26:26:51:fd:12:88:04:56:d8:5d:25:6b:1d:fe:f4:
         0c:27:af:b1:b7:f7:00:ce:e5:d1:dd:54:ae:fe:58:23:2a:0a:
         6d:9a:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----