Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File:                     h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier:          lxFp2o3WofthNiQgzk+/ps2+9zdqZUQ9xwGT9E7Spts=
Subject key identifier:   2E:77:29:5C:EB:BF:E1:34:AC:7E:0F:FE:74:58:1E:42:23:A4:6F:BC
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer:       /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial:       01962F74F6FDE5FF9F5B4D39F2B7A7749721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number:          120D
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=)
                          2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: HgIRWIBdNMbftWIX/VEbiQ1g2MtYhQPNfwWF3zUkAIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f6:fd:e5:ff:9f:5b:4d:39:f2:b7:a7:74:97:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=2e77295cebbfe134ac7e0ffe74581e4223a46fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:83:09:33:e3:a3:ea:8b:4d:6b:b1:6b:50:
                    52:c3:a7:0a:e4:b0:85:ac:c0:84:e7:28:c4:90:5f:
                    37:12:94:cf:a9:94:da:d7:cc:2c:2b:77:b7:a9:23:
                    cd:58:4a:a9:d0:07:51:cc:02:0f:69:41:8a:42:1a:
                    1e:5a:df:35:8d:d2:e6:49:09:4d:04:e7:63:86:38:
                    cf:bc:a6:4e:b5:05:27:3a:75:ec:fd:7f:46:15:39:
                    2e:f8:55:b7:88:98:35:65:6a:9e:77:74:cc:0d:c2:
                    f2:cb:f2:49:a7:46:6d:31:51:a5:f6:a6:e1:56:41:
                    18:3d:ab:07:ff:35:d9:31:54:44:db:02:2d:44:47:
                    8f:e3:cc:ad:6d:93:c5:58:26:72:e9:36:cd:98:3f:
                    58:8a:6d:5f:20:30:7a:f1:25:1d:6f:d1:af:9b:66:
                    ab:5d:c1:d3:d6:83:fc:85:51:9f:4c:c1:12:a5:c6:
                    72:f8:ee:27:47:5d:d3:0c:28:d4:b9:a0:f8:77:bb:
                    60:65:44:e6:87:79:35:2d:65:ad:bf:8d:26:5b:66:
                    78:11:f0:12:98:6e:e8:11:ae:4d:fb:50:26:ab:25:
                    82:f1:66:49:61:4f:fb:8b:e8:c7:fc:ec:69:e3:a9:
                    5d:54:1f:b9:a7:ae:e8:ab:55:de:ef:ea:08:ef:dd:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:77:29:5C:EB:BF:E1:34:AC:7E:0F:FE:74:58:1E:42:23:A4:6F:BC
            X509v3 Authority Key Identifier:
                keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:54:b2:14:25:f0:4c:f7:5a:be:cd:d7:02:d9:0a:8a:59:
         1c:d1:bc:d9:38:47:30:56:e2:1d:17:6d:0a:12:9c:41:b4:a3:
         cf:85:b6:c0:4c:9c:02:d7:4d:1e:e1:e0:1c:27:d8:a1:99:89:
         57:3c:27:08:60:de:d2:67:23:3c:85:1a:0b:41:97:db:40:c8:
         d5:9f:d4:f2:60:9c:f3:45:7d:01:b3:3d:f6:80:96:92:ae:9d:
         89:30:90:39:40:a3:c5:c6:37:20:f2:c6:73:17:cc:6f:c8:32:
         41:14:94:c4:63:66:01:64:21:81:f3:3c:e0:8a:b3:c8:11:cd:
         b3:32:ae:f1:46:5b:96:38:e4:19:db:02:c9:28:e2:55:78:b4:
         e2:95:3d:65:20:58:b3:96:b9:45:ad:9d:5f:58:95:fb:25:f7:
         4f:79:bd:9e:32:81:ae:c2:f8:ce:47:23:da:a4:c0:0a:c4:73:
         54:bc:28:0c:6d:06:67:12:8b:55:ac:5e:ab:c9:c0:64:99:35:
         e9:b6:45:ce:8b:41:f3:b4:f4:7f:64:22:01:37:2c:2f:fb:91:
         fe:e8:a0:a6:27:d3:d2:41:0c:33:99:b2:4c:a3:27:a4:b2:a6:
         91:ac:0f:25:c4:dc:41:37:80:ea:04:f9:5d:d4:ec:7b:07:11:
         19:10:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----