Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File:                     THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier:          XUReptFTOgwjjLnHMC7Gbo/1kXvm2OZnEmhGS0x6sVw=
Subject key identifier:   EA:88:AB:E4:1F:89:8E:F3:12:02:76:DB:BE:2E:67:1D:14:71:30:AB
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       01962DF4589F5CDB42371907F9E0BA3B32DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=)
                          2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=)
                          3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=)
                          4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=)
                          5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=)
                          6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=)
                          7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=)
                          8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=)
                          9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=)
                          10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=)
                          11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=)
                          12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=)
                          13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: 9E+yXApSQ9fAT/6tRspL5RhLjaEBKH5CiNICzpmj/TE=)
                          14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=)
                          15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=)
                          16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=)
                          17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=)
                          18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=)
                          19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=)
                          20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=)
                          21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=)
                          22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=)
                          23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=)
                          24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=)
                          25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=)
                          26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:58:9f:5c:db:42:37:19:07:f9:e0:ba:3b:32:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=ea88abe41f898ef3120276dbbe2e671d147130ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:95:0e:de:11:ef:e1:88:d8:24:81:0f:06:
                    7a:7a:db:78:56:d2:89:87:ea:42:2b:a0:8c:67:63:
                    36:03:24:37:e6:09:2f:82:76:0c:46:d3:b5:fe:12:
                    37:1a:d7:92:00:16:2a:b5:d9:a9:11:e3:84:77:00:
                    cc:87:df:58:a8:01:73:90:91:ee:f1:a3:47:a6:29:
                    0f:2b:ee:86:d6:11:9c:ad:0d:9f:49:f1:81:01:69:
                    87:04:c8:ef:0e:4d:69:e9:7e:d5:9e:57:86:57:17:
                    af:40:6d:f6:40:70:86:5e:88:83:5c:8d:cb:91:9d:
                    9e:5d:a1:52:5a:18:ba:57:e6:71:f7:7a:45:3c:92:
                    a5:76:ec:9b:db:03:65:47:44:04:8c:ae:17:5e:e6:
                    ee:50:64:09:ce:5c:bd:fd:dd:59:de:88:e9:d7:dd:
                    77:da:3a:d0:05:d7:8c:74:58:c5:d0:ab:e2:6a:a7:
                    ec:61:ec:f6:a7:e7:a0:9f:00:39:36:aa:05:36:50:
                    42:22:b8:a5:66:9f:ac:c8:1e:33:3c:07:f7:d7:68:
                    cf:dc:13:ed:c8:d5:f6:f8:1f:7e:fd:d8:24:d5:04:
                    57:14:26:ad:b1:2d:df:b4:69:42:2a:fe:35:b5:3c:
                    ce:8a:94:a4:cb:6c:32:4b:15:3a:2c:51:17:bc:1a:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:88:AB:E4:1F:89:8E:F3:12:02:76:DB:BE:2E:67:1D:14:71:30:AB
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:97:8d:6d:cd:b5:98:48:76:12:83:86:93:a4:00:f7:ef:45:
         1c:2c:0e:79:3a:56:c4:f7:e7:61:0f:c9:9c:1e:d2:86:94:d9:
         2a:9f:70:e3:68:77:5d:fa:29:7e:55:fd:2a:bc:77:8b:db:27:
         46:1a:7e:68:63:8a:3a:67:19:2b:f8:74:ee:5c:ff:3f:d4:b6:
         1f:22:0b:a1:ba:99:e3:cb:3e:69:0a:07:ed:60:62:fb:62:5d:
         80:03:72:9b:b6:ce:3e:11:1b:fd:23:da:68:57:52:cf:62:42:
         c6:3c:64:09:0e:ff:55:30:32:51:80:cc:06:d0:17:ab:4b:b7:
         ff:01:ba:08:8f:91:d1:f2:3f:99:09:e8:45:88:3d:14:31:40:
         7d:9d:ac:d4:f2:2b:d8:0e:4d:c1:64:1a:67:05:aa:11:c0:36:
         7d:aa:35:b0:cb:1c:bc:ae:f0:be:dc:65:8d:77:67:61:9f:5c:
         2a:ae:98:36:5f:61:9e:dc:c6:fd:57:ba:74:0d:d1:23:99:5c:
         ad:f8:73:10:03:9c:ab:84:eb:6a:a7:e8:5e:0d:ea:13:4a:ef:
         af:6e:00:a2:eb:56:33:09:89:02:be:9d:1a:b5:95:e8:a2:24:
         4e:0f:f1:c9:e3:7e:65:0f:91:28:b2:35:43:48:8c:47:0f:47:
         9e:e7:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----