Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File:                     Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier:          i5nx7/jh3rH9BJiihfcKdLt2Iev0kEI6zpzk5g7PS8g=
Subject key identifier:   68:54:3C:47:5C:91:AF:D2:4B:6C:0B:56:59:01:E5:1B:27:C4:C4:EF
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer:       /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial:       01962F3DCCA984A5CCB23544F46AE206A10C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number:          0882
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
                          2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: x2fiPrZNbMQhhRiErP3zEUwQsI8FfOXearWCIXpa4Ak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:a9:84:a5:cc:b2:35:44:f4:6a:e2:06:a1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=68543c475c91afd24b6c0b565901e51b27c4c4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cc:a8:05:02:22:75:6b:77:c4:27:46:ef:22:
                    9e:08:58:b9:8d:9a:24:1b:eb:1d:1c:43:c2:b6:0b:
                    7e:6c:24:ed:78:d5:f3:6b:ab:ab:3b:77:03:9a:47:
                    30:f4:7b:27:c4:8a:62:22:21:5d:17:96:7c:ca:06:
                    c7:bc:a7:95:a8:fb:b6:60:97:c7:bb:00:59:cb:06:
                    06:78:7c:9e:5f:e5:4f:ff:07:52:79:0a:dc:de:5d:
                    d2:71:30:16:3b:46:f2:8d:7a:da:ee:7c:84:ac:7c:
                    34:f5:29:f5:5b:ea:96:ba:04:0d:c8:1c:43:35:63:
                    12:62:32:b1:d9:86:ee:e9:51:fd:85:56:97:99:8f:
                    b2:30:b9:4b:b5:31:e8:1b:87:dd:b5:02:01:da:23:
                    41:27:bf:8f:51:83:ad:51:12:8a:dc:ef:a3:43:2b:
                    f9:85:74:e9:c8:92:30:57:99:40:c7:28:dc:56:03:
                    39:c8:ce:06:87:fd:69:4c:1e:38:31:ca:94:f0:8f:
                    2e:14:40:4d:4f:de:ec:92:c9:89:c4:7f:e8:4d:b9:
                    c0:05:c7:e0:55:3c:a5:7c:62:17:ef:bd:09:a9:6e:
                    22:36:4c:5f:0f:a6:a8:2e:cd:0a:4b:68:a7:3a:25:
                    00:99:b3:4d:63:9b:1d:5c:f9:fc:a6:60:57:75:a6:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:3C:47:5C:91:AF:D2:4B:6C:0B:56:59:01:E5:1B:27:C4:C4:EF
            X509v3 Authority Key Identifier:
                keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e8:0f:43:8e:18:ec:f1:0c:03:b2:ce:fa:17:7f:39:3d:c5:
         e9:69:ce:06:08:aa:11:6a:9f:3d:2a:b8:35:94:96:c7:9e:95:
         a5:04:31:37:41:e2:e8:f1:09:6a:df:70:25:9f:d0:c0:d6:05:
         37:25:6f:3c:cb:60:ac:96:54:05:3d:f0:97:12:26:36:82:72:
         da:ec:7c:7a:d8:cd:40:47:de:1e:ac:cf:79:02:7e:c0:55:ca:
         f1:84:72:09:4f:26:d7:2b:16:3a:ac:21:a7:16:db:b3:77:00:
         c9:40:8c:29:c8:41:39:d1:65:10:86:b5:ed:d4:4f:74:f5:45:
         fe:66:cd:35:6a:84:02:12:3d:2f:e3:0d:38:7f:bf:a9:7e:3a:
         c7:e3:27:9e:70:57:35:f6:71:9f:d0:40:d0:9d:59:fc:f3:fb:
         77:b2:ec:d7:db:e6:b1:d0:e3:20:2b:eb:db:41:e5:b6:8e:4a:
         11:f9:2f:6a:51:e0:aa:53:57:14:5a:81:1d:67:c3:ee:e9:e4:
         84:69:5f:e6:b6:f9:15:ea:cb:f0:5b:9b:d3:59:ff:65:44:6e:
         86:30:2e:b3:07:b2:ec:db:1e:aa:c8:2e:97:a3:e6:47:8f:ab:
         28:38:f0:27:ec:d0:90:45:7a:59:92:4d:88:89:fc:94:e5:8d:
         ab:fe:50:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcyphKXMsjVE9GriBqEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMmVhYWQ3YTg3MDY2MTVkMWM4NDM2ZGNlMDE5NTQ5NWYy
MTRhODcwHhcNMjUwNDEzMTMwMTQxWhcNMjUwNDE0MTMwMTQxWjAzMTEwLwYDVQQD
Eyg2ODU0M2M0NzVjOTFhZmQyNGI2YzBiNTY1OTAxZTUxYjI3YzRjNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9syoBQIidWt3xCdG7yKeCFi5jZok
G+sdHEPCtgt+bCTteNXza6urO3cDmkcw9HsnxIpiIiFdF5Z8ygbHvKeVqPu2YJfH
uwBZywYGeHyeX+VP/wdSeQrc3l3ScTAWO0byjXra7nyErHw09Sn1W+qWugQNyBxD
NWMSYjKx2Ybu6VH9hVaXmY+yMLlLtTHoG4fdtQIB2iNBJ7+PUYOtURKK3O+jQyv5
hXTpyJIwV5lAxyjcVgM5yM4Gh/1pTB44McqU8I8uFEBNT97sksmJxH/oTbnABcfg
VTylfGIX770JqW4iNkxfD6aoLs0KS2inOiUAmbNNY5sdXPn8pmBXdaabRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhUPEdcka/SS2wLVlkB5RsnxMTvMB8GA1UdIwQY
MBaAFB4uqteocGYV0chDbc4BlUlfIUqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYt
MmM5OGYxN2I4ZWIzLzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYtMmM5OGYxN2I4ZWIz
LzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFegPQ44Y
7PEMA7LO+hd/OT3F6WnOBgiqEWqfPSq4NZSWx56VpQQxN0Hi6PEJat9wJZ/QwNYF
NyVvPMtgrJZUBT3wlxImNoJy2ux8etjNQEfeHqzPeQJ+wFXK8YRyCU8m1ysWOqwh
pxbbs3cAyUCMKchBOdFlEIa17dRPdPVF/mbNNWqEAhI9L+MNOH+/qX46x+MnnnBX
NfZxn9BA0J1Z/PP7d7Ls19vmsdDjICvr20Hlto5KEfkvalHgqlNXFFqBHWfD7unk
hGlf5rb5FerL8Fub01n/ZURuhjAuswey7Nseqsgul6PmR4+rKDjwJ+zQkEV6WZJN
iIn8lOWNq/5Q+g==
-----END CERTIFICATE-----