Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File:                     H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier:          H/dDdk+McuhaNN7riGzu/9YbybcIw1QQDhrGR7HIVQM=
Subject key identifier:   42:9A:71:37:FE:06:75:8E:91:83:1D:B3:D9:00:E4:B9:C9:61:A8:FC
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer:       /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial:       01962FAB61BA5BF187E54DCA9DB55FAA645E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number:          0BDC
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: BRrb/oB5PVeFnFu3/Hy4SstgNEKYxet576RjlbjKLeM=)
                          2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:ba:5b:f1:87:e5:4d:ca:9d:b5:5f:aa:64:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=429a7137fe06758e91831db3d900e4b9c961a8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:9a:ae:25:24:e7:97:17:bc:52:f2:4f:0d:
                    45:52:0c:56:43:74:1c:22:73:3d:a0:eb:21:1e:78:
                    ed:64:36:42:9c:30:81:17:a9:63:ee:61:87:fa:13:
                    5a:f2:72:79:0a:96:61:08:8e:49:e4:23:b8:a8:56:
                    e7:fd:61:00:4b:92:ac:5b:f5:97:dd:73:a4:7c:46:
                    da:13:5c:74:a6:c3:60:44:4e:2c:8a:72:44:0f:46:
                    21:67:86:43:c8:4b:9d:9e:3f:85:a8:8c:e2:a9:6c:
                    78:1f:0b:4d:4a:16:3a:c6:a6:16:b6:4c:52:97:4d:
                    6e:5a:51:42:8d:68:b5:49:86:01:c8:e8:2b:14:d0:
                    7d:55:f4:8b:1f:ce:ee:a2:ec:47:fa:70:e3:91:3b:
                    38:9c:0e:ba:b3:02:59:ad:32:04:6d:5f:88:62:4d:
                    35:57:64:f2:aa:82:40:73:c4:ab:3e:1d:d8:2c:7e:
                    29:fc:d1:d6:1e:dd:21:ce:19:f0:a1:f2:68:3a:2b:
                    13:6e:e4:43:ae:77:ae:b5:de:f5:52:ec:d1:c2:19:
                    b2:d3:7b:07:a3:c1:46:1b:7d:e7:30:82:dd:90:26:
                    30:f0:fb:38:b4:78:54:52:07:1f:f9:3f:da:86:1b:
                    d2:4b:79:e9:4b:3b:80:84:17:21:3d:8c:c7:b8:1c:
                    64:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:71:37:FE:06:75:8E:91:83:1D:B3:D9:00:E4:B9:C9:61:A8:FC
            X509v3 Authority Key Identifier:
                keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:51:db:09:46:9a:57:d4:c6:fa:75:e2:95:8a:67:96:d8:
         b1:bf:99:02:50:44:08:3b:8b:d0:3a:e7:a4:0d:3c:bf:15:ff:
         ad:8c:3e:e7:79:48:28:c4:0d:18:72:8a:f7:9e:35:91:32:13:
         0b:fc:98:fd:83:c0:60:78:35:f6:b6:28:f5:dc:cf:dc:fb:e3:
         e2:d7:d0:f9:23:fb:18:e6:0d:b5:02:55:ef:d5:39:4b:4d:f4:
         b4:1b:be:19:6f:b6:5f:53:59:c5:40:b0:af:0b:1b:1f:a2:fb:
         7f:c1:da:b5:bd:99:9f:f5:2c:80:df:eb:2f:68:c1:ed:94:40:
         0a:d0:05:87:98:6b:53:2d:60:02:c2:93:3d:ee:c1:ad:d7:79:
         21:c5:de:90:20:ea:b6:a9:9a:c7:02:ac:90:ea:2b:db:ee:8b:
         44:8b:ac:26:a8:20:72:ef:3d:90:01:d8:8c:2f:9d:9b:76:6b:
         6d:d3:9e:0e:de:87:74:11:35:cc:74:18:75:e6:33:de:ea:94:
         79:54:97:9f:d9:be:52:3d:ee:b2:56:41:00:c0:6a:ea:8b:c7:
         7a:89:5a:7e:32:95:b4:11:19:52:46:d3:20:88:47:59:e4:b4:
         ea:60:5d:79:6b:4c:de:97:9d:20:a7:88:70:9e:d7:ff:dc:87:
         1b:09:10:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2G6W/GH5U3KnbVfqmReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0
Mzk5NDEwHhcNMjUwNDEzMTUwMTIyWhcNMjUwNDE0MTUwMTIyWjAzMTEwLwYDVQQD
Eyg0MjlhNzEzN2ZlMDY3NThlOTE4MzFkYjNkOTAwZTRiOWM5NjFhOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKaariUk55cXvFLyTw1FUgxWQ3Qc
InM9oOshHnjtZDZCnDCBF6lj7mGH+hNa8nJ5CpZhCI5J5CO4qFbn/WEAS5KsW/WX
3XOkfEbaE1x0psNgRE4sinJED0YhZ4ZDyEudnj+FqIziqWx4HwtNShY6xqYWtkxS
l01uWlFCjWi1SYYByOgrFNB9VfSLH87uouxH+nDjkTs4nA66swJZrTIEbV+IYk01
V2TyqoJAc8SrPh3YLH4p/NHWHt0hzhnwofJoOisTbuRDrneutd71UuzRwhmy03sH
o8FGG33nMILdkCYw8Ps4tHhUUgcf+T/ahhvSS3npSzuAhBchPYzHuBxkbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKacTf+BnWOkYMds9kA5LnJYaj8MB8GA1UdIwQY
MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt
YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2
LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX5R2wlG
mlfUxvp14pWKZ5bYsb+ZAlBECDuL0DrnpA08vxX/rYw+53lIKMQNGHKK9541kTIT
C/yY/YPAYHg19rYo9dzP3Pvj4tfQ+SP7GOYNtQJV79U5S030tBu+GW+2X1NZxUCw
rwsbH6L7f8Hatb2Zn/UsgN/rL2jB7ZRACtAFh5hrUy1gAsKTPe7Brdd5IcXekCDq
tqmaxwKskOor2+6LRIusJqggcu89kAHYjC+dm3ZrbdOeDt6HdBE1zHQYdeYz3uqU
eVSXn9m+Uj3uslZBAMBq6ovHeolafjKVtBEZUkbTIIhHWeS06mBdeWtM3pedIKeI
cJ7X/9yHGwkQfA==
-----END CERTIFICATE-----