Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File:                     Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier:          PZOneZQfmVyjYFKipoBbh8+UQXBxnxIbKw4rZL1g4/o=
Subject key identifier:   A7:C9:C2:07:83:C3:5B:BE:2C:54:5B:E0:40:FB:26:48:27:3D:CE:71
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer:       /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial:       01962F06796A09F829E12AC07A825448B018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number:          057B
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
                          2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: kmbRFRQPORdorW0YDxOZpquuZwHLKii3KKVmIHpyxiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:6a:09:f8:29:e1:2a:c0:7a:82:54:48:b0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=a7c9c20783c35bbe2c545be040fb2648273dce71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:02:32:a9:8c:89:fa:8e:dd:34:e2:9f:1d:
                    a8:f4:dc:5c:a0:15:3e:9b:65:40:e9:d7:0c:db:9c:
                    ed:bc:fd:95:6c:81:8c:11:f1:06:40:77:ce:96:09:
                    b8:15:bf:bd:6f:c3:2c:bf:4b:6b:33:ee:0c:06:7a:
                    6b:20:b5:b8:15:a6:04:97:ad:ab:d7:43:31:bd:9f:
                    b7:cc:50:76:60:ae:7b:cd:11:89:c1:c3:7a:60:94:
                    e7:38:8c:b8:5e:00:0b:58:a3:7d:ae:9f:53:a5:01:
                    f6:db:4f:8a:ef:79:75:46:9b:2d:22:64:a3:00:bb:
                    d3:7d:2d:ca:9f:a7:61:e4:46:17:3d:ad:df:59:31:
                    28:d0:3a:42:b3:9b:1e:8c:f1:cc:8d:53:4c:41:a9:
                    d6:52:61:52:e4:c8:4c:cc:4a:6f:89:15:47:ac:9e:
                    40:87:14:ff:d3:22:84:7e:4a:01:3c:ae:4e:31:6d:
                    de:4e:8f:47:4f:eb:6a:09:6a:c3:6c:6c:77:1b:7b:
                    27:6f:91:85:12:8e:74:bd:43:7e:8d:dc:b7:44:0f:
                    2f:76:cc:b9:c0:72:a4:15:c3:4b:cc:7b:95:e9:64:
                    d5:2e:4d:70:08:8a:8b:a1:eb:6c:77:cc:82:ef:ec:
                    ff:75:03:1f:1e:2d:f3:00:84:6b:d9:31:ce:18:bf:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:C2:07:83:C3:5B:BE:2C:54:5B:E0:40:FB:26:48:27:3D:CE:71
            X509v3 Authority Key Identifier:
                keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ba:0e:c6:33:95:da:d4:c6:ef:1f:39:e9:71:27:2b:f6:e6:
         1a:56:b4:07:5d:ee:e0:e7:26:14:3b:93:57:57:a2:f4:3a:06:
         c6:16:57:a3:cb:6d:39:55:61:c7:4e:b3:ce:54:50:6f:b9:e3:
         7b:db:31:68:45:5d:dd:f3:00:f8:7d:6f:6e:8c:42:ff:5d:da:
         57:0f:36:1e:c3:25:e0:1d:a4:7a:85:f3:8d:e7:67:de:a4:26:
         ab:96:47:b6:47:27:a6:c9:fa:61:c1:c8:5e:5a:55:d5:53:8d:
         5f:90:50:c4:27:d8:37:b4:3d:66:2c:36:6a:5e:c0:8d:a6:de:
         f5:95:83:02:b5:fa:b3:5a:7f:7f:7b:62:e1:d6:b3:3e:64:3b:
         ea:59:9e:65:d2:a9:59:22:7b:d4:14:b5:13:4d:72:2c:19:da:
         0f:f6:89:ab:59:8a:3d:94:48:e6:d3:08:51:cf:01:1b:3b:25:
         95:6b:7f:df:c7:df:62:20:50:ff:db:f2:1c:9d:0e:8e:7d:03:
         89:07:15:87:9c:0d:61:38:22:05:97:1d:45:f6:35:2b:be:c1:
         c5:35:c2:5c:c6:91:d6:cd:4b:b5:6d:50:54:49:06:1b:4f:5e:
         f8:0f:60:77:c9:75:a6:8c:89:1c:fe:e0:6e:40:fc:42:ad:9f:
         c5:2b:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----