Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
File:                     HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft (raw, json)
Hash identifier:          DiPY2fHmRUuOOnd29cpgNvVBfyRSZNUZep6cBVneVJE=
Subject key identifier:   7D:07:4A:4C:5E:86:BA:99:C3:78:79:0E:2F:DE:0E:95:25:9D:6E:FB
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Certificate issuer:       /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial:       01962F3D71D0823C80606B9E6A89A7A1BF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
Manifest number:          0604
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (hash: N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=)
                          2: HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl (hash: ZZ58Ol0fk0EgwCul0Nv1VlFlqh2/uXnzcC3DskV70aY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:71:d0:82:3c:80:60:6b:9e:6a:89:a7:a1:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=7d074a4c5e86ba99c378790e2fde0e95259d6efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:98:2d:f0:f5:93:f1:b4:fc:38:1d:ca:3b:
                    eb:dc:b0:d2:b8:7a:7e:4b:ba:4c:70:b2:20:c8:86:
                    cd:a2:8f:2c:cb:7c:b6:ee:b9:73:16:aa:c7:ca:f1:
                    49:96:3c:5e:97:a3:64:e4:ba:c3:d4:9f:59:af:31:
                    2f:a2:5c:92:c6:4b:39:01:36:c2:fa:76:21:9c:19:
                    88:b2:4d:84:fa:d4:0c:b3:46:30:ad:54:83:da:48:
                    c5:d4:15:ad:12:ec:61:4c:09:0f:bb:81:fa:ec:01:
                    eb:84:ba:20:70:db:35:66:d5:17:78:a1:a0:90:9a:
                    ca:90:b4:a0:44:9e:9a:a4:6b:a7:c3:1c:57:76:5c:
                    53:bb:73:1d:32:6c:9c:e7:66:d4:10:58:ea:63:3e:
                    2c:d7:03:29:b7:89:81:5c:b5:d7:7a:9b:42:9e:88:
                    03:1f:da:b8:f4:6d:fd:13:01:44:94:f3:61:d0:91:
                    33:5f:3f:79:f6:de:6b:21:02:c1:32:cd:a2:47:ee:
                    3d:5d:53:68:0c:0a:4b:ce:44:02:4e:63:68:2d:30:
                    14:7a:28:87:4f:9b:d7:f2:ab:31:bc:ff:7f:90:a5:
                    2b:4e:aa:ca:c7:5a:aa:c2:46:e8:54:22:38:e8:5e:
                    9a:d8:87:50:1b:95:99:5f:84:28:02:f3:3d:e0:54:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:07:4A:4C:5E:86:BA:99:C3:78:79:0E:2F:DE:0E:95:25:9D:6E:FB
            X509v3 Authority Key Identifier:
                keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:1c:33:91:6b:ac:1a:9f:b3:ea:cb:8d:c9:9f:bc:e6:a4:
         9e:b7:fd:1a:d5:f9:84:39:17:2c:64:67:e4:f0:f8:1b:08:69:
         1c:7d:f4:0e:e9:35:aa:1b:5d:19:e0:bf:a5:a0:6e:d0:1a:a7:
         37:16:9a:73:57:d7:8a:a3:55:e7:50:28:2d:da:f4:dc:ca:f9:
         6c:b0:e5:56:9f:ec:d9:38:ba:8c:87:9a:31:1a:e3:93:61:d6:
         51:d9:b1:fa:2c:7f:1b:1d:c1:04:33:84:58:f3:3f:f7:99:fc:
         e0:58:b8:f4:86:39:83:55:22:39:66:da:02:4d:bc:39:a9:cd:
         1a:2e:04:4a:a8:7e:b1:38:c7:e0:85:e0:e0:6b:d6:a6:48:65:
         fd:30:b4:00:48:d1:2b:d9:64:1e:bb:0d:e5:b8:8d:e0:f8:97:
         ea:6e:e4:17:81:8a:17:8e:8e:bf:24:58:fd:81:99:38:9e:fc:
         fa:53:65:5a:d4:dd:e2:57:69:b0:52:f0:16:3f:d4:52:79:e3:
         cf:17:74:c7:e3:a9:c5:08:96:c8:7a:6b:89:f9:41:67:f0:e5:
         58:c9:84:16:67:d5:22:14:14:4c:19:31:25:19:61:ad:de:12:
         9a:c4:07:ae:e2:52:6c:a8:e2:2d:90:19:34:4d:6b:ff:5c:1a:
         37:05:41:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXHQgjyAYGueaomnob8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2I2NGQ5NWY2MTMxNjgyYjk5MDVjNDQwYTc4NWE2MGE4
YWM4YjgwHhcNMjUwNDEzMTMwMTE3WhcNMjUwNDE0MTMwMTE3WjAzMTEwLwYDVQQD
Eyg3ZDA3NGE0YzVlODZiYTk5YzM3ODc5MGUyZmRlMGU5NTI1OWQ2ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKYLfD1k/G0/Dgdyjvr3LDSuHp+
S7pMcLIgyIbNoo8sy3y27rlzFqrHyvFJljxel6Nk5LrD1J9ZrzEvolySxks5ATbC
+nYhnBmIsk2E+tQMs0YwrVSD2kjF1BWtEuxhTAkPu4H67AHrhLogcNs1ZtUXeKGg
kJrKkLSgRJ6apGunwxxXdlxTu3MdMmyc52bUEFjqYz4s1wMpt4mBXLXXeptCnogD
H9q49G39EwFElPNh0JEzXz959t5rIQLBMs2iR+49XVNoDApLzkQCTmNoLTAUeiiH
T5vX8qsxvP9/kKUrTqrKx1qqwkboVCI46F6a2IdQG5WZX4QoAvM94FRLdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0HSkxehrqZw3h5Di/eDpUlnW77MB8GA1UdIwQY
MBaAFB07ZNlfYTFoK5kFxECnhaYKisi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMt
NjE1Y2IzNzJlMDc3LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMtNjE1Y2IzNzJlMDc3
LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx4cM5Fr
rBqfs+rLjcmfvOaknrf9GtX5hDkXLGRn5PD4GwhpHH30Duk1qhtdGeC/paBu0Bqn
Nxaac1fXiqNV51AoLdr03Mr5bLDlVp/s2Ti6jIeaMRrjk2HWUdmx+ix/Gx3BBDOE
WPM/95n84Fi49IY5g1UiOWbaAk28OanNGi4ESqh+sTjH4IXg4GvWpkhl/TC0AEjR
K9lkHrsN5biN4PiX6m7kF4GKF46OvyRY/YGZOJ78+lNlWtTd4ldpsFLwFj/UUnnj
zxd0x+OpxQiWyHpriflBZ/DlWMmEFmfVIhQUTBkxJRlhrd4SmsQHruJSbKjiLZAZ
NE1r/1waNwVBLQ==
-----END CERTIFICATE-----