Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          RAYu9ht3BNfeFo3nwp2YEp2knqUasKKmx8l8Wc5IK90=
Subject key identifier:   3E:77:FC:32:71:79:8F:09:A3:2E:A2:0A:E5:19:4B:93:3C:58:68:40
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       01962E2B148594BDAA0D5288DDDBC753EDFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          0FE8
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: hXQbLWH8gkNm8ytYXE0r765f08Q6oHzs3PXh2giwC2A=)
                          2: jIFgf1lBNqu6NES_hhmJCRkx6WU.roa (hash: b4SkMZ2qfegq/aAVSnzcin5lHV5SoqB7AozMTZpTRfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:85:94:bd:aa:0d:52:88:dd:db:c7:53:ed:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=3e77fc3271798f09a32ea20ae5194b933c586840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:8e:28:c3:74:93:b1:d8:fe:76:47:36:ee:
                    bc:04:9e:c4:c9:17:27:07:c6:56:52:e4:14:2c:e7:
                    d9:7c:ac:a1:94:42:b1:91:2d:12:21:12:03:9b:61:
                    fd:29:e3:3e:ef:ab:2f:b6:ea:5a:ab:b3:f1:ac:42:
                    e1:da:36:e5:02:03:a0:42:9b:01:97:59:10:d8:64:
                    ca:62:b0:8e:48:97:fe:d9:c7:f6:89:0b:b3:78:4c:
                    8d:2f:b5:0d:b7:db:eb:0b:06:02:42:6e:5d:b6:14:
                    1e:57:ba:43:c7:63:ca:21:4c:a4:0d:01:16:3a:c4:
                    3c:52:ec:3f:0c:36:2b:96:27:95:fa:f1:4c:ed:9b:
                    45:b1:92:55:c7:64:e9:cb:a0:d9:47:91:9d:f4:1e:
                    15:4b:9b:02:dc:42:ce:59:68:71:29:d6:58:9b:e8:
                    06:76:52:1b:b7:77:6d:54:d7:20:ea:fa:49:6e:14:
                    8d:ad:55:e4:55:c0:43:7d:1e:a7:a8:80:d0:4f:0b:
                    9b:e3:bb:9e:5d:d3:46:a7:05:d6:c9:fa:9f:94:bb:
                    a8:f9:2a:4f:f2:da:18:6a:90:43:6b:a2:ac:fa:d6:
                    ae:71:82:0f:b7:22:0a:eb:b0:fd:e1:35:71:4e:4d:
                    a5:5f:13:89:8e:b4:d2:10:dc:27:59:3c:e4:b9:81:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:FC:32:71:79:8F:09:A3:2E:A2:0A:E5:19:4B:93:3C:58:68:40
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:fb:6b:de:94:49:5d:a6:53:ae:17:1e:2c:fc:17:d8:15:
         13:ae:ad:57:ce:24:34:a5:06:c5:36:21:a2:e9:16:e4:66:ef:
         77:ed:69:8d:12:b4:20:31:29:91:db:56:85:0d:83:e7:83:e3:
         7e:38:1d:da:74:70:12:ad:4c:96:e5:bf:32:8a:af:fe:bb:ee:
         0a:65:0b:0e:62:8d:9f:39:2b:30:5a:54:f9:cc:2b:04:bc:d5:
         26:3a:d9:a4:a5:d3:f7:aa:42:3c:c8:bf:ad:f1:bc:3b:63:ac:
         74:16:a5:79:bd:a9:ea:52:a5:eb:6a:fe:1e:07:9f:d7:02:69:
         82:9a:a5:51:df:da:13:54:6b:ee:b9:b7:42:a7:c8:22:92:61:
         bf:1d:5f:40:af:4a:43:ef:2d:86:b3:96:43:0a:5d:1a:53:1a:
         21:e5:10:3a:13:ca:43:47:1d:ad:bd:db:d7:2b:b6:7d:a4:8f:
         f8:79:f4:df:ef:2b:1a:d6:39:bc:11:64:bc:a1:46:55:ac:f0:
         70:08:36:98:3b:41:01:d2:0d:5a:10:98:95:c9:1a:01:de:8f:
         af:71:be:42:96:17:1a:89:bb:98:3c:53:07:2f:f5:f8:2b:c4:
         f1:e2:47:31:fd:0f:62:30:fe:33:e9:7a:7b:a0:55:45:10:77:
         c1:d5:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----