Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File:                     hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier:          r+w6Eg800VDvgkB3KEUUOCEDV6QBkHTODzxaqDThE+o=
Subject key identifier:   08:CB:62:61:10:8F:5E:92:11:6A:6D:04:2C:33:29:44:F2:97:1C:F4
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer:       /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial:       01962FAB274F13AED8EF5E2D16650A803FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number:          35
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 3f06hh4hNU107JXVzfvArHZPE4U.roa (hash: BPCtwW3aJroKK5cBsU9SlKsGCU1RSfVJmSFO/AqP8Rs=)
                          2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: /RJSYMbUAZ7/PVkI8GqUMY4SD39OZSbvDY6pm1TkcKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:27:4f:13:ae:d8:ef:5e:2d:16:65:0a:80:3f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=08cb6261108f5e92116a6d042c332944f2971cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:08:62:fe:6e:04:a2:8d:68:cd:7f:a7:23:
                    f2:8a:e6:45:f4:0f:ba:b4:36:62:b9:84:09:23:62:
                    87:c2:92:cb:ba:07:09:cd:1e:ab:75:72:0f:14:a2:
                    01:a2:5b:f5:b9:31:57:14:9c:4f:53:69:88:72:a0:
                    63:50:3d:f1:1f:b4:3c:a7:ca:37:ba:62:74:11:d3:
                    4e:a7:5f:c1:55:ba:e3:8e:8c:d3:2b:61:5f:78:ab:
                    76:fe:25:03:df:3f:19:4c:3b:a4:f3:22:8c:d8:60:
                    11:b1:ab:78:d8:08:42:92:ea:e6:89:c4:2a:c7:bf:
                    f1:9e:a0:56:2d:82:88:8d:38:da:a3:fb:3b:41:1d:
                    67:bf:45:73:a1:91:6c:3d:be:37:d3:0f:b5:ca:ac:
                    8f:31:7f:3b:30:46:e6:fa:ab:21:79:c1:60:d9:11:
                    16:f2:d3:1c:7e:84:b9:78:86:a4:5a:bd:29:0c:86:
                    24:fe:e7:f5:fa:84:f0:26:c8:e0:81:db:7c:19:9f:
                    6f:af:9f:47:38:d1:5e:e3:6a:46:73:39:d5:dd:05:
                    3d:6e:ad:51:aa:6b:61:cc:96:4e:f7:d5:d8:c6:f2:
                    e2:b1:81:1e:99:0a:78:ef:c5:a6:f5:e8:a9:90:e0:
                    42:5b:b3:c1:76:ad:1c:41:c1:dd:f9:75:53:80:30:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CB:62:61:10:8F:5E:92:11:6A:6D:04:2C:33:29:44:F2:97:1C:F4
            X509v3 Authority Key Identifier:
                keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:95:8b:85:e1:c0:6a:d0:12:8a:91:7c:51:72:c2:76:8a:
         1c:8c:cf:19:87:29:8d:4c:e5:3f:db:83:be:31:64:d2:06:29:
         58:13:c0:9f:68:ff:38:02:42:f3:7e:8b:8a:3e:be:5b:c4:68:
         57:98:7a:5c:8b:be:c4:50:e3:91:fc:a3:40:bf:36:2b:7c:84:
         cf:03:38:ab:d5:51:7f:8a:cf:32:a5:a2:69:58:42:34:4e:41:
         49:c5:e5:9f:15:9e:63:f8:98:78:fe:3d:63:ed:e4:89:08:ae:
         ed:c9:97:88:7c:f3:9c:79:fa:da:f6:09:9d:ea:55:0b:c0:6a:
         4f:d5:b0:5c:0d:0a:91:a3:0d:23:d6:fa:ed:78:eb:03:54:64:
         9f:c5:2a:a7:4d:b5:02:a5:e0:20:d8:71:e8:a2:1c:d2:91:29:
         0c:30:9a:2e:7b:06:29:70:27:e3:17:bb:b8:c7:96:69:8c:18:
         87:25:a0:79:a7:bb:7e:52:fe:e3:c9:f9:48:ad:31:b0:11:d8:
         ed:b0:8e:6c:6f:37:c8:ae:04:bf:f4:f7:ec:05:b9:4b:eb:83:
         47:cc:88:f0:db:32:7f:c5:55:0d:3b:e6:58:ea:87:07:0d:61:
         14:47:4d:ce:12:21:99:e9:55:17:3f:88:56:1a:95:b8:45:53:
         7e:2c:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----