Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          8iOVn5wv0BlnTalmNTmGfywImSCALGTSkd3VmfzsACY=
Subject key identifier:   74:6F:0F:DD:91:89:53:8F:67:EB:2B:CC:86:21:7D:D2:1E:0B:33:4D
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       01962E2B563E738E34CF2F9FEA22934A420F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          1528
Signing time:             Sun 13 Apr 2025 08:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:53 +0000
Files and hashes:         1: 1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (hash: AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=)
                          2: 6N4n07cpVsvDfcO3eEPVPOVbfQg.roa (hash: nhZwGT39i2nPsTiPGKrLhdrJBmLcv3M5z0QYlPKdUVs=)
                          3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: AGXWPuz6FpZkxqyTYk8BTLdI+VVFcB3YZeGkyeq7BH8=)
                          4: jZDFfglCAVXqMiHQiNaCS_ykt5c.roa (hash: Z9pj0iwTHPQ+PmAz+kp9u4GZKNWWC8RI/dko3M2WedQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:56:3e:73:8e:34:cf:2f:9f:ea:22:93:4a:42:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: Apr 13 08:01:53 2025 GMT
            Not After : Apr 14 08:01:53 2025 GMT
        Subject: CN=746f0fdd9189538f67eb2bcc86217dd21e0b334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:c6:2f:6b:0a:f0:03:58:2b:93:53:be:e6:
                    66:44:f9:fd:9e:1b:66:1c:16:bf:a0:2a:34:d4:cc:
                    90:c3:44:de:76:c8:01:a1:60:fd:4e:8f:85:02:2c:
                    1c:51:12:7c:e9:7c:fa:73:af:05:62:e8:f0:c5:61:
                    8b:9c:f4:55:15:aa:7c:78:1f:54:01:04:40:db:fe:
                    a9:96:6a:b4:aa:3c:97:a5:c3:17:14:39:20:63:aa:
                    ac:dd:f3:8d:b4:98:c9:8e:e5:8d:85:76:8a:71:f9:
                    81:98:0c:8b:1e:16:fb:87:29:31:84:a7:e0:74:72:
                    c0:13:0e:24:bf:6d:f6:92:2e:e9:c2:37:cf:bd:6d:
                    5a:72:17:e8:db:54:42:92:99:e4:8c:dc:cf:11:73:
                    73:92:dd:2f:a2:1c:2c:87:e3:79:91:4b:bc:2a:fa:
                    4b:6c:32:a2:14:75:62:5a:10:41:6b:6c:a7:75:2d:
                    58:c4:f3:0b:e5:7e:18:34:7c:89:fd:47:75:5c:32:
                    96:a8:64:7d:c6:ae:1d:39:35:6c:cf:50:8b:c2:0d:
                    06:47:c2:dd:da:ff:c2:f2:d4:d8:74:19:31:7c:4d:
                    a9:a0:fc:78:79:d3:3a:5c:85:33:5c:7b:e9:da:2c:
                    cf:a1:66:17:e4:d7:2b:e0:7e:0e:12:ab:bb:51:51:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:0F:DD:91:89:53:8F:67:EB:2B:CC:86:21:7D:D2:1E:0B:33:4D
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:38:bb:54:8f:29:af:21:f6:34:42:39:1d:cc:a5:ce:d3:
         35:1c:44:72:da:b7:d1:e0:f8:7f:46:16:66:e1:63:41:64:6c:
         08:23:57:ce:f5:1c:c3:81:83:fb:73:cf:7c:fd:7e:d9:5c:9f:
         5a:65:72:01:dd:99:4c:e0:56:e3:71:81:5d:60:27:18:a6:11:
         d0:77:f2:65:c5:ec:cb:37:7a:4b:dd:ed:3b:0a:f0:53:78:11:
         7f:c9:53:08:92:68:30:2a:1a:cc:dd:b7:02:88:99:03:e5:86:
         a0:17:69:9c:02:e4:25:0b:cf:05:65:f2:44:e3:dd:98:1a:fb:
         b4:c6:cf:e6:53:d4:97:4d:02:92:ac:c9:3c:62:86:06:19:48:
         15:c2:e4:56:75:a9:d8:58:11:b1:e7:fc:fe:50:ed:1e:49:18:
         6f:60:50:ab:45:bf:66:19:f8:df:f3:00:76:25:e1:4c:b4:90:
         95:05:75:3d:42:78:bf:e8:63:d2:ce:59:70:62:6a:9c:42:7a:
         68:3b:5f:e4:ff:5e:ec:ee:3d:87:25:cc:2b:28:55:6e:bd:96:
         9c:99:04:8e:2a:d3:a1:6b:a5:ec:9b:ed:28:69:a9:f5:98:ac:
         59:70:9a:f0:0d:de:70:65:4e:26:3c:d2:77:1e:b9:2f:95:e8:
         4a:20:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----