Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File:                     hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier:          DAE8y4HNxC9j8QN/BqcEjkKEWgaMvVd816gZLFeiDzo=
Subject key identifier:   31:1A:EB:32:EA:FC:20:28:A2:C2:20:29:72:B7:03:FC:88:2A:34:ED
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer:       /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial:       01962E98EF9E9524E86C0A5A08A7D2D04454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number:          0E32
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
                          2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
                          3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: ZYPMjIXULcT4M3bCgKo+AgUlMefjQK0QDELhz7E1Q44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ef:9e:95:24:e8:6c:0a:5a:08:a7:d2:d0:44:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=311aeb32eafc2028a2c2202972b703fc882a34ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:b2:d8:d1:9c:6f:09:22:5a:d8:9c:6e:8b:
                    1f:e4:07:c3:17:b8:72:f5:32:dc:0f:6e:ff:87:73:
                    03:65:0e:4f:32:57:f8:27:02:37:15:e9:5e:ec:bd:
                    46:db:d1:51:85:88:70:6a:66:d1:c8:ae:25:eb:b3:
                    d3:31:d1:73:5e:09:08:a8:a7:a6:4f:df:1e:d2:28:
                    ed:26:eb:15:dc:e4:9f:f4:ea:12:f3:e7:12:50:d6:
                    fa:33:4f:33:d5:15:5d:6b:70:14:5d:b8:db:9e:f7:
                    5d:81:80:33:af:1d:fa:7c:86:39:9b:ab:19:d2:98:
                    14:4d:5c:a5:18:e3:f7:97:0e:35:60:f8:d5:35:77:
                    a6:d2:de:98:0f:b9:e9:51:19:75:1d:57:df:65:82:
                    06:c3:04:cd:5f:92:ee:65:88:9c:5b:42:b1:23:93:
                    8c:89:46:98:c9:c2:28:62:d8:74:ed:84:33:e6:f3:
                    23:7d:0b:fc:a8:9c:f7:6e:76:09:11:41:fd:92:bc:
                    60:15:de:5a:11:dc:a1:76:7f:49:17:6b:52:90:7d:
                    d8:83:a7:23:cb:a6:a3:36:05:c6:6f:14:c0:82:bd:
                    ef:e3:37:de:33:23:83:fd:6a:f4:ca:e2:a8:5f:e9:
                    09:94:94:4a:63:58:c1:63:58:28:0b:27:40:45:32:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:EB:32:EA:FC:20:28:A2:C2:20:29:72:B7:03:FC:88:2A:34:ED
            X509v3 Authority Key Identifier:
                keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:10:8a:56:20:d0:62:d1:ae:18:44:f1:20:ec:36:c6:24:
         57:be:0b:4b:c5:6e:15:2a:e2:36:77:c1:a0:fa:61:fa:04:bc:
         2e:6b:b3:74:ed:aa:fb:6c:1c:46:c2:56:f6:27:d3:32:92:e9:
         4c:6e:50:24:e7:0a:14:ac:a9:03:6a:0d:3e:23:e8:55:4c:87:
         82:59:44:f4:06:f6:7f:a3:2a:6b:73:c5:be:e1:94:66:b4:8d:
         1a:59:b4:b2:49:28:e6:cf:8a:63:4b:4f:8a:49:ce:7f:ba:d6:
         f0:2f:b8:61:20:35:04:6a:f9:5a:cc:14:eb:b6:ed:2b:4d:44:
         9d:7a:87:b5:47:f4:01:5f:51:16:7f:aa:23:8f:de:1c:15:a6:
         2c:d4:3d:1a:57:73:fc:0d:62:46:ab:00:72:62:f9:8c:14:a1:
         12:cc:ea:f3:17:38:c6:bf:4d:7f:60:e9:fc:16:53:1e:cf:d6:
         e2:ca:3b:b9:a8:97:2d:75:b6:00:cf:d0:3e:cc:c3:de:e6:fd:
         6d:3a:66:fc:92:ed:ca:68:8a:77:ea:6c:13:87:65:ae:9f:cf:
         21:80:e2:26:38:bb:04:db:ad:62:2a:9f:1c:3a:12:10:a8:0b:
         dc:35:17:d0:28:a4:db:e9:ad:f5:20:11:2c:e6:50:e6:db:da:
         3d:66:41:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumO+elSTobApaCKfS0ERUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4
ZDRiMWEwHhcNMjUwNDEzMTAwMTM2WhcNMjUwNDE0MTAwMTM2WjAzMTEwLwYDVQQD
EygzMTFhZWIzMmVhZmMyMDI4YTJjMjIwMjk3MmI3MDNmYzg4MmEzNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB6y2NGcbwkiWticbosf5AfDF7hy
9TLcD27/h3MDZQ5PMlf4JwI3Fele7L1G29FRhYhwambRyK4l67PTMdFzXgkIqKem
T98e0ijtJusV3OSf9OoS8+cSUNb6M08z1RVda3AUXbjbnvddgYAzrx36fIY5m6sZ
0pgUTVylGOP3lw41YPjVNXem0t6YD7npURl1HVffZYIGwwTNX5LuZYicW0KxI5OM
iUaYycIoYth07YQz5vMjfQv8qJz3bnYJEUH9krxgFd5aEdyhdn9JF2tSkH3Yg6cj
y6ajNgXGbxTAgr3v4zfeMyOD/Wr0yuKoX+kJlJRKY1jBY1goCydARTJ1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEa6zLq/CAoosIgKXK3A/yIKjTtMB8GA1UdIwQY
MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt
MGM2NzIxN2NjOTZiLzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi
LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwQQilYg
0GLRrhhE8SDsNsYkV74LS8VuFSriNnfBoPph+gS8LmuzdO2q+2wcRsJW9ifTMpLp
TG5QJOcKFKypA2oNPiPoVUyHgllE9Ab2f6Mqa3PFvuGUZrSNGlm0skko5s+KY0tP
iknOf7rW8C+4YSA1BGr5WswU67btK01EnXqHtUf0AV9RFn+qI4/eHBWmLNQ9Gldz
/A1iRqsAcmL5jBShEszq8xc4xr9Nf2Dp/BZTHs/W4so7uaiXLXW2AM/QPszD3ub9
bTpm/JLtymiKd+psE4dlrp/PIYDiJji7BNutYiqfHDoSEKgL3DUX0Cik2+mt9SAR
LOZQ5tvaPWZBUw==
-----END CERTIFICATE-----