Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File:                     0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier:          EJs7SBKOhOwYfVVLc/Lk32YbWKBtQ+E1J/nJqcHqOwQ=
Subject key identifier:   9A:80:6D:C6:A5:41:FD:E0:50:A5:66:59:38:E1:86:AE:1F:19:C9:34
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer:       /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial:       01962F06C2E9CE06F2A60B7F90F9F820ACAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number:          06A5
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: 13kxCATVuorelNnMu3RtYKKJUJ/U5M4nPCnp8LRyPz4=)
                          2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c2:e9:ce:06:f2:a6:0b:7f:90:f9:f8:20:ac:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=9a806dc6a541fde050a5665938e186ae1f19c934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:a7:d7:a5:b8:99:f6:b4:c7:f7:4b:cc:46:
                    9f:41:62:bf:47:2b:40:90:9e:29:6d:da:02:3c:59:
                    74:f4:1c:e8:74:92:7b:0b:21:b1:1b:2c:49:f3:35:
                    48:fb:d4:ce:0d:0a:03:3f:2c:e5:7a:86:9d:4c:8f:
                    f9:1e:79:6a:c6:22:2f:4c:ad:b7:32:e3:c3:f8:b8:
                    44:c7:84:32:8f:9b:35:dc:e0:c9:f1:f0:6b:92:b1:
                    2a:fd:5a:2b:ef:db:d7:cb:32:8a:54:b5:96:80:c7:
                    dd:7b:5e:e1:78:ba:0b:59:6e:aa:73:db:79:5d:1a:
                    15:f7:ec:5a:1a:ad:5a:24:53:c7:87:81:b3:46:d7:
                    6d:2b:73:54:84:15:56:4e:26:aa:c6:9e:2d:c0:1e:
                    d6:d3:a9:74:08:34:ae:ff:5f:bf:79:88:ab:31:d7:
                    39:37:e3:1a:cb:56:9c:b0:24:c0:c4:c9:87:29:50:
                    5b:a9:95:47:be:e8:82:57:2b:a1:ba:55:9b:a8:7e:
                    0d:04:91:bc:4e:17:4a:a7:84:f3:98:90:5c:8e:b0:
                    0b:d3:07:6c:fd:1c:09:55:1a:ea:b6:a5:19:20:36:
                    e0:81:26:31:dc:4a:ef:37:21:30:d7:e2:de:94:63:
                    9b:78:2d:ea:5a:75:33:45:22:3c:17:d3:01:7e:98:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:6D:C6:A5:41:FD:E0:50:A5:66:59:38:E1:86:AE:1F:19:C9:34
            X509v3 Authority Key Identifier:
                keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:67:49:62:a7:dd:25:78:06:46:80:74:96:3a:76:09:ef:0a:
         da:85:94:f6:79:87:1c:21:dd:93:9c:7b:fe:9c:bf:21:b1:49:
         8a:1b:ae:7a:e2:71:f5:25:08:7c:5e:5d:be:f7:ed:aa:2a:4f:
         cf:47:aa:b3:88:2c:13:67:94:6f:99:15:83:78:3f:b3:82:45:
         5e:cb:90:10:75:b9:18:a2:a3:6c:a0:c2:b3:b9:d6:db:43:3b:
         f4:fb:29:0e:ac:f4:0d:1d:46:16:5d:06:fe:8f:11:13:d1:aa:
         6e:12:65:15:15:a2:e3:8e:a1:51:66:4b:b2:b2:98:32:81:0a:
         c5:fe:8a:5c:d9:5b:db:c6:21:e1:fb:e0:9e:3d:b8:50:b1:be:
         f4:f8:ef:57:73:d2:8f:d8:40:0a:18:d0:4c:73:7e:bf:51:05:
         4a:c7:6b:0d:67:c8:41:59:0b:9b:b0:18:35:00:af:0c:4c:25:
         a2:6f:c4:ac:8b:ab:63:08:23:95:05:c3:e5:01:95:13:fd:62:
         39:7e:9d:18:04:06:e3:4b:84:b7:ff:b7:f6:6b:19:76:79:a6:
         c6:70:3f:94:9d:ba:cb:1b:4c:d8:d3:12:ed:b3:ec:db:56:e0:
         e8:a7:56:b4:b4:8e:e9:8c:cb:ee:8f:95:1b:b0:33:d6:c1:04:
         09:cc:ed:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsLpzgbypgt/kPn4IKyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMWE1OTQwNzIyYjIwN2IyOWQ5NWE2YzgxYmUwZDJiZjRk
NDEwY2MwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
Eyg5YTgwNmRjNmE1NDFmZGUwNTBhNTY2NTkzOGUxODZhZTFmMTljOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKn16W4mfa0x/dLzEafQWK/RytA
kJ4pbdoCPFl09BzodJJ7CyGxGyxJ8zVI+9TODQoDPyzleoadTI/5HnlqxiIvTK23
MuPD+LhEx4Qyj5s13ODJ8fBrkrEq/Vor79vXyzKKVLWWgMfde17heLoLWW6qc9t5
XRoV9+xaGq1aJFPHh4GzRtdtK3NUhBVWTiaqxp4twB7W06l0CDSu/1+/eYirMdc5
N+May1acsCTAxMmHKVBbqZVHvuiCVyuhulWbqH4NBJG8ThdKp4TzmJBcjrAL0wds
/RwJVRrqtqUZIDbggSYx3ErvNyEw1+LelGObeC3qWnUzRSI8F9MBfpiTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqAbcalQf3gUKVmWTjhhq4fGck0MB8GA1UdIwQY
MBaAFNIaWUByKyB7KdlabIG+DSv01BDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQt
OGNmYmRiNzk5Mjg0LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQtOGNmYmRiNzk5Mjg0
LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWdJYqfd
JXgGRoB0ljp2Ce8K2oWU9nmHHCHdk5x7/py/IbFJihuueuJx9SUIfF5dvvftqipP
z0eqs4gsE2eUb5kVg3g/s4JFXsuQEHW5GKKjbKDCs7nW20M79PspDqz0DR1GFl0G
/o8RE9GqbhJlFRWi446hUWZLsrKYMoEKxf6KXNlb28Yh4fvgnj24ULG+9PjvV3PS
j9hAChjQTHN+v1EFSsdrDWfIQVkLm7AYNQCvDEwlom/ErIurYwgjlQXD5QGVE/1i
OX6dGAQG40uEt/+39msZdnmmxnA/lJ26yxtM2NMS7bPs21bg6KdWtLSO6YzL7o+V
G7Az1sEECcztmQ==
-----END CERTIFICATE-----