Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
File:                     HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json)
Hash identifier:          4beWgHeSM7Y47YAMERonvIR6BFQWfCyTdO+fpCd8HSw=
Subject key identifier:   7F:C4:2E:FF:54:5D:AA:71:C5:42:2E:F3:F2:DD:DF:D1:36:D1:CE:49
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Certificate issuer:       /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial:       01962E61FB8ACFCCA5A77B7E9AA20B08CFA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
Manifest number:          1502
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=)
                          2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=)
                          3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=)
                          4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=)
                          5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=)
                          6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: hiUhEISzDdQ4271VC+cTY6+vecI0kN25E6VlS2sFMYE=)
                          7: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (hash: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=)
                          8: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=)
                          9: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=)
                          10: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=)
                          11: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=)
                          12: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=)
                          13: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=)
                          14: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=)
                          15: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=)
                          16: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:8a:cf:cc:a5:a7:7b:7e:9a:a2:0b:08:cf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=7fc42eff545daa71c5422ef3f2dddfd136d1ce49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:db:d9:c1:8e:7b:77:47:41:d7:26:08:b5:
                    2a:1b:9a:96:ca:3a:58:f7:4e:89:73:e8:ce:45:f7:
                    6b:7b:87:7a:8d:f5:f6:cb:24:e7:a9:48:5f:f9:28:
                    db:19:c9:61:50:38:16:e2:95:f8:6c:dc:e0:94:37:
                    be:7c:09:b7:75:7e:6e:b6:74:6d:2c:5c:3c:31:5d:
                    f3:ce:7f:15:6c:87:ec:92:59:47:30:6d:2e:9b:63:
                    f6:d6:89:f4:60:45:d1:e7:ce:cf:09:4e:f4:15:58:
                    ed:01:c8:aa:2f:72:0f:66:95:89:72:7a:0f:cc:e5:
                    6a:a1:6b:69:65:a2:76:e2:3a:b1:04:5f:8c:f5:cf:
                    65:07:2d:30:f3:e0:0f:22:63:55:32:75:a2:80:af:
                    9f:bb:a7:eb:b1:49:81:16:0d:dc:0a:f3:14:a9:1f:
                    90:a9:64:a3:d2:1e:0d:4a:5d:ef:8e:1f:2b:f6:65:
                    b3:ec:7b:20:a4:7e:b9:0f:f0:41:4a:66:0e:3e:4c:
                    29:8b:55:17:45:d8:95:35:ce:0a:b2:80:bc:be:62:
                    be:23:e6:22:11:46:6f:84:4b:5d:2c:ac:1d:87:3e:
                    3e:d3:30:e5:de:3f:05:ed:f3:66:93:35:a6:d7:c9:
                    a6:2a:94:b7:46:f7:15:4f:13:58:00:71:e8:1a:01:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C4:2E:FF:54:5D:AA:71:C5:42:2E:F3:F2:DD:DF:D1:36:D1:CE:49
            X509v3 Authority Key Identifier:
                keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:0e:e0:ab:c1:17:47:1b:5b:31:d5:41:c8:cf:0c:93:4e:
         aa:97:64:bb:3c:15:b9:93:4d:16:f4:5d:22:5e:48:d1:38:3a:
         e2:7e:79:9d:58:50:46:3b:09:52:13:0a:52:bf:a6:41:3d:a9:
         23:d8:2e:1e:ef:3f:47:36:f1:94:43:1b:0c:e8:0f:42:f6:cc:
         8c:43:87:0e:45:ca:a5:e5:f8:4a:26:36:c9:31:63:af:d9:47:
         7b:2e:92:96:f0:7f:2d:26:5a:6f:87:7d:66:5e:04:75:dc:55:
         35:ff:25:2f:8c:a2:80:a5:e1:2f:be:28:f8:12:d8:3d:c0:3d:
         55:10:d2:45:20:9c:83:b9:90:f8:af:41:f6:fd:eb:44:e4:db:
         14:30:2b:32:5f:17:c7:45:e7:ff:32:62:63:b3:7a:c9:02:1a:
         c2:61:c0:00:ef:f9:45:04:7f:89:15:74:2e:bd:58:2a:d2:8a:
         ff:8f:cf:91:6f:3e:a0:91:d3:75:54:9b:b9:1c:36:f1:b7:10:
         a6:a0:4a:c1:88:c8:57:8f:57:9e:ab:33:34:81:f5:85:72:6c:
         2d:08:98:25:3c:92:cf:21:21:da:73:dd:ec:96:88:43:18:c1:
         e8:fd:03:5c:97:02:2b:70:d7:5c:2a:fd:43:8a:e8:b2:7c:fa:
         23:ba:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----