Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          OOa/u3tv77Cu5LRwPtYhW5nHoI43ow1ZxMZOaYxHmoc=
Subject key identifier:   AF:56:3B:1F:C2:D6:4B:21:40:24:C1:A7:E7:56:D2:C1:56:68:C8:08
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       01962F06487EEB53D2FBF2C3CC48B2E3BF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          0E91
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=)
                          2: 4Aub9tuAtawARwdUiRpETmWZK3Q.roa (hash: rR7Viq3jJ/xFUzk70maRtR8P0SCSBjY2uApRyB5OV6Y=)
                          3: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=)
                          4: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=)
                          5: Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa (hash: vhJRnVcBvTImc9Sv3yScvOufw+og96lcsubFcpiYN6Q=)
                          6: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=)
                          7: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=)
                          8: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=)
                          9: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=)
                          10: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=)
                          11: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=)
                          12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=)
                          13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=)
                          14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=)
                          15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: szvNm5K+QW2niDK3Ey3R+jVsJsGJaIu1zwHI5VbOEic=)
                          16: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=)
                          17: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=)
                          18: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=)
                          19: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=)
                          20: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=)
                          21: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=)
                          22: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=)
                          23: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=)
                          24: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:48:7e:eb:53:d2:fb:f2:c3:cc:48:b2:e3:bf:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=af563b1fc2d64b214024c1a7e756d2c15668c808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:20:47:b5:c9:ef:dc:ad:9e:cc:98:b2:dd:
                    80:aa:62:d2:35:10:9e:cc:c5:db:b0:d6:4c:42:ef:
                    4d:7c:0c:9b:be:21:b1:d9:bd:fb:51:f9:97:16:cb:
                    ec:c4:c8:b5:ab:93:e4:34:6a:39:9e:17:7e:e4:82:
                    5c:2e:5c:43:70:bc:a6:dc:a6:15:4c:9a:86:fc:47:
                    2c:94:d6:10:08:d1:2b:b8:fd:5b:05:15:bc:62:32:
                    d9:86:0c:39:c9:47:eb:69:de:02:dd:2a:f8:30:b2:
                    70:7e:21:49:05:6e:99:88:ee:3f:76:04:af:0e:64:
                    72:51:c4:a5:d8:bc:83:fc:11:cc:c5:39:51:64:e4:
                    44:ff:89:43:69:2c:c1:be:80:3a:a8:7c:7e:3f:7f:
                    74:ae:80:9c:1c:5c:4d:c1:95:1b:dd:a7:86:f8:1e:
                    f7:1b:8a:a8:22:93:7a:7f:e5:2e:f7:41:52:e2:80:
                    f1:6f:50:53:e5:05:a7:43:85:f5:a0:21:4d:8d:f3:
                    4f:fe:70:0d:8d:d7:75:76:22:0d:9d:89:0a:10:3e:
                    37:a1:3c:95:1d:1a:65:8f:b4:ad:90:9b:9b:15:40:
                    8f:3a:25:e0:83:da:05:49:27:08:41:60:bf:d0:75:
                    a7:8f:17:8e:89:aa:9a:09:60:3e:8b:0b:be:d8:a5:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:3B:1F:C2:D6:4B:21:40:24:C1:A7:E7:56:D2:C1:56:68:C8:08
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:92:ac:11:0b:c4:b0:7d:40:34:fd:79:ed:4a:89:19:80:
         d9:a4:de:f3:1b:c4:00:32:39:08:b0:3a:2b:66:ab:9a:b0:8d:
         9b:ea:84:65:27:68:22:e6:6b:17:83:a2:80:d4:cf:89:da:09:
         82:b0:f3:5b:54:d9:91:86:2c:44:1c:0a:31:aa:f9:99:51:a6:
         cf:fc:57:fe:ea:0b:5a:7f:16:25:64:e1:e5:58:b1:71:6f:a3:
         67:a9:22:45:1d:15:a6:45:82:89:0e:12:eb:86:36:9d:4e:d2:
         bb:5c:a5:dd:c9:65:96:1d:e3:18:21:32:0c:41:4b:57:ee:0f:
         05:d9:2e:66:34:d6:b6:e8:16:5f:74:92:c1:81:a3:3b:38:6f:
         92:d3:b2:a7:7e:02:db:c4:02:2b:46:f1:c0:9b:7b:e9:de:8b:
         7b:49:83:cd:9c:9c:08:e3:e1:bf:c4:27:76:99:33:a8:f5:20:
         7d:53:76:68:be:e7:30:91:5b:06:64:6b:cb:1b:bb:f1:03:34:
         91:38:12:f6:53:c3:ac:8c:34:06:49:e3:a3:10:19:94:93:16:
         ce:a8:7a:5f:4f:98:9b:71:3c:dc:3c:73:1e:d3:57:a8:9a:f4:
         b3:23:af:0c:ee:46:24:30:fc:a2:e7:9f:48:3d:27:e0:b4:fd:
         bf:10:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----