Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File:                     h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier:          HQLOPc1jpG8SUksLM5npgn/odw+F9Crb7TrqgGjLD+4=
Subject key identifier:   82:F6:2F:4B:43:F3:49:87:F9:19:E2:DB:2F:5D:F2:4D:DD:5A:62:D4
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer:       /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial:       01962F067EDFAE3BFAB85055329E5F8EEB3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number:          074A
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: Xx5towzf4QqTfLu458DK8UZtAezmFH67ydtZlBN7CzY=)
                          2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7e:df:ae:3b:fa:b8:50:55:32:9e:5f:8e:eb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=82f62f4b43f34987f919e2db2f5df24ddd5a62d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:a3:fb:58:71:b8:fd:4c:2a:8b:29:98:15:
                    42:bc:ec:45:f1:da:59:27:c8:fa:55:43:fc:e4:93:
                    c0:a5:05:95:a8:f2:e4:e9:e8:5b:68:b1:b7:f5:48:
                    df:66:9a:ba:a6:d5:bc:bb:9d:1c:b6:5d:4c:b7:4d:
                    6f:b6:1d:70:a1:09:75:72:e8:fb:a8:7b:2f:93:d0:
                    c1:99:50:9e:8d:01:6c:93:d9:b2:1e:d6:21:79:83:
                    5d:9a:54:b4:10:d7:1f:89:83:cd:14:73:b2:1e:8a:
                    e7:27:51:21:b5:f7:bc:3b:9a:51:6a:b5:e3:a5:c3:
                    b0:13:2e:7d:f2:c8:9f:7e:26:f9:07:a8:44:cd:5e:
                    a8:e1:b1:e0:b3:9d:9a:05:97:20:83:03:1b:4d:3d:
                    fe:13:05:7b:45:96:72:c2:d3:ca:14:0f:48:0b:75:
                    06:99:95:14:1b:a0:60:3a:90:d6:60:c6:4c:a9:fe:
                    ce:25:81:b1:0e:81:c0:8e:29:0a:a0:76:71:98:78:
                    38:79:15:da:1a:0e:c2:93:1c:ea:7f:8c:95:e6:df:
                    5a:c6:c9:7b:45:32:21:74:41:6e:e0:77:e2:ea:cf:
                    f1:e0:dc:56:5a:2a:b8:a0:e7:14:69:aa:16:1a:8d:
                    ef:c7:a1:d5:32:67:0b:5d:44:64:bf:87:22:2d:e7:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:2F:4B:43:F3:49:87:F9:19:E2:DB:2F:5D:F2:4D:DD:5A:62:D4
            X509v3 Authority Key Identifier:
                keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:67:2a:f5:6f:c5:1b:a4:fe:d7:10:3a:a7:a4:b6:83:d0:23:
         83:b2:57:a6:ab:e7:21:ab:e0:15:aa:35:67:a6:ef:ac:85:ec:
         d7:07:f3:10:c2:c0:15:85:45:6b:0b:31:2a:54:86:f7:23:44:
         d8:19:07:a6:60:70:0f:80:5b:c3:08:ec:39:56:53:1e:49:fc:
         0b:a9:bd:9f:bd:00:cd:c3:36:59:39:19:60:94:cb:6c:2b:fd:
         8b:da:02:68:47:e9:3e:5d:90:e6:0a:7c:a8:c0:68:f8:da:46:
         e3:50:57:d6:89:34:48:39:f1:92:03:33:dc:00:7e:2e:63:3f:
         46:20:fe:41:32:7c:ed:e4:ad:54:09:03:c5:dd:df:ab:bf:92:
         7c:6d:e9:01:15:3d:51:7b:e9:42:7c:f2:7e:61:09:9b:4b:06:
         37:ba:0f:31:f3:1a:2f:30:56:65:c6:57:fa:24:a9:0f:d9:45:
         cc:83:a0:c6:a7:8e:b4:63:a9:11:dc:1f:22:0b:39:98:db:8e:
         1c:79:ad:c9:14:54:45:fe:7f:32:5c:43:6c:b7:69:28:15:19:
         ed:d4:e1:af:18:3f:88:6b:36:57:14:36:eb:7e:05:f0:bb:f6:
         fa:b4:64:43:70:05:a6:0a:31:5b:46:82:f8:98:04:09:fa:fe:
         47:5a:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----