Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File:                     HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier:          XtuGClG8RSjF3rR7aeQF9atBGymP3/Qn+k1FEcb1Jbg=
Subject key identifier:   49:5A:B1:7B:FA:EB:52:FF:F5:07:12:7B:FF:59:DA:77:9C:29:F5:41
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer:       /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial:       01962E2B12EAF06A54C171B5F5F47563117E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number:          09AD
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: OoZNRcHBpJ3009lHRthDKj3PC02O/ERseACKz1ZwKlE=)
                          2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
                          3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:ea:f0:6a:54:c1:71:b5:f5:f4:75:63:11:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=495ab17bfaeb52fff507127bff59da779c29f541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:c4:e2:17:0a:bb:fd:19:9b:52:ea:55:c8:
                    33:45:04:d6:f3:1d:0e:b1:39:c8:44:a0:e5:4b:f7:
                    f9:be:c5:e0:2d:41:ac:76:b8:45:9b:3a:6e:1d:4a:
                    f3:5e:64:ce:27:1a:9e:dc:a0:aa:4b:ae:85:01:8a:
                    a8:3c:1a:ae:24:c7:80:d5:51:d5:97:c2:18:c2:ad:
                    dc:5b:8e:f1:39:d9:e5:6b:ad:3d:4f:45:5a:f4:db:
                    4a:59:3b:00:15:a2:27:e0:89:ec:e5:3a:ef:b2:28:
                    4a:eb:c3:9b:6b:c5:08:eb:85:d2:a9:3e:7a:c3:be:
                    d8:af:58:5d:72:48:08:37:d7:c8:a5:2d:a1:ac:ea:
                    43:db:57:d3:e7:f0:58:db:70:82:1e:d2:09:54:cf:
                    8b:35:13:11:27:53:11:ef:8b:b5:67:95:22:60:36:
                    31:b2:48:ef:ef:1a:70:22:34:32:7f:35:8a:56:0f:
                    5d:94:65:6f:49:4e:53:8b:43:c1:a6:4d:b6:e8:5d:
                    e6:10:e2:4c:eb:55:73:e5:36:b5:d7:dc:63:d9:9e:
                    39:99:0d:bb:00:3f:a8:b1:9e:47:1a:7b:78:0a:aa:
                    e5:69:d6:7b:97:75:c2:d6:cb:4b:2c:d2:a9:49:e5:
                    fe:46:21:03:31:69:f4:95:f1:8e:6e:18:5a:ad:72:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:B1:7B:FA:EB:52:FF:F5:07:12:7B:FF:59:DA:77:9C:29:F5:41
            X509v3 Authority Key Identifier:
                keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:07:66:fa:60:20:dc:3b:ae:3c:a5:28:1b:18:00:95:aa:
         7f:76:37:35:7f:4e:53:1b:e6:c3:f5:13:49:cd:1c:3e:bd:eb:
         1f:ec:ae:40:40:70:64:a8:5d:55:6a:46:b7:01:0f:53:25:9c:
         08:d4:53:92:80:9a:50:7d:11:1b:fa:ae:c0:cd:50:58:22:54:
         2f:40:60:6a:73:76:ef:c7:7d:a5:6e:86:c8:aa:cf:fb:67:74:
         0b:81:5d:c5:b4:0d:d1:47:6b:a4:19:bc:ee:ca:a7:85:7f:3e:
         b5:fb:88:fc:ea:16:55:53:7a:8f:33:60:11:e1:e9:20:62:8e:
         a6:f4:02:94:93:e8:f6:37:89:73:cc:41:56:c0:d1:5f:15:ec:
         84:93:0d:fc:28:35:1e:89:30:4c:e2:24:ca:98:be:75:c5:19:
         6c:c8:fe:9e:37:f1:f5:84:3c:c2:55:6a:b4:a1:07:0e:79:5f:
         56:ba:6c:46:c6:14:fd:1e:69:15:ef:db:b3:0e:db:88:0e:20:
         55:b5:c8:92:3f:19:aa:ca:4b:be:3b:16:34:a3:67:91:b7:5b:
         0f:6f:ac:cc:76:9c:db:f1:5d:c0:ca:56:e1:11:b0:5d:b8:97:
         4f:94:10:0b:81:67:5e:83:e8:7b:f8:ab:e4:a7:02:4b:2d:80:
         20:ae:45:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxLq8GpUwXG19fR1YxF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
Eyg0OTVhYjE3YmZhZWI1MmZmZjUwNzEyN2JmZjU5ZGE3NzljMjlmNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRfE4hcKu/0Zm1LqVcgzRQTW8x0O
sTnIRKDlS/f5vsXgLUGsdrhFmzpuHUrzXmTOJxqe3KCqS66FAYqoPBquJMeA1VHV
l8IYwq3cW47xOdnla609T0Va9NtKWTsAFaIn4Ins5TrvsihK68Oba8UI64XSqT56
w77Yr1hdckgIN9fIpS2hrOpD21fT5/BY23CCHtIJVM+LNRMRJ1MR74u1Z5UiYDYx
skjv7xpwIjQyfzWKVg9dlGVvSU5Ti0PBpk226F3mEOJM61Vz5Ta119xj2Z45mQ27
AD+osZ5HGnt4CqrladZ7l3XC1stLLNKpSeX+RiEDMWn0lfGObhharXI23wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElasXv661L/9QcSe/9Z2necKfVBMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtUHZvpg
INw7rjylKBsYAJWqf3Y3NX9OUxvmw/UTSc0cPr3rH+yuQEBwZKhdVWpGtwEPUyWc
CNRTkoCaUH0RG/quwM1QWCJUL0BganN278d9pW6GyKrP+2d0C4FdxbQN0UdrpBm8
7sqnhX8+tfuI/OoWVVN6jzNgEeHpIGKOpvQClJPo9jeJc8xBVsDRXxXshJMN/Cg1
HokwTOIkypi+dcUZbMj+njfx9YQ8wlVqtKEHDnlfVrpsRsYU/R5pFe/bsw7biA4g
VbXIkj8ZqspLvjsWNKNnkbdbD2+szHac2/FdwMpW4RGwXbiXT5QQC4FnXoPoe/ir
5KcCSy2AIK5FRw==
-----END CERTIFICATE-----