Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File:                     Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier:          DI/qXizp7cakdDfSTmm9auyxzEsJW0rEFBD8sOxrKzY=
Subject key identifier:   DA:92:57:98:B0:C2:78:E3:0F:BF:A1:D2:0B:86:EC:8F:82:BF:11:50
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer:       /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial:       01962E61B3C71C9AA690C12890C5197265E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number:          0D07
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: PTbnbIr4PVIHar4sObvBFfNH+P6qD1sI9EDozaQEQcM=)
                          2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:c7:1c:9a:a6:90:c1:28:90:c5:19:72:65:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=da925798b0c278e30fbfa1d20b86ec8f82bf1150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:e6:c2:33:f2:41:06:b3:89:7f:2d:00:81:
                    1d:db:97:26:b5:71:e9:fc:e4:ee:97:47:bc:2f:2b:
                    5d:e1:23:45:c3:e1:b8:f8:55:58:80:c2:a4:1f:db:
                    1a:29:4b:b4:dc:b9:4f:35:4c:a7:5f:63:3b:53:02:
                    25:4a:b0:a1:65:5b:d3:5f:15:09:11:d6:e1:00:77:
                    f8:12:34:f9:02:4e:d8:d7:6a:51:f9:93:ed:fa:2c:
                    e9:3f:36:65:37:d5:d2:b5:f3:99:ce:78:a9:f4:32:
                    1d:0d:d9:61:e9:eb:6e:c7:44:f7:1d:1e:81:0f:96:
                    d1:bb:0a:79:19:d7:1b:be:9e:f5:91:6d:6f:e0:c2:
                    05:de:1d:63:99:73:ce:de:82:68:5e:1c:0a:d2:f5:
                    0c:17:a0:69:bb:4e:91:f1:66:9d:6d:dd:9d:21:94:
                    fa:8a:f3:1f:36:ff:a9:de:e3:57:62:da:75:3e:22:
                    f3:1f:1a:8b:01:12:55:13:84:a1:56:69:db:7d:62:
                    91:2d:69:79:df:43:4f:30:79:19:1d:17:19:e3:78:
                    d2:36:bf:42:48:68:58:b4:75:c6:05:52:a3:88:97:
                    be:62:25:5e:b8:4e:39:2c:c3:2b:fb:ed:2d:4c:c6:
                    99:a6:aa:cc:ad:44:41:e2:ef:3c:ae:03:ec:23:03:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:92:57:98:B0:C2:78:E3:0F:BF:A1:D2:0B:86:EC:8F:82:BF:11:50
            X509v3 Authority Key Identifier:
                keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:34:3b:77:26:89:69:f4:12:ca:0e:fc:f4:fb:35:74:0d:
         76:0d:3d:8e:21:56:ef:01:76:22:7e:e0:fe:1a:63:60:25:25:
         c9:a0:bb:86:2a:22:76:02:29:c6:bc:f9:8e:de:5d:5e:55:3c:
         38:31:ed:ce:f4:67:98:69:40:3f:16:0e:9b:21:f0:46:15:f5:
         8b:ba:75:89:e0:73:01:b5:75:64:10:04:b6:b5:b1:37:37:2b:
         fb:5d:4e:bd:e1:0a:ab:9c:21:c3:57:9b:91:b9:41:d5:39:75:
         c1:43:19:32:11:f4:62:95:be:33:6b:ca:14:84:43:38:0d:98:
         77:f0:42:97:5a:f5:42:27:dc:43:45:1a:04:03:34:01:c3:3a:
         c3:17:62:11:c4:e0:8b:4a:1a:15:11:c0:ba:5a:4d:e4:f5:cf:
         c7:d9:17:a7:9c:fc:00:6f:e5:39:5b:dc:71:c4:ed:ea:9e:95:
         4b:90:ce:00:5d:f6:db:ae:a3:18:b9:0d:c9:25:d1:aa:82:dc:
         6b:33:83:d9:72:36:99:f7:84:35:c5:77:f6:27:65:a8:cb:d6:
         03:0e:d7:c1:5a:2e:1d:24:0e:ae:5d:60:0f:e2:9e:7a:ff:d6:
         c1:86:86:eb:a0:84:5a:3f:a1:aa:80:9f:41:15:d7:af:7a:f3:
         f8:b8:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----