Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
File:                     Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft (raw, json)
Hash identifier:          5prius5Gwd0diZ37Ns27/a/puTYn+d3uhWDXOGaQ0Uk=
Subject key identifier:   F6:E6:38:EF:2A:8A:C6:CA:8C:D6:D6:E1:BB:08:BE:EA:84:34:ED:1F
Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
Certificate issuer:       /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Certificate serial:       01962F3D4104F2734E886034A96DA83C6FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
Manifest number:          0322
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl (hash: Uro7tuaPshGmmYbBhDXJzxjbvnUn2ZhrIeJlUj10Z24=)
                          2: dt7OMFAxYi9mfSy74b5_x7Lhpto.roa (hash: 4uikV6DgluHoEAMF2XeMMDlFi1mz2gwrijFHfMDuXc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:41:04:f2:73:4e:88:60:34:a9:6d:a8:3c:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=f6e638ef2a8ac6ca8cd6d6e1bb08beea8434ed1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:47:79:71:e8:91:15:d1:fe:e1:79:e5:f0:
                    e6:32:d6:55:74:c6:c2:ca:0e:40:f9:2a:3c:23:92:
                    e0:64:8b:ba:3a:e6:33:eb:6d:b7:0e:70:da:54:f4:
                    e2:53:a8:57:96:14:da:19:3c:0e:97:57:5c:65:15:
                    b3:1f:6e:22:bb:da:56:62:bf:b8:93:52:c1:08:6d:
                    4a:f3:96:e8:07:63:46:89:f8:4f:1a:bc:82:41:23:
                    df:ca:6d:e5:9a:be:64:0b:3d:a0:9a:3a:94:30:2e:
                    d4:a3:20:65:af:2b:ad:5e:08:43:5c:d7:bd:a4:19:
                    48:ff:06:93:a6:31:77:4c:7f:f8:c2:1d:f1:fa:1e:
                    fa:ad:20:bd:40:01:a1:9b:20:e1:12:ff:27:e9:19:
                    28:ca:d3:0a:7d:24:1e:7d:6f:bc:60:6d:b8:e9:a4:
                    ee:25:6d:9f:dc:ba:bd:0e:21:cf:43:30:dd:61:b3:
                    a1:08:93:df:28:75:ad:83:61:c0:fe:65:6c:a6:55:
                    d7:68:76:8d:d4:aa:5d:8a:fa:ce:8a:54:a1:27:40:
                    0e:01:ee:a6:34:93:f1:c6:cd:4e:47:52:07:b6:c8:
                    a8:00:d5:78:9b:ef:c8:a5:7c:3b:73:68:ae:b2:80:
                    5d:73:6b:7d:61:e1:9d:04:02:5a:6f:2e:39:73:93:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:38:EF:2A:8A:C6:CA:8C:D6:D6:E1:BB:08:BE:EA:84:34:ED:1F
            X509v3 Authority Key Identifier:
                keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:5d:09:c4:94:1f:f3:f5:38:b6:7e:2c:ea:cd:2f:1c:f4:
         17:59:3e:09:10:c0:95:3d:b4:1d:ea:a7:9d:ac:81:ea:85:12:
         9b:8b:31:43:d9:91:d3:2e:00:ef:ae:d6:bc:dc:16:7c:60:a6:
         dc:18:34:15:d7:96:c2:b3:b1:7a:54:ac:53:06:bf:50:8e:91:
         eb:63:6b:05:55:7f:da:e1:b3:f3:d7:30:3a:64:10:db:51:21:
         9f:cd:42:94:9c:80:9f:47:6b:6c:2b:5d:61:9a:67:fe:85:f1:
         7f:73:2c:d7:76:db:a8:7e:85:48:e2:a8:f5:fc:12:c3:ec:30:
         e4:d9:16:87:72:83:7a:a6:8b:5a:90:08:21:34:21:ee:cf:0d:
         db:53:00:1e:87:4f:5e:6a:76:c4:e8:44:f6:ad:3a:37:39:5f:
         3f:7a:3a:82:60:4b:70:5f:3f:70:c0:54:a9:66:3f:03:e5:e7:
         18:67:b0:4b:89:7d:ae:96:8c:94:22:07:2c:cb:28:3b:f3:d9:
         8d:cb:22:19:1d:fa:db:1c:83:d4:13:eb:be:cd:da:79:d0:ef:
         be:4b:e5:88:c4:25:1c:50:9e:f4:54:b3:85:22:22:6b:b6:eb:
         d4:97:52:bf:ca:78:bd:5b:d1:4a:ae:e2:d6:95:b7:e9:28:43:
         f4:da:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----