Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
File:                     Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json)
Hash identifier:          e+TL9iTN4JaNH1kshYa4gk8McnqgH3y3Lh9X1tL44yE=
Subject key identifier:   84:2F:D3:2D:E0:4E:36:B7:67:D4:92:6F:AE:AD:98:10:50:EB:83:A8
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Certificate issuer:       /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial:       01962DF42B3D4CDEC2781BEB804DCBE200FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
Manifest number:          1517
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=)
                          2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=)
                          3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=)
                          4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=)
                          5: BFNHxMvu6o_pd190MA5kHo9K38o.roa (hash: FcPSU/d4/c62liqKr9vyijfDqdlxWMulLIte1dKOTFI=)
                          6: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=)
                          7: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: JlXsgTIHF8xYCztNntL2Dj/287qWpZVFvkl5q/adGD4=)
                          8: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=)
                          9: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=)
                          10: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=)
                          11: bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa (hash: jmPCp6yXzxLJDYKrtXi4j0Nqwi74mWH6TllKsaF2WqU=)
                          12: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=)
                          13: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=)
                          14: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=)
                          15: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=)
                          16: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:3d:4c:de:c2:78:1b:eb:80:4d:cb:e2:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=842fd32de04e36b767d4926faead981050eb83a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:3a:d1:20:13:d6:5d:8c:ec:fa:0a:3a:29:
                    7e:85:80:d9:67:ba:d9:df:92:ef:28:31:22:54:f0:
                    62:48:cf:e6:89:16:2e:c1:b9:70:84:84:bf:c4:f0:
                    2a:30:7d:d8:44:b1:05:56:01:83:f2:be:42:01:1b:
                    e8:8e:8f:83:86:55:6f:f4:cf:c2:6b:cc:33:6a:79:
                    fa:2b:6a:6b:4f:da:9b:ec:f7:6e:6b:79:35:c8:ac:
                    2d:ad:82:b1:e0:7f:ce:c1:da:07:a0:46:76:03:c7:
                    d7:b0:f7:77:9c:03:bf:8d:9d:ac:17:c6:6c:6b:56:
                    ff:5b:41:f7:25:16:e6:3b:2d:7b:3c:d0:1e:34:7f:
                    50:f0:db:db:50:88:03:82:0e:ca:e3:92:b8:f8:3e:
                    1f:61:fb:5e:43:f7:79:de:1f:19:f8:93:36:8e:6c:
                    cb:22:8e:89:4e:32:90:44:82:70:8c:e2:a7:02:86:
                    8a:cc:c6:20:35:10:ec:4f:b0:d9:a5:76:38:17:52:
                    a4:75:da:62:fe:d7:c6:12:5f:9d:ad:13:79:c3:96:
                    23:ad:da:23:8f:b4:38:64:0d:9a:8e:f4:85:5e:3b:
                    82:79:65:ad:df:a1:a0:a5:cb:68:28:68:57:76:2b:
                    75:81:e0:53:3d:fb:f5:fb:06:77:76:24:91:32:50:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2F:D3:2D:E0:4E:36:B7:67:D4:92:6F:AE:AD:98:10:50:EB:83:A8
            X509v3 Authority Key Identifier:
                keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:41:b1:59:8a:16:68:1a:6c:42:9b:da:be:f4:3c:c5:e4:
         2d:e4:ad:77:8a:9c:0a:23:2e:1b:5b:c2:fd:f1:e5:63:b1:88:
         ec:fb:01:38:87:48:53:c2:4d:63:a1:fb:9a:34:a3:10:44:f7:
         f8:5c:98:b8:c5:5b:ee:1a:f8:1e:ed:f8:08:23:9b:9b:d5:2b:
         87:3a:4f:f5:40:a6:f6:33:7a:dc:ab:fe:0d:cd:d5:1b:79:81:
         1d:cf:50:ff:46:3e:62:20:77:2a:d8:22:c1:c7:e1:fb:69:e9:
         ef:f0:38:77:47:5e:fa:86:85:2f:44:0b:b1:45:ab:09:91:f5:
         ea:d4:da:7e:50:1b:18:06:ce:d3:52:1e:4c:d5:f8:ba:a7:30:
         d3:00:5a:e1:cb:85:22:26:2a:d8:c7:4f:36:e3:7d:b3:69:d2:
         1f:07:36:ac:9c:ed:a7:4d:61:cb:23:b3:71:07:b7:e4:34:84:
         7c:68:42:e2:b6:5b:9e:7b:1e:f4:81:22:1f:b9:d6:67:1b:42:
         ab:6c:d7:f8:9f:b6:c7:43:7d:20:e4:64:7f:0b:d0:d4:0d:f3:
         fc:c6:7f:f5:96:3f:02:02:eb:9c:82:2c:83:85:b9:f4:7e:d8:
         1c:0c:7f:96:47:54:d6:30:67:3b:f5:e0:2a:94:06:f3:2f:33:
         fe:02:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----