Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File:                     H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier:          p9UyIqjnq5OAuKQB9FBevLicQfK3Udvs75PM7g63LWQ=
Subject key identifier:   A4:83:1E:53:CC:FF:09:1C:3D:81:62:8E:1E:8A:C7:D3:09:D8:D1:31
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer:       /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial:       01962FAB98A4C61677A11055D195E269D852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: QtaLrxR4HqqrE8jnwz5lIvGJTzdz84iBhK2Rs9M/Aak=)
                          2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:98:a4:c6:16:77:a1:10:55:d1:95:e2:69:d8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f74988332069e1835246a85a1094125152b3765
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=a4831e53ccff091c3d81628e1e8ac7d309d8d131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:e2:4b:e5:d0:94:2f:80:d6:26:a7:0c:a6:
                    38:2f:36:95:98:a5:f7:29:7a:22:92:91:54:e0:e6:
                    c9:2e:e9:56:3f:f4:5c:8e:b5:50:bd:8e:47:bf:63:
                    e6:f2:75:bb:30:49:f0:4d:38:84:8d:cb:05:27:4a:
                    bc:f4:02:c3:d2:c2:11:65:41:c9:bf:56:c2:a2:da:
                    bc:8d:47:59:82:a7:d9:ff:c8:86:e5:9d:4d:9d:3b:
                    9d:33:c8:75:e6:32:e2:55:f7:05:02:eb:ec:d4:e7:
                    c6:a0:86:ab:ca:50:a6:e4:c2:f8:10:36:ed:97:a8:
                    f9:a8:29:aa:b0:2a:8a:fc:ad:fc:f9:dc:ba:58:88:
                    b3:9a:58:99:4f:17:9b:50:cd:de:09:5a:c9:79:d2:
                    f5:ef:0a:2c:81:ce:dd:a5:51:29:fc:90:ac:ad:67:
                    78:6b:08:db:e9:8c:fb:4f:21:13:27:6f:b4:bb:37:
                    11:cd:9e:78:f0:87:80:ca:3a:94:73:70:07:1c:00:
                    9d:b6:34:ba:50:ff:89:e4:4a:d9:92:50:0b:89:f1:
                    2c:61:59:7f:ad:e3:64:97:23:a5:e6:44:e8:8d:34:
                    19:a4:82:e4:de:8e:4f:c8:8b:9c:a2:2a:a2:92:2f:
                    73:5f:30:2d:e7:78:f0:7e:14:2d:10:99:27:0a:19:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:83:1E:53:CC:FF:09:1C:3D:81:62:8E:1E:8A:C7:D3:09:D8:D1:31
            X509v3 Authority Key Identifier:
                keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:19:fc:58:16:63:61:fd:f3:6a:9a:7b:f8:6a:2f:74:6e:e8:
         1e:af:20:f5:5b:f9:7c:ed:da:24:ca:0c:9e:7c:03:47:5e:02:
         90:eb:33:b1:b5:82:66:82:ac:45:c8:d0:78:aa:ed:83:af:2a:
         e7:42:6e:81:29:fe:ff:3d:dc:dc:f4:5d:16:d4:2b:21:d7:91:
         da:b2:fe:22:ec:e7:dc:e0:8f:ad:20:4c:78:ff:a9:d9:98:2f:
         bc:45:63:5d:e5:1a:4f:1d:43:83:9a:a5:17:d4:2a:ec:56:69:
         6f:38:b0:5d:18:51:a5:a0:e0:04:29:fa:9e:8d:90:43:7e:07:
         68:41:9f:76:23:79:06:7d:23:de:f1:ad:dc:f2:10:81:9f:ad:
         e0:69:41:5c:a5:2e:0b:ea:7b:2a:98:80:94:ae:0e:db:b6:df:
         e0:ae:41:f0:b1:f5:0d:95:86:b0:e7:ec:df:81:d3:36:3f:e4:
         59:fc:8b:e7:66:7d:2a:90:ff:9e:d4:bc:9e:cd:37:44:9e:08:
         f3:ac:23:ff:91:d6:5b:55:ea:8b:96:9d:f9:62:f9:0a:56:81:
         c0:fb:b5:ec:36:f6:c7:b6:16:d2:9c:08:07:85:6a:94:25:6f:
         66:6a:21:d9:b6:2a:c4:56:a2:61:49:9c:02:2e:90:99:d4:34:
         d6:48:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----