Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File:                     lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier:          dQvISof87EXJya77aAfOn0lGQpm+B5naEOmgq0pwv8U=
Subject key identifier:   0E:8B:45:14:E3:DC:12:41:12:94:73:90:F6:5A:AA:7E:2E:C1:E1:2E
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       01962E2AFCA07077E336EEB5110D24B98F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number:          1116
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
                          2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
                          3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
                          4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
                          5: PMaHuXs3WWXL_wMiCfpWp06YsGo.roa (hash: 9cmCaAVftyHuRhOLzikzJqVe0HoECs2yXEC681pBBp4=)
                          6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: ATX4ffe22SyHb6M+Kino9K/Q8xk1l1kQBESCWFKyvd8=)
                          7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:a0:70:77:e3:36:ee:b5:11:0d:24:b9:8f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=0e8b4514e3dc124112947390f65aaa7e2ec1e12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:1c:03:ff:b8:ce:36:66:ae:f3:72:e4:fa:
                    66:d2:6d:45:4a:6b:9b:a9:da:72:68:c7:29:4c:04:
                    b4:a9:9e:95:36:4a:12:62:58:a2:4b:4a:58:d5:98:
                    f3:43:9b:11:9d:f2:bb:00:82:0f:d5:2e:42:a1:06:
                    dc:af:f5:c0:75:9d:76:7c:43:87:58:7b:d9:c6:58:
                    88:df:ae:c7:f2:df:f2:32:ce:00:cc:99:f4:69:eb:
                    a6:af:fa:f0:bc:15:f8:e5:80:3f:9b:21:28:bf:83:
                    ce:6f:0c:4a:4a:80:d1:db:b1:b1:60:f4:de:53:3e:
                    60:b2:0e:05:46:8e:e1:87:08:d1:20:6e:2d:9a:cc:
                    72:61:07:e5:ad:02:0f:a2:ad:75:d4:f1:70:9f:80:
                    41:58:bb:17:f1:34:1f:07:0d:54:7a:23:b9:0f:46:
                    c5:3b:b0:f5:7b:1e:02:2c:70:9d:e5:bd:c9:71:9a:
                    50:2f:a3:e0:63:fa:8d:bd:e7:00:b5:d9:f2:5d:7b:
                    a2:c6:e1:33:83:b0:6d:53:f3:28:9f:34:dc:e6:e1:
                    67:ca:80:b9:71:7d:0d:af:5f:b8:fb:bc:c4:a4:94:
                    1c:13:73:44:b7:cc:d5:d3:1b:e2:ec:27:11:04:99:
                    6c:5d:05:e3:be:5b:9e:fc:fe:42:6f:97:63:50:5a:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:45:14:E3:DC:12:41:12:94:73:90:F6:5A:AA:7E:2E:C1:E1:2E
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:12:52:62:a9:23:c4:e2:38:14:ee:59:35:8f:e2:19:e5:c1:
         ef:ce:e9:fc:bb:4c:dd:ab:84:76:87:2c:ab:46:c2:a7:fb:cc:
         9e:47:fc:24:ea:e2:41:14:49:7f:9f:3a:74:22:09:36:2b:eb:
         db:78:f6:25:ca:22:af:b3:48:e2:f6:d8:37:b1:de:f2:ae:2b:
         5e:bd:3f:d2:bd:7b:e4:4e:3f:f5:63:eb:b3:37:db:30:c2:aa:
         9b:d2:39:82:d4:72:bf:b3:13:ba:d3:fe:d7:9d:7e:a2:27:eb:
         1a:d6:92:0b:99:f3:2e:a1:63:60:96:95:77:ea:8e:f1:a7:2d:
         78:c1:24:be:af:9c:83:bf:77:1d:e5:28:00:b3:9a:56:fb:a4:
         6b:f2:ab:53:82:17:05:a3:f4:7b:ca:97:eb:3b:f9:49:5c:a5:
         e7:f5:53:62:ea:9b:53:ab:95:03:d9:ff:71:4b:0f:0f:61:80:
         12:29:d6:e3:36:95:18:df:a4:bf:cd:1a:3c:59:f5:44:14:c2:
         95:d3:7c:cb:e3:0d:aa:c7:ec:7c:89:de:35:cd:99:2f:93:b4:
         57:2e:01:03:10:60:9a:67:a1:6f:d4:70:3d:c4:af:1a:ac:c5:
         74:17:b5:b5:a9:14:58:06:00:db:61:25:63:3d:8a:a0:5e:80:
         70:40:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----