Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          ZWrKU6fgyDPKeblvjW+BaDjF/iVXGMul1iMZAUFpmoU=
Subject key identifier:   F9:77:33:9F:9E:76:55:C2:DC:E2:F2:14:BC:C7:E6:74:63:0F:71:DA
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       01962F06D63577D6EA5120440398007FF38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          11BF
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
                          2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: TzcUhsV/Mgp9k5HEH1zEVD9Ooe6K6/Ut+ftdPGdZXEc=)
                          3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
                          4: HiXwFWaPzRWDb6Zauf5Z5EdAs3E.roa (hash: 74lujDzOZ3dVJtH+CV4yLBEU59EeNeO0W4GkJWf9zl0=)
                          5: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
                          6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
                          7: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (hash: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=)
                          8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:35:77:d6:ea:51:20:44:03:98:00:7f:f3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=f977339f9e7655c2dce2f214bcc7e674630f71da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:1e:2b:3b:cd:16:02:86:46:14:8b:7b:dd:
                    19:a4:aa:87:a0:cd:68:b9:e0:89:6a:94:86:38:aa:
                    ae:0f:f2:51:2d:f8:63:9c:2c:2c:7a:1f:ee:19:d1:
                    38:b8:ed:ac:1f:f5:41:36:a8:9f:f6:c9:d0:36:3d:
                    61:1f:8c:dc:3d:96:9d:f0:35:52:f8:33:15:92:19:
                    a2:f4:75:ce:1b:cb:88:79:18:4a:c5:f4:e7:61:a3:
                    5e:eb:ac:8d:c8:67:65:26:b1:0d:fe:bf:e2:36:ad:
                    4a:64:6f:d2:fe:fc:6d:52:21:ea:09:96:51:2f:61:
                    96:7f:7a:cc:b7:b1:b9:41:f0:cf:37:6a:f0:6e:d5:
                    14:dc:e6:84:ff:03:4e:d9:e4:66:ac:ed:a2:5f:3a:
                    61:d2:9d:8b:ce:26:99:a1:0c:95:c8:02:14:59:81:
                    e3:f2:58:99:c1:c8:72:9e:a9:d0:41:eb:6b:66:fd:
                    db:bc:87:9b:19:90:49:c6:8d:2a:98:2c:92:7b:69:
                    b7:33:d6:d5:0f:44:ad:1c:d3:5d:f5:20:a8:1a:45:
                    70:a7:22:8b:17:bd:07:40:5b:b5:dc:7f:19:a6:60:
                    88:c9:d0:7a:67:4f:cd:04:84:1b:38:0e:e3:36:27:
                    fb:99:17:89:9d:8a:b2:17:24:8a:de:3d:72:c6:13:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:33:9F:9E:76:55:C2:DC:E2:F2:14:BC:C7:E6:74:63:0F:71:DA
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:04:91:78:f1:40:60:86:f5:51:29:b3:6e:d5:49:c8:9c:
         31:52:c8:ac:b6:03:88:e0:fa:14:f5:5b:2c:2c:e8:66:95:1f:
         b8:d9:99:ea:8c:a0:08:33:8b:04:5e:72:5d:54:74:64:79:52:
         f5:d8:76:dd:f8:49:4a:e7:8a:15:59:82:b9:8f:cc:f6:a6:38:
         d5:2d:ff:f1:54:c0:31:91:6f:c1:17:49:a9:ab:3d:17:f8:c7:
         52:f9:c4:e3:7f:3e:4b:ba:d9:a7:bc:c7:29:36:b3:3e:12:3e:
         ac:86:61:23:59:ec:36:1a:47:f9:18:60:89:f2:67:ca:45:71:
         01:99:49:a3:f1:f4:be:e8:c1:72:dc:fa:ac:de:cc:48:88:23:
         3c:96:10:d1:2e:a8:42:71:f7:40:b7:87:dd:8c:ef:d5:cf:fc:
         b0:29:72:78:57:82:cf:46:63:af:74:f8:2e:92:fc:b2:97:d1:
         77:1d:51:84:2d:92:b4:0f:7b:21:87:dc:53:8c:4a:de:2c:f7:
         3c:92:53:1e:df:40:c3:20:42:ad:f0:55:09:8b:67:47:6d:7a:
         57:67:94:32:77:4d:31:3b:76:a2:e6:ed:e2:ea:2b:35:08:40:
         e5:5c:53:cd:91:d3:14:f3:05:23:45:af:d9:7a:8e:12:41:37:
         90:f0:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----