Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File:                     fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier:          VfXZX7Uk8M+OEkWTL/o4+gCwyD6MMj1rK5qouQQJP0I=
Subject key identifier:   B4:15:7F:FC:82:58:A9:31:07:59:CF:C6:1C:A5:46:B4:60:CD:2A:B4
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer:       /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial:       01962E98A4F73D5A7FE62592600AA14B2FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number:          0EC8
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
                          2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: pYVLAjg+scZj/d6ZXTy2fftqEPhmgatrcRBiLN2wY18=)
                          3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:f7:3d:5a:7f:e6:25:92:60:0a:a1:4b:2f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=b4157ffc8258a9310759cfc61ca546b460cd2ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:62:51:e5:7a:a2:c8:48:02:65:29:f8:80:
                    7a:2f:f5:ec:6d:05:50:8a:29:2a:63:69:45:51:47:
                    05:73:f8:08:97:dd:14:e8:cf:bc:f6:28:43:c9:4f:
                    5d:21:d3:92:ca:ec:07:9f:84:71:f7:d8:1d:d9:79:
                    e8:c1:db:26:c8:54:66:c7:8e:89:d4:c1:be:b8:f7:
                    cf:40:ee:0a:87:91:38:49:9e:c3:84:9b:8d:13:10:
                    5b:1b:b7:1e:43:b3:8d:9c:cc:d7:23:c8:00:41:cd:
                    7b:a4:f1:5f:bd:1a:09:c5:c8:38:5e:ed:35:a0:a7:
                    77:6b:eb:ad:5e:1c:1e:d1:bd:8f:63:d7:53:8c:19:
                    29:62:09:61:ba:2c:29:26:73:90:5c:74:c8:d3:42:
                    3c:51:7a:56:db:63:51:e9:36:2d:bd:93:6c:ea:dc:
                    cf:ee:ba:3d:d1:48:08:c6:48:d1:52:de:ec:b2:b3:
                    af:e5:1a:55:6e:4d:a3:4e:78:a1:f6:52:d0:14:05:
                    7f:28:01:61:c4:0a:f6:41:9f:44:6a:42:5c:8e:55:
                    7d:68:d7:6f:12:1f:77:7d:83:a0:23:db:57:01:f5:
                    ee:5a:65:87:2f:89:31:6d:82:e6:b8:4d:5d:08:8d:
                    93:f2:3e:85:c4:78:7b:1d:a9:73:8f:3e:05:89:4d:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:7F:FC:82:58:A9:31:07:59:CF:C6:1C:A5:46:B4:60:CD:2A:B4
            X509v3 Authority Key Identifier:
                keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:41:cc:9b:ce:45:c5:3d:3f:81:a9:0f:89:37:63:ee:61:
         d3:b1:6f:d2:81:77:84:7d:d2:5e:2f:4d:8f:3a:32:95:6c:21:
         6b:98:d6:32:bb:8c:e6:7a:21:c5:d9:ad:ff:84:e7:bc:4f:ef:
         be:8a:85:39:18:86:1b:ee:38:67:c0:2d:c6:69:a5:7d:bf:40:
         8c:3e:07:6f:62:1c:a7:ff:63:60:c3:70:3d:90:86:bf:9d:7b:
         33:ff:00:dd:2d:79:c4:32:41:6c:9d:ea:bf:d0:3f:11:12:f5:
         98:51:5f:10:ff:2a:22:42:04:1b:ea:68:4f:f0:60:3f:1e:c7:
         54:a8:10:75:9f:c5:a9:21:80:d2:74:7c:0f:62:22:b0:c2:42:
         a7:cb:6b:c3:01:71:9b:95:71:2e:4f:4e:ce:04:68:cf:02:00:
         4a:bc:6c:f4:ed:02:e2:5e:b1:a5:07:a7:2c:bb:d8:07:26:e9:
         22:15:fb:97:f1:34:6e:62:b8:98:3b:a6:6d:ce:36:ee:52:31:
         ea:84:82:10:39:7b:d9:93:2e:56:73:73:26:a6:0e:9b:13:aa:
         ec:fb:fb:f2:8e:2b:3e:1b:3e:de:bf:87:24:e4:1b:80:8b:6f:
         9e:cc:52:e7:95:75:00:05:9e:4c:b3:db:31:7e:5d:15:41:57:
         5b:ea:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----