Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File:                     hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier:          rt84VwTk65W35fkjsvoc0J0wG1P0mrEw1Lh+rdWqvbM=
Subject key identifier:   0E:E1:D4:82:6D:F9:BE:6F:06:3C:96:07:6A:72:F9:D8:A3:A3:D3:64
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer:       /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial:       01962DF4269AFF9EF47FEAA3B432CDEC1F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number:          156A
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (hash: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=)
                          2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=)
                          3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=)
                          4: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=)
                          5: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=)
                          6: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=)
                          7: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: qD+AGppmuKw1j5FfaTXrzUCCYiDzyHYXy2XT10RGQWk=)
                          8: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=)
                          9: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=)
                          10: sMCSmLssLrgia16zJI5XE9yo4Pc.roa (hash: PFtIIur3mQmVxOsLtK02cY2okE4kZ+3bYDiOKr8hnFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:9a:ff:9e:f4:7f:ea:a3:b4:32:cd:ec:1f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=0ee1d4826df9be6f063c96076a72f9d8a3a3d364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:e3:81:66:13:52:34:bd:06:d8:41:a4:6d:
                    27:8d:3e:98:bd:0d:5c:b7:3e:d6:94:b2:21:14:7e:
                    c8:2e:95:0e:30:3d:d1:a9:fa:20:85:08:1f:c2:57:
                    bd:ee:c4:05:51:5b:29:51:d8:0f:51:e2:9d:18:20:
                    f5:0b:00:d3:82:d7:9d:3a:25:4d:4c:29:3c:3e:a2:
                    c2:1a:54:50:d1:b3:6a:59:d0:15:fc:f4:bf:d1:49:
                    65:6f:f4:3e:17:c0:0f:f6:31:92:a7:29:f8:1c:af:
                    03:24:76:f1:fb:52:54:88:45:31:76:ab:0f:d7:49:
                    0b:a4:b0:48:ef:37:0e:dc:56:fa:a6:4f:0d:23:d5:
                    3a:54:a2:de:c0:3f:3c:9e:20:f8:0c:cb:1a:b6:fd:
                    d0:e5:0c:18:0d:09:94:76:19:f8:38:c4:ec:30:7d:
                    fb:1f:dc:7c:01:b6:f6:3f:51:75:f8:2e:63:3c:d0:
                    cf:76:94:17:9d:8f:20:ce:e5:5c:f8:49:57:cf:7f:
                    1e:6b:09:ea:de:6d:9f:67:de:6e:e9:f9:c8:11:92:
                    60:e7:05:41:44:df:73:82:61:28:8d:59:22:76:00:
                    0f:af:af:27:b7:ec:96:39:7f:d1:0a:17:cf:78:b7:
                    b4:f3:95:bb:9e:3e:67:43:7e:f7:9c:d3:85:76:16:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:D4:82:6D:F9:BE:6F:06:3C:96:07:6A:72:F9:D8:A3:A3:D3:64
            X509v3 Authority Key Identifier:
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:45:3d:88:5e:3b:df:50:36:4d:79:50:a4:af:b9:50:b7:9f:
         91:0f:c3:d1:b6:7f:a2:cf:37:2b:81:40:e2:fc:7f:13:f0:75:
         5e:0b:91:47:ba:e0:f9:94:db:5d:23:f1:f4:14:17:3d:ae:08:
         91:e5:03:fb:a1:e1:4e:34:61:61:30:df:8f:66:d7:ff:ab:b7:
         96:01:cb:14:59:08:97:51:93:87:8c:5d:71:8b:cd:49:ce:82:
         a2:1d:d8:b2:a8:83:70:52:28:74:15:9d:8a:4b:3c:e8:1d:55:
         8f:57:aa:cc:3b:27:83:c0:13:d8:36:42:c4:33:62:c4:85:a1:
         3c:54:3b:49:d6:fc:be:e0:48:8d:a4:47:69:6e:52:22:87:69:
         a3:c4:e4:b2:0c:9e:f7:ce:93:87:c0:2a:da:c9:cb:fb:41:d0:
         b7:05:8d:95:3f:11:e6:1e:17:a5:3b:d8:1b:85:c4:e0:04:a2:
         61:00:92:35:86:a7:67:94:60:06:87:a0:89:b2:f9:cd:6b:13:
         86:9b:c0:fe:f9:d3:63:30:92:83:7e:47:d1:ce:c0:33:9e:97:
         e0:11:a1:74:50:7f:c7:d3:b4:a0:b3:e8:d6:cc:b0:91:49:68:
         a1:3a:cd:27:3c:93:d2:f0:22:f8:a0:e2:a4:f6:28:5d:0a:6d:
         d7:f7:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----