Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File:                     HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier:          juMvtB3RA6kqEl2hOFh7a9sI4WU98EyEiRO7rhmHKN0=
Subject key identifier:   94:3F:F0:48:41:AF:27:BE:77:78:BB:3A:0E:C9:A9:CB:F8:98:0D:F6
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer:       /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial:       01962F74748406F0A6232ADD8B9B62B6DC18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: K4ZjIOOeQAyCaZ6FGFsJv55kPGw3WytKrSpGNKDpocM=)
                          2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:84:06:f0:a6:23:2a:dd:8b:9b:62:b6:dc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=943ff04841af27be7778bb3a0ec9a9cbf8980df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:80:f0:19:0e:96:c6:71:3c:eb:fd:38:3a:
                    eb:1c:2e:54:a2:67:6e:dc:81:78:c0:2e:d6:16:ab:
                    7c:f3:63:dd:a8:90:b4:d7:da:02:f5:41:71:48:bd:
                    ef:8b:71:85:e7:6e:0d:02:eb:a9:ef:10:8b:e7:62:
                    fd:83:1c:27:67:ec:f5:04:7f:13:f3:fb:5a:65:52:
                    97:84:16:6c:ff:83:47:8e:63:d7:c3:6f:c0:4e:bb:
                    35:1d:75:20:f8:48:f8:fa:34:2e:6c:5a:aa:27:94:
                    df:b7:e2:71:f4:3f:60:99:6c:75:81:96:83:00:2e:
                    ef:bc:19:03:84:de:bc:b9:bf:76:30:7d:c9:6b:51:
                    6f:92:e7:b4:e1:23:d0:fb:bb:ff:98:60:5f:1b:3c:
                    b0:d3:f1:6b:90:84:19:14:62:d8:8f:04:b0:84:0d:
                    2a:1f:fc:37:9f:4b:de:55:10:6a:74:14:ea:81:82:
                    b1:7c:61:eb:7a:12:4d:c3:05:87:fa:cf:69:23:6c:
                    7f:9a:c8:67:b4:21:5b:0a:44:92:6a:58:54:f0:4a:
                    c0:c9:bd:b2:96:e9:4f:b8:6d:60:d7:0e:1e:de:b6:
                    0a:32:21:55:74:0e:f2:41:0e:99:4a:a7:2b:83:db:
                    c3:07:ff:a8:79:15:b6:a7:62:4c:1a:c4:87:eb:fd:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3F:F0:48:41:AF:27:BE:77:78:BB:3A:0E:C9:A9:CB:F8:98:0D:F6
            X509v3 Authority Key Identifier:
                keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:86:03:ea:24:a1:d7:f2:84:8a:cd:80:81:22:3b:ba:80:
         d8:40:14:a6:87:0e:5f:6d:17:cf:9e:b9:4a:4b:a8:66:b3:db:
         1b:50:14:8b:04:2b:53:89:bf:77:81:eb:ed:fc:84:bf:fb:14:
         10:a3:ff:fe:e5:cd:cf:5e:b0:8b:64:30:b9:2d:f2:44:eb:e5:
         33:0d:4a:53:00:5d:a3:10:e9:6b:20:3a:a8:c3:1b:f5:75:b7:
         9b:26:c0:3f:eb:0e:3a:9c:68:0d:91:82:e9:40:a3:44:65:08:
         b2:42:81:88:fc:61:ba:90:cf:38:3d:55:18:50:56:4f:48:30:
         da:59:7b:bd:4e:17:30:35:6b:96:82:2a:c4:42:d7:04:e9:d6:
         06:5a:d1:a3:9a:49:df:b7:8d:66:bb:dd:b0:fe:45:31:47:95:
         66:41:ee:81:78:d4:21:e0:20:08:ae:cc:3d:98:7f:f3:b3:4c:
         28:b8:a4:b8:3f:36:02:88:07:b8:e2:b7:85:55:1b:cb:08:df:
         44:41:76:40:f8:6f:93:3b:52:8c:ba:4a:a9:aa:85:d8:2c:11:
         7e:1c:21:63:bb:f6:ca:32:fd:bf:99:0e:b7:f9:1b:b5:5d:42:
         b8:fe:99:ff:40:89:e3:40:a4:22:a3:bc:ff:cf:55:49:94:22:
         6d:ca:40:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHSEBvCmIyrdi5tittwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0
ZmQ2NWQwHhcNMjUwNDEzMTQwMTIzWhcNMjUwNDE0MTQwMTIzWjAzMTEwLwYDVQQD
Eyg5NDNmZjA0ODQxYWYyN2JlNzc3OGJiM2EwZWM5YTljYmY4OTgwZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYmA8BkOlsZxPOv9ODrrHC5Uomdu
3IF4wC7WFqt882PdqJC019oC9UFxSL3vi3GF524NAuup7xCL52L9gxwnZ+z1BH8T
8/taZVKXhBZs/4NHjmPXw2/ATrs1HXUg+Ej4+jQubFqqJ5Tft+Jx9D9gmWx1gZaD
AC7vvBkDhN68ub92MH3Ja1Fvkue04SPQ+7v/mGBfGzyw0/FrkIQZFGLYjwSwhA0q
H/w3n0veVRBqdBTqgYKxfGHrehJNwwWH+s9pI2x/mshntCFbCkSSalhU8ErAyb2y
lulPuG1g1w4e3rYKMiFVdA7yQQ6ZSqcrg9vDB/+oeRW2p2JMGsSH6/2C4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ/8EhBrye+d3i7Og7Jqcv4mA32MB8GA1UdIwQY
MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt
NWMwZDA1N2VmMmE2LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2
LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3OGA+ok
odfyhIrNgIEiO7qA2EAUpocOX20Xz565SkuoZrPbG1AUiwQrU4m/d4Hr7fyEv/sU
EKP//uXNz16wi2QwuS3yROvlMw1KUwBdoxDpayA6qMMb9XW3mybAP+sOOpxoDZGC
6UCjRGUIskKBiPxhupDPOD1VGFBWT0gw2ll7vU4XMDVrloIqxELXBOnWBlrRo5pJ
37eNZrvdsP5FMUeVZkHugXjUIeAgCK7MPZh/87NMKLikuD82AogHuOK3hVUbywjf
REF2QPhvkztSjLpKqaqF2CwRfhwhY7v2yjL9v5kOt/kbtV1CuP6Z/0CJ40CkIqO8
/89VSZQibcpAHg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net