Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          uWfPqg0bWXziAQ75DQug/h3QmT/HTurJP+x52osYrIw=
Subject key identifier:   1F:AA:38:60:43:58:9D:72:B9:3F:C9:82:59:BA:63:8E:6B:11:6E:93
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       01962F3D3B7B205F043D0AFA1C6E8652BFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          0A31
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
                          2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
                          3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: ggZEgY2bzHKxh6+t8FmODXAf7nWvtHOkPdTONIuUTAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:7b:20:5f:04:3d:0a:fa:1c:6e:86:52:bf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=1faa386043589d72b93fc98259ba638e6b116e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:83:c9:b0:82:e2:f1:3d:13:1d:ce:ac:8a:
                    81:3f:9c:32:c5:3e:ff:2d:29:b7:99:1e:6a:7d:44:
                    a3:e1:21:f5:58:2a:09:41:19:0c:b3:2a:d2:cc:a3:
                    75:31:7d:51:0f:b4:a4:16:46:26:41:4f:f3:9f:08:
                    9e:bb:74:b9:a3:84:2c:0b:85:58:04:40:73:b6:1c:
                    b3:22:a8:aa:40:2a:74:e6:01:12:13:22:ab:87:da:
                    c0:70:81:cb:2d:78:7d:fd:13:f2:7f:6d:32:24:0d:
                    7a:90:52:e6:b0:0b:a3:95:3d:42:44:92:5e:5c:87:
                    93:17:dc:ba:f7:cc:36:2f:e2:5b:ac:76:50:88:39:
                    12:d1:41:c7:d9:83:a5:ac:79:73:1a:a1:e0:02:b7:
                    be:38:0b:89:ce:38:44:c2:d7:03:b0:c8:35:a4:c0:
                    db:bf:c5:2b:35:fd:99:2d:d6:ed:4a:ab:e5:41:45:
                    be:2c:ef:bb:7b:83:15:5e:16:dd:d4:2a:0b:96:2f:
                    17:85:83:ae:39:b3:b5:48:3e:14:39:99:89:41:d8:
                    86:dc:bc:db:89:0f:aa:52:8c:6d:b0:c7:1e:11:7f:
                    fd:05:b1:dd:89:09:28:16:6f:f1:d1:b7:fc:fc:2a:
                    d8:74:61:bf:f7:d9:e5:54:e1:96:f5:2f:42:92:a6:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AA:38:60:43:58:9D:72:B9:3F:C9:82:59:BA:63:8E:6B:11:6E:93
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:93:4c:ba:9c:6a:ef:46:23:67:6f:48:08:6a:73:eb:d7:7c:
         0a:c8:20:c4:54:ce:d4:33:e1:4e:44:b2:d7:47:9e:18:e5:d3:
         4d:78:65:9e:0a:8f:02:f7:88:6a:f6:83:58:75:18:15:56:12:
         4a:d6:74:b4:5e:30:3c:71:bf:61:0b:aa:5f:bc:9b:93:e9:9b:
         76:12:0f:0f:ed:c7:76:fb:84:93:4a:ca:0a:42:12:ad:b7:95:
         de:2b:95:07:0c:09:5a:54:28:26:ee:57:2a:5d:15:78:c7:c2:
         47:d4:6c:f0:de:c6:05:cf:d7:81:03:f6:b8:94:6b:b8:ed:d8:
         39:f4:d1:74:7e:59:a3:92:d1:13:46:c7:f7:d3:e0:f0:96:dd:
         0b:36:e3:ea:44:f8:31:f4:ca:e6:98:7a:99:c9:4e:6e:df:5a:
         27:dd:b6:8a:57:a3:90:c9:7b:23:e4:b1:9c:32:d3:e5:b9:45:
         4b:15:8a:2c:65:22:05:73:85:1a:60:b4:0a:b0:20:9b:c1:21:
         8e:78:a1:1f:d8:e1:ed:7b:7a:dc:92:84:df:a0:43:91:d0:9a:
         74:a0:86:11:00:45:56:8b:be:0e:56:67:79:fd:3c:7b:da:df:
         f5:6d:90:12:02:7d:5a:6c:f5:79:af:f7:c4:24:a3:a2:84:51:
         62:40:24:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTt7IF8EPQr6HG6GUr/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm
YzE3ZGQwHhcNMjUwNDEzMTMwMTA0WhcNMjUwNDE0MTMwMTA0WjAzMTEwLwYDVQQD
EygxZmFhMzg2MDQzNTg5ZDcyYjkzZmM5ODI1OWJhNjM4ZTZiMTE2ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqqDybCC4vE9Ex3OrIqBP5wyxT7/
LSm3mR5qfUSj4SH1WCoJQRkMsyrSzKN1MX1RD7SkFkYmQU/znwieu3S5o4QsC4VY
BEBzthyzIqiqQCp05gESEyKrh9rAcIHLLXh9/RPyf20yJA16kFLmsAujlT1CRJJe
XIeTF9y698w2L+JbrHZQiDkS0UHH2YOlrHlzGqHgAre+OAuJzjhEwtcDsMg1pMDb
v8UrNf2ZLdbtSqvlQUW+LO+7e4MVXhbd1CoLli8XhYOuObO1SD4UOZmJQdiG3Lzb
iQ+qUoxtsMceEX/9BbHdiQkoFm/x0bf8/CrYdGG/99nlVOGW9S9Ckqa9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+qOGBDWJ1yuT/Jglm6Y45rEW6TMB8GA1UdIwQY
MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt
MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl
LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpNMupxq
70YjZ29ICGpz69d8CsggxFTO1DPhTkSy10eeGOXTTXhlngqPAveIavaDWHUYFVYS
StZ0tF4wPHG/YQuqX7ybk+mbdhIPD+3HdvuEk0rKCkISrbeV3iuVBwwJWlQoJu5X
Kl0VeMfCR9Rs8N7GBc/XgQP2uJRruO3YOfTRdH5Zo5LRE0bH99Pg8JbdCzbj6kT4
MfTK5ph6mclObt9aJ922ilejkMl7I+SxnDLT5blFSxWKLGUiBXOFGmC0CrAgm8Eh
jnihH9jh7Xt63JKE36BDkdCadKCGEQBFVou+DlZnef08e9rf9W2QEgJ9Wmz1ea/3
xCSjooRRYkAkyw==
-----END CERTIFICATE-----