Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File:                     H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier:          +VgS3ujpCPsFcxFml+v834WoiMSzLdfWJqZf6TPfDlo=
Subject key identifier:   68:6B:3D:93:0F:6B:8D:06:45:8C:7B:2D:8B:09:EB:98:D6:EA:27:F7
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer:       /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial:       01962E61974A91C55E07908CF413DB97352D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number:          03B5
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: Qqg5OOWJAafzMgva4G+CQVIBzaAjsTcX1IHCxQGogFU=)
                          2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:97:4a:91:c5:5e:07:90:8c:f4:13:db:97:35:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=686b3d930f6b8d06458c7b2d8b09eb98d6ea27f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:d6:ed:7f:7e:49:05:33:ab:62:38:23:7b:
                    a6:81:09:4c:dd:82:75:3b:34:56:70:ad:89:ae:23:
                    5c:da:59:93:65:de:8f:a7:3f:fe:7a:99:7a:74:1e:
                    ac:7f:5e:6d:bf:12:40:11:b2:12:6b:3d:5a:ff:ec:
                    c5:90:31:a6:de:5c:14:64:25:4a:c9:91:78:90:76:
                    85:f8:e2:ae:7e:d6:bd:c3:84:ca:1d:55:58:bf:13:
                    d7:b4:b8:e7:4c:16:42:66:c7:06:9d:22:63:0d:d5:
                    5c:62:4f:88:3b:32:22:6e:88:3e:64:11:4d:c2:f4:
                    71:8a:5f:1e:c9:d5:c8:fc:89:5c:3c:72:2d:cc:3a:
                    db:15:5c:17:57:e8:7f:09:6c:2f:9b:06:fb:f7:41:
                    af:29:02:74:3e:3d:47:1a:01:a8:b8:62:70:02:7b:
                    4f:56:f7:26:a9:34:4c:6a:d8:4d:62:87:25:62:d3:
                    5f:5b:53:f1:67:28:64:9e:d4:c3:a8:74:e9:48:a0:
                    8b:fe:0b:f7:37:b9:b8:08:86:82:9e:16:d1:e6:37:
                    90:63:e8:cd:49:cc:7c:0a:72:0b:01:94:59:83:7a:
                    17:bd:37:25:6e:c0:31:d3:77:5a:20:38:c0:3c:61:
                    0c:d8:ab:92:ed:eb:b6:29:30:d2:aa:df:90:b9:e5:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6B:3D:93:0F:6B:8D:06:45:8C:7B:2D:8B:09:EB:98:D6:EA:27:F7
            X509v3 Authority Key Identifier:
                keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ef:98:e9:90:23:55:89:5b:18:8d:9e:17:de:36:04:d1:fe:
         b4:3d:32:c9:34:0d:1b:e2:82:ef:60:5e:1f:ff:d7:34:94:1b:
         1e:56:37:f5:b5:09:da:b5:c1:d5:70:83:45:46:f9:25:67:13:
         c6:0d:8b:40:92:31:c0:30:b4:64:43:05:71:7a:c7:ac:5c:1a:
         95:5b:75:4a:ea:be:c9:d4:9e:e9:7e:aa:d9:95:a9:ec:14:c7:
         cf:33:d8:9d:27:74:20:4c:37:ce:a0:12:33:45:00:72:99:48:
         1e:2e:88:de:ba:ea:ca:d0:2d:66:db:be:a4:e5:ed:5b:c3:16:
         3a:74:58:58:df:08:6f:f2:1d:9f:b8:8b:36:62:7c:c8:dd:85:
         93:36:2c:e1:c8:56:2a:67:6f:60:78:36:04:de:0f:66:81:8d:
         79:44:36:c0:9f:92:23:68:bc:61:40:60:05:3e:8f:01:c0:dc:
         f0:bd:7f:b0:86:4d:ed:c2:3e:a4:6e:34:75:5a:2b:48:14:0b:
         fd:45:9d:f5:d5:65:fc:52:07:e7:88:70:a7:80:81:64:97:3c:
         9f:56:01:ef:97:c8:0d:22:c1:59:66:1b:36:38:42:42:4d:d6:
         e6:70:dc:c5:43:c2:eb:79:e0:d7:05:93:3e:63:cc:60:9b:0c:
         cb:3b:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----