Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          dXyOoswEDSpdJV3hVbYLrSOIZTDVHQG+33Qx/WbbeK8=
Subject key identifier:   1B:EE:49:D9:39:6B:E1:A2:7E:63:3B:2C:F2:97:FB:D3:07:D0:2B:0D
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       01962F066FB2D1C660DFEDFC643E6170DD62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0A93
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: ChfZl1qZr3PGm38bZRBKCszjgdVv94me/6+xmmrQAXs=)
                          3: dansMIWsXXpDaSAy_aJZzzQS8h0.roa (hash: iHe7NlIYDFrPBEBVHgOcNEN5f7UZr+p1lUL5elNQd68=)
                          4: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:b2:d1:c6:60:df:ed:fc:64:3e:61:70:dd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=1bee49d9396be1a27e633b2cf297fbd307d02b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:60:92:2c:4a:83:03:c9:30:72:cb:cd:43:
                    dc:19:53:7d:03:a0:67:b2:9c:dd:ad:4d:a3:66:df:
                    30:85:3c:d6:d4:0e:8d:17:b6:36:bc:dc:28:61:c2:
                    57:3f:4e:ea:8d:39:11:7f:ef:d4:5a:93:ee:92:d4:
                    e4:83:a5:18:e5:0e:dc:fb:62:5e:a3:3e:84:8e:81:
                    41:d4:7d:17:ab:f6:65:74:c7:3c:a0:b5:aa:1f:f7:
                    aa:a6:20:5a:c6:58:13:2c:20:2d:03:f9:c5:65:0f:
                    fc:78:02:45:0a:26:10:96:a3:1f:f6:7c:2c:c0:ad:
                    34:a7:74:e0:d0:92:d4:4d:15:ab:e9:16:a6:20:ae:
                    61:3f:1e:ec:d6:51:b7:4d:36:01:bd:29:99:11:35:
                    bf:19:5d:17:92:26:41:30:15:17:6c:a0:9f:a7:a8:
                    31:5d:32:74:e9:09:b8:d8:4c:13:1c:0c:bc:a5:de:
                    d5:4d:50:13:24:1f:b4:71:bb:a6:e0:80:b0:73:2e:
                    55:d2:11:7a:27:2e:85:b3:d6:f6:4b:c1:1a:8d:41:
                    cb:78:cc:38:93:dd:4b:ec:ea:3f:76:3b:61:0d:ec:
                    26:0f:14:bb:0e:89:a1:8b:07:b9:fd:73:92:37:b3:
                    e9:46:17:37:90:7c:8b:d7:c9:c7:cc:16:c1:21:4b:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:49:D9:39:6B:E1:A2:7E:63:3B:2C:F2:97:FB:D3:07:D0:2B:0D
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b2:19:ad:03:8e:83:ad:97:63:55:b4:ca:93:6d:0d:fb:a2:
         56:92:65:71:cd:f3:f5:2f:96:6b:04:f9:53:59:81:6a:ce:be:
         89:3f:a3:87:3b:1c:1c:54:e4:40:24:45:06:4c:31:8e:3b:19:
         60:2e:95:ad:7e:4c:ab:5c:e5:3f:6f:75:58:d7:ef:0c:40:59:
         af:37:54:b9:75:99:05:7b:08:62:18:62:d1:a0:49:46:db:73:
         de:fc:8d:9d:9f:d1:27:fb:51:c2:11:90:eb:91:8a:24:85:73:
         47:09:39:8e:d7:ac:60:53:d9:05:67:59:f1:9c:c6:b7:eb:8b:
         9c:24:f5:c4:aa:65:b7:72:91:84:90:37:84:79:c5:03:85:0f:
         31:77:ba:62:90:0c:1b:6d:8f:71:2f:4f:e6:8e:d6:36:f0:75:
         16:2c:0d:99:0b:40:5b:b4:ed:51:5f:92:0d:69:94:c7:ca:ef:
         47:05:b2:bd:85:c7:3f:e9:9a:c0:e6:cc:76:2c:12:a8:d0:67:
         3b:8b:b0:f0:92:e2:24:99:30:b3:c0:ea:4b:8a:2d:b1:bd:af:
         e0:68:15:99:05:22:94:2a:e4:35:3b:95:78:c8:8e:bc:32:b6:
         46:25:6f:ed:bc:e4:21:55:fb:f5:d9:80:00:54:1c:de:1f:84:
         87:c6:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----