Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File:                     HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier:          A8i4RfEAVtOb96SXSi7qMp3LHvfzQZUi0kNBb64gP/U=
Subject key identifier:   5A:87:16:34:CE:DE:B7:09:E5:98:17:9A:15:7D:7B:EA:4C:30:59:51
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer:       /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial:       01962E2B2AD7A9AC1E0933B12BD6A3945813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number:          0BA8
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: qi5DA064tsXGfOzbFICN2n/bDCjPqZt6PFCUqF0GJLE=)
                          2: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
                          3: mWerV9ecmS13bC31nbnCHc6FJxA.roa (hash: rKACMdpnyV7aqjlY5sgpyk7TvN/15ypEQqYmvbC0Kys=)
                          4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:d7:a9:ac:1e:09:33:b1:2b:d6:a3:94:58:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=5a871634cedeb709e598179a157d7bea4c305951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:af:f8:f2:bf:66:97:5e:61:4a:11:6c:56:
                    76:37:4e:6e:34:bc:5e:eb:7d:c4:c9:dc:c5:fd:23:
                    f5:c1:e4:1d:35:fb:24:61:6d:21:d8:3a:98:d2:e9:
                    f0:ca:a3:2a:44:7e:b2:ae:44:c1:46:10:dd:bc:ee:
                    29:66:74:ca:3f:6b:f2:7a:09:ff:b9:f8:a4:2b:2f:
                    02:e8:2f:65:c5:d3:17:8e:ad:c6:19:61:00:27:9e:
                    98:65:98:d7:a3:84:a4:ae:34:aa:a6:35:07:08:c1:
                    55:ac:54:80:23:0d:3c:3d:93:21:76:0c:69:a8:7b:
                    98:4e:45:12:87:da:e1:4a:a1:44:68:78:74:6d:eb:
                    f2:ed:1c:13:f7:f6:b5:d8:ce:30:70:26:fd:6f:50:
                    13:a5:ac:83:24:20:23:05:4f:8f:e3:f4:7b:55:30:
                    e1:53:9f:b5:d3:7f:fe:6d:08:37:26:d4:05:77:7d:
                    37:82:65:70:05:a7:b8:60:58:92:26:85:be:e8:f3:
                    6f:89:d7:a0:13:c6:90:8b:00:f8:97:75:ae:32:94:
                    50:5e:2a:a8:06:21:55:62:01:44:c8:49:67:6a:b0:
                    1b:26:ad:83:32:97:c8:9e:7b:df:11:16:61:d8:aa:
                    21:6c:0d:99:52:f2:70:09:05:0d:e7:67:ff:c1:c7:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:16:34:CE:DE:B7:09:E5:98:17:9A:15:7D:7B:EA:4C:30:59:51
            X509v3 Authority Key Identifier:
                keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:ea:2a:dc:3e:7a:91:4e:f1:72:4f:3a:a5:5d:13:37:c8:
         93:a7:91:60:f3:e4:9c:28:fe:2d:2a:c5:97:4e:d5:bb:85:01:
         ea:28:5a:f1:02:29:7a:e9:45:bc:7b:c0:94:35:54:5b:7e:c5:
         24:c7:c7:78:74:fa:d0:52:0e:ea:8f:da:61:dd:a2:a8:fd:bd:
         4b:b6:a4:13:d5:23:df:7b:0d:97:f3:50:b8:68:8a:e4:93:14:
         7c:21:3a:f4:d3:85:28:52:f0:8b:be:6d:31:0c:63:ac:4e:88:
         0e:6e:8d:35:46:18:7f:6b:ae:39:09:66:7b:43:95:19:b5:f2:
         f4:77:b0:ce:95:9f:d0:a8:18:7e:e7:67:7b:25:5f:fe:66:2e:
         87:52:f6:5d:f2:5a:99:81:0a:75:9f:4b:9f:50:49:e3:9f:2a:
         99:10:af:2f:c6:2e:23:42:26:40:a9:fa:54:07:c1:3e:05:78:
         d9:97:57:3f:c1:53:54:69:3b:f3:12:ef:82:16:74:b9:eb:38:
         b6:f9:02:e9:7e:dd:ff:da:4d:a0:28:71:2b:90:07:58:cd:4a:
         7f:57:4b:ae:2f:58:48:9d:9a:1c:11:68:46:1c:e3:96:ac:58:
         37:e4:66:c2:8b:14:c9:7e:36:38:3a:a3:27:83:72:ef:3d:01:
         be:80:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----