Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File:                     HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier:          LtdqWL/yuPcaUSwicqGrJnp/C8dcz6gRlDAupbAym8k=
Subject key identifier:   DE:63:6F:56:90:2F:9D:D5:48:B1:5A:7D:88:7D:E5:76:4D:21:94:5A
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer:       /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial:       01962E991D932C70DA744A98215741F3E331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number:          0DF5
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: zLbjjhaQikwQtNSWXe73Yo8tMknmC4f36J+nMInX0vY=)
                          2: nWIGQEEDzaoVvT_y5hPxRiP1qn8.roa (hash: uGDWeypcq1B/eKXj8B8fn9FgOmQqtHY/Hs+n7XduT00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:93:2c:70:da:74:4a:98:21:57:41:f3:e3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=de636f56902f9dd548b15a7d887de5764d21945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:34:cd:22:4c:7e:68:8f:56:af:df:19:f0:
                    16:3a:5a:45:e7:db:bc:68:26:c2:31:df:d6:79:b9:
                    c8:78:3f:ce:ab:ba:ba:3e:86:e1:0b:0f:7f:9f:25:
                    d1:ac:67:fb:a5:c4:f5:5b:22:51:6d:e5:93:b3:10:
                    3f:bd:fe:7e:2b:a2:0f:75:af:d2:95:5d:87:02:e9:
                    c2:c6:3c:9d:2d:bc:99:59:ff:b0:e0:3a:77:f3:b2:
                    51:a6:13:b6:f0:b4:96:83:07:3d:fa:de:e8:44:63:
                    12:c5:2d:db:b0:25:5f:9a:ec:ec:c7:57:11:48:00:
                    ba:70:e9:df:5c:9f:34:e0:d5:32:de:25:0c:23:4f:
                    f8:09:72:8a:fc:0a:2d:76:bd:7f:ed:f4:13:a4:09:
                    5e:62:13:c8:f0:d6:a8:f9:df:83:74:2c:a3:fe:65:
                    78:46:37:20:9c:cb:78:93:33:b7:6a:b3:5d:db:e8:
                    b4:cc:0a:bb:3a:45:95:34:3f:94:bc:31:4c:f5:ca:
                    27:a9:ee:1f:4a:91:d9:0e:23:f7:30:dc:31:ec:b5:
                    90:e3:a0:f3:cf:c2:c3:0b:42:64:fb:64:da:69:2b:
                    e7:b9:b7:e3:df:04:e5:a2:a6:df:ed:e2:83:3c:5e:
                    fc:a2:d9:e6:05:03:73:91:5f:57:47:bd:71:b3:0e:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:6F:56:90:2F:9D:D5:48:B1:5A:7D:88:7D:E5:76:4D:21:94:5A
            X509v3 Authority Key Identifier:
                keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:58:65:c2:3c:a6:27:8b:a5:ef:48:02:45:5a:27:18:a3:57:
         37:ba:c2:34:8b:68:40:ca:98:c9:59:39:83:15:3e:7f:d1:8f:
         c8:98:12:b4:57:c9:8d:03:03:f5:bf:ce:60:df:01:3d:d8:ae:
         77:28:ca:dc:74:3d:a5:cc:2c:b2:5c:75:9f:8f:63:29:d6:0b:
         ca:04:3a:3f:53:a6:97:7d:0a:3c:d2:1a:76:d0:8f:f0:6f:97:
         d0:76:59:9f:c5:99:ff:41:cd:89:46:19:7d:08:5c:0d:6a:93:
         98:fc:c0:20:8c:12:54:d8:a8:c4:fe:8a:a9:eb:f0:74:b7:11:
         8f:93:ae:3f:83:cc:8c:6e:c4:a2:e4:fd:6e:11:f6:21:ee:f9:
         29:ab:bf:e7:52:66:fb:df:60:11:a1:64:3e:ff:d7:04:c6:6a:
         95:d1:e8:ae:d5:0a:ee:e6:f2:f6:d1:64:45:b4:63:7a:41:c9:
         7f:6e:81:60:8c:28:96:01:74:e5:5d:c8:5f:ce:55:fe:66:2e:
         45:8c:a7:0c:45:61:23:b7:eb:cf:be:b3:ed:3f:bf:54:ef:68:
         1f:7f:93:a0:9b:8e:da:4e:eb:a6:31:bb:4a:64:a7:5b:8b:14:
         35:07:84:6b:21:a5:84:7b:a1:52:77:11:bf:8d:c8:f4:89:17:
         be:59:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----