Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File:                     hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier:          y0KxHq5yvRiNkziT0N4HC4jARG4l9GlHFEiSLwIMvtI=
Subject key identifier:   4E:75:FD:62:4D:DA:28:2C:9F:7B:90:13:A4:0D:14:CF:48:13:F1:F4
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer:       /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial:       01962FAB743743E41101D23A4ECA33A2AFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number:          0AE9
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
                          2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: BoA/A6Bh7Ps8KW/MnSfMPAGSm3EYB5j5ZjrknIJuRYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:37:43:e4:11:01:d2:3a:4e:ca:33:a2:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=4e75fd624dda282c9f7b9013a40d14cf4813f1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:1f:02:29:69:b0:19:4d:a2:43:7b:a3:1a:
                    d6:5b:78:e8:e4:ad:1c:a5:24:34:99:10:21:2e:12:
                    de:a2:57:c6:fc:8a:b3:04:27:25:45:19:22:5f:10:
                    c3:ad:8c:95:ce:1c:e7:34:1f:91:43:15:77:eb:29:
                    19:d0:d9:06:ab:a4:9b:86:54:51:94:84:14:f9:5a:
                    03:b7:5b:5d:f2:0a:53:82:83:dc:c6:de:72:93:0e:
                    b3:14:fc:57:b5:1b:4e:4d:ef:f8:bd:6e:cd:ca:98:
                    19:84:cb:cc:be:95:5b:27:00:3f:63:1d:d8:14:5c:
                    80:9a:ef:a5:e1:f4:50:d1:a9:97:9d:ef:65:71:39:
                    c6:27:b5:32:0c:57:06:72:26:1b:5e:08:75:3e:73:
                    c1:f2:82:92:af:e1:bb:99:41:e9:c5:f0:29:35:77:
                    1b:60:ee:65:89:b7:e4:dd:82:5b:64:0f:a8:47:4c:
                    65:25:7c:4e:7f:62:29:e2:0f:49:79:9c:68:05:9f:
                    62:0a:7e:1a:c6:eb:0a:2b:96:81:aa:90:c9:2e:ff:
                    89:b8:cf:90:d4:a1:8c:ec:1a:7f:65:ad:ac:1e:85:
                    bf:de:11:b7:31:77:b1:c4:89:28:35:96:9b:47:d0:
                    35:c2:82:fc:7c:51:17:3f:e2:50:34:c7:8b:e7:0f:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:75:FD:62:4D:DA:28:2C:9F:7B:90:13:A4:0D:14:CF:48:13:F1:F4
            X509v3 Authority Key Identifier:
                keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:43:96:97:48:b1:08:11:7f:55:06:82:ab:ef:0b:46:5f:
         97:85:98:85:ca:06:c9:90:46:d8:a9:16:50:4d:93:08:ca:94:
         77:37:25:51:b1:fa:6e:ef:fc:6d:1e:6c:ab:6a:cd:8f:5d:79:
         01:bd:a5:1a:1b:04:87:65:19:f6:08:96:9e:f0:ba:45:38:9d:
         61:9a:06:e3:4a:5c:d2:1b:00:d5:99:72:b8:44:40:3a:2b:5b:
         07:dc:ae:10:c1:67:70:70:94:92:f9:f0:37:bc:db:fb:47:e1:
         4f:ea:ae:7e:d9:8d:c3:d8:41:a6:79:c1:b1:f1:cd:2b:e1:a5:
         ca:23:92:4b:96:c9:ea:5c:75:3a:ab:c3:6a:7c:22:54:98:ba:
         de:5f:3e:24:34:ac:92:1b:b8:8f:68:d5:8a:11:27:dd:19:ac:
         9d:80:68:8b:de:87:b7:b1:5f:95:c6:76:07:ef:de:af:0c:8d:
         5c:a8:1a:2f:7d:83:69:f3:3c:e9:a9:dd:66:ce:c2:11:21:f6:
         d2:ab:89:ab:ce:68:d2:c2:6c:2b:72:c9:30:80:5c:ac:2e:ef:
         74:10:1c:01:68:75:fd:16:17:27:e2:78:13:aa:45:ab:5d:c5:
         be:57:d0:df:2e:cc:5c:30:b2:02:43:78:ec:4f:d8:30:3c:8d:
         07:17:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----