Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          Uv0CQtLuhdYmtDI1MgZjsZNqWs5wU+gGpQ4NaitdWxQ=
Subject key identifier:   2C:4A:97:2E:9D:D4:16:CC:F8:32:FE:CE:A3:2D:D8:F0:3B:3E:C8:02
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       01962ECF98C99B2C17AF5F2D8F53D1361DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: RB1fzLpEN+nSPycq9gT5w+shRP20nv5AxnUsJPa09GE=)
                          2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:c9:9b:2c:17:af:5f:2d:8f:53:d1:36:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=2c4a972e9dd416ccf832fecea32dd8f03b3ec802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:cc:71:6f:30:a5:99:4d:1c:1a:b1:f6:ef:
                    20:8c:4a:2e:71:43:70:f5:3d:55:17:4a:90:77:45:
                    9b:89:3d:56:1a:e0:62:43:ac:21:dd:74:df:d9:0f:
                    e1:47:a7:b8:a6:b2:4f:36:93:8a:9f:25:d8:b8:cd:
                    19:2d:6e:eb:c0:b6:af:5c:5d:f6:65:35:57:b0:e9:
                    5e:44:9c:e9:e5:8d:f3:44:49:17:41:fc:49:ec:9f:
                    5e:a6:02:15:b0:9b:bd:6d:98:d8:d2:a3:a1:3f:88:
                    d1:f9:2d:32:fb:1e:9b:5d:4c:f6:94:95:bc:96:ad:
                    01:40:91:4d:38:e9:a1:93:d4:36:7d:3e:4c:63:ee:
                    4d:61:7f:70:04:66:2a:bc:03:9e:94:d0:e3:43:18:
                    1d:3c:00:fc:87:4e:41:65:83:bd:b2:25:32:08:e4:
                    a4:ca:b0:38:f3:89:37:0b:28:bf:05:81:38:2a:ec:
                    bf:dd:d0:4c:4e:fa:89:6f:24:69:3e:3f:af:94:9d:
                    7e:8a:33:ca:db:b7:bb:1a:cf:8d:96:a6:36:52:c5:
                    cf:4c:0c:81:e3:34:97:b4:b8:e0:c7:8b:e3:ce:31:
                    fc:0e:2f:b9:79:d6:55:2a:0c:7a:b6:1b:c9:2c:db:
                    b3:d6:f8:f2:6f:ed:97:a6:0e:08:ae:f3:99:37:9d:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:97:2E:9D:D4:16:CC:F8:32:FE:CE:A3:2D:D8:F0:3B:3E:C8:02
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:b3:32:2c:35:c4:66:49:9d:21:3c:2c:5d:ed:3d:3c:0c:
         3d:61:df:53:f0:5f:19:cb:29:6b:6e:a0:ae:bf:6c:a7:0a:47:
         26:e9:67:d3:c3:8d:3b:2a:bf:7a:fe:fc:6a:13:d0:cb:86:f2:
         83:89:27:77:01:9b:d5:9b:ec:08:f2:05:de:de:26:89:3c:97:
         c1:62:ac:b3:e9:b0:1a:ef:2b:c7:0f:ef:c7:ad:ad:8c:ce:89:
         4d:ef:87:68:1d:ea:31:be:fc:af:a0:67:a1:e9:07:de:4e:72:
         07:2e:92:e0:a9:b4:a7:1d:9b:4b:bf:b2:96:32:00:78:d0:05:
         ed:91:c4:e8:15:e0:18:c5:10:3e:ce:20:30:a6:f3:4f:e9:9d:
         6d:63:0e:97:83:30:11:f5:01:fc:aa:e6:b5:fc:7d:92:ee:c2:
         44:5c:ca:58:1d:1a:e7:36:0b:dc:ee:60:d7:e1:cc:62:84:dd:
         3c:5c:97:ca:c7:7a:0c:fe:91:4d:e1:01:61:bd:78:83:8d:a6:
         3a:27:cc:d9:99:31:ff:53:a3:41:91:8a:91:9f:59:f7:07:97:
         66:09:72:8d:24:89:4b:14:44:9d:34:ab:99:62:bd:5c:0d:2f:
         22:1b:49:c9:12:fe:1b:ea:5a:2a:6a:e6:82:75:7b:4e:e5:4b:
         26:63:a9:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5jJmywXr18tj1PRNh30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlM2JhNGRiYmE1MjNkNWIwZGM5ODkyMDNiZmQ2OTY0OGQx
ZDRlNjYwHhcNMjUwNDEzMTEwMTE4WhcNMjUwNDE0MTEwMTE4WjAzMTEwLwYDVQQD
EygyYzRhOTcyZTlkZDQxNmNjZjgzMmZlY2VhMzJkZDhmMDNiM2VjODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru/McW8wpZlNHBqx9u8gjEoucUNw
9T1VF0qQd0WbiT1WGuBiQ6wh3XTf2Q/hR6e4prJPNpOKnyXYuM0ZLW7rwLavXF32
ZTVXsOleRJzp5Y3zREkXQfxJ7J9epgIVsJu9bZjY0qOhP4jR+S0y+x6bXUz2lJW8
lq0BQJFNOOmhk9Q2fT5MY+5NYX9wBGYqvAOelNDjQxgdPAD8h05BZYO9siUyCOSk
yrA484k3Cyi/BYE4Kuy/3dBMTvqJbyRpPj+vlJ1+ijPK27e7Gs+NlqY2UsXPTAyB
4zSXtLjgx4vjzjH8Di+5edZVKgx6thvJLNuz1vjyb+2Xpg4IrvOZN53rvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxKly6d1BbM+DL+zqMt2PA7PsgCMB8GA1UdIwQY
MBaAFB47pNu6Uj1bDcmJIDv9aWSNHU5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmIt
MTJlMjBjODc1YzUzLzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmItMTJlMjBjODc1YzUz
LzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQyzMiw1
xGZJnSE8LF3tPTwMPWHfU/BfGcspa26grr9spwpHJuln08ONOyq/ev78ahPQy4by
g4kndwGb1ZvsCPIF3t4miTyXwWKss+mwGu8rxw/vx62tjM6JTe+HaB3qMb78r6Bn
oekH3k5yBy6S4Km0px2bS7+yljIAeNAF7ZHE6BXgGMUQPs4gMKbzT+mdbWMOl4Mw
EfUB/Krmtfx9ku7CRFzKWB0a5zYL3O5g1+HMYoTdPFyXysd6DP6RTeEBYb14g42m
OifM2Zkx/1OjQZGKkZ9Z9weXZglyjSSJSxREnTSrmWK9XA0vIhtJyRL+G+paKmrm
gnV7TuVLJmOpIA==
-----END CERTIFICATE-----