Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File:                     HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier:          XpdH/kq54HlVrouRhrUl1Oq+FaZz6gUG+7PjF3a4BJI=
Subject key identifier:   74:2E:8A:0B:60:98:DF:34:6D:2F:13:DD:79:91:E9:FF:F5:8D:AE:87
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer:       /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial:       01962F06BDFDBBA13CA14DD89B9316681BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
                          2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: uvfhAdZ6tB+CBPElW+SY9COgRb5UvgDSrZpJrRXizs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:fd:bb:a1:3c:a1:4d:d8:9b:93:16:68:1b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=742e8a0b6098df346d2f13dd7991e9fff58dae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:bd:f1:67:41:34:6d:ae:92:1b:ff:d2:a4:
                    f3:c0:01:6a:aa:6b:39:93:03:4c:2d:13:d6:01:81:
                    bc:7d:d4:5c:c8:e5:69:22:cd:32:96:0f:95:06:2d:
                    da:f7:89:b6:21:cf:09:07:2c:8f:6d:70:26:b8:9f:
                    5c:ec:82:4c:e7:95:63:69:6e:63:48:40:5b:f5:51:
                    b3:1b:9d:ec:a7:89:0d:34:3f:53:2e:91:31:3f:c2:
                    2a:d4:f5:be:a9:05:91:84:dd:45:39:8d:4a:8f:69:
                    e4:50:e1:82:81:e6:4c:6f:61:b3:3f:8d:42:21:b3:
                    d0:8f:d4:fc:b3:90:32:e1:da:57:52:96:87:7d:bb:
                    44:51:d6:d9:a8:c9:e1:73:f6:28:9e:d9:1d:99:09:
                    2d:a2:27:23:4c:aa:82:5e:4d:c9:c1:de:e7:20:49:
                    92:6a:66:70:68:95:eb:82:09:75:09:ae:09:85:8c:
                    95:ae:99:05:d4:26:17:de:25:5a:d1:cd:11:e4:85:
                    f2:54:0e:d2:79:37:f4:bf:31:46:03:34:f3:75:75:
                    1a:ac:7a:52:36:e2:77:4b:69:73:e7:be:8e:1a:2d:
                    e4:02:4b:52:96:f5:3a:56:dd:99:af:3c:02:3f:fe:
                    26:1a:da:d4:e9:c6:c8:89:f9:b3:05:30:eb:75:85:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:8A:0B:60:98:DF:34:6D:2F:13:DD:79:91:E9:FF:F5:8D:AE:87
            X509v3 Authority Key Identifier:
                keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:22:81:cd:90:b9:5d:df:b3:1f:63:6b:83:58:4d:52:00:a5:
         e0:0f:a2:5f:5b:e6:e1:66:a8:a3:f9:72:b4:99:f8:33:fa:c5:
         b9:d0:a0:9a:c6:24:25:8a:35:c6:03:fc:47:f1:62:9e:f5:f0:
         37:08:08:66:18:04:23:bf:eb:7c:95:7d:0a:51:f3:e4:3a:a0:
         9c:44:2f:03:52:fb:ea:6d:0d:bc:8a:d0:b2:da:23:21:04:a3:
         5e:53:5e:06:5f:77:44:98:45:7c:0d:59:e1:b0:c8:86:c0:30:
         0e:3e:0c:13:7c:af:e6:a3:1e:cf:ab:93:7c:3a:0c:38:b1:45:
         65:cf:ff:c4:e5:2c:b8:ae:8d:98:96:3f:d1:97:dc:47:64:27:
         8a:4d:25:17:d9:8a:3b:54:d2:15:ae:8b:2e:a9:a9:af:9b:93:
         b6:19:45:da:db:8d:b2:53:a6:11:d1:74:1d:58:0a:02:8f:ff:
         63:af:11:a6:49:8e:c8:28:e0:a8:88:39:ae:c8:c3:44:82:5f:
         e0:85:21:f6:0d:5d:c1:d4:7b:2e:46:02:4c:82:7f:8c:31:7e:
         49:61:95:53:9c:3b:d8:b1:8c:c0:24:c4:36:d7:8e:80:0f:8e:
         80:02:1c:53:d9:39:44:9a:98:25:5a:5e:3e:2a:99:c8:12:f8:
         de:79:8d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBr39u6E8oU3Ym5MWaBvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjUwNDEzMTIwMTMzWhcNMjUwNDE0MTIwMTMzWjAzMTEwLwYDVQQD
Eyg3NDJlOGEwYjYwOThkZjM0NmQyZjEzZGQ3OTkxZTlmZmY1OGRhZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4y98WdBNG2ukhv/0qTzwAFqqms5
kwNMLRPWAYG8fdRcyOVpIs0ylg+VBi3a94m2Ic8JByyPbXAmuJ9c7IJM55VjaW5j
SEBb9VGzG53sp4kNND9TLpExP8Iq1PW+qQWRhN1FOY1Kj2nkUOGCgeZMb2GzP41C
IbPQj9T8s5Ay4dpXUpaHfbtEUdbZqMnhc/YontkdmQktoicjTKqCXk3Jwd7nIEmS
amZwaJXrggl1Ca4JhYyVrpkF1CYX3iVa0c0R5IXyVA7SeTf0vzFGAzTzdXUarHpS
NuJ3S2lz576OGi3kAktSlvU6Vt2ZrzwCP/4mGtrU6cbIifmzBTDrdYWHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQuigtgmN80bS8T3XmR6f/1ja6HMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyKBzZC5
Xd+zH2Nrg1hNUgCl4A+iX1vm4Waoo/lytJn4M/rFudCgmsYkJYo1xgP8R/FinvXw
NwgIZhgEI7/rfJV9ClHz5DqgnEQvA1L76m0NvIrQstojIQSjXlNeBl93RJhFfA1Z
4bDIhsAwDj4ME3yv5qMez6uTfDoMOLFFZc//xOUsuK6NmJY/0ZfcR2Qnik0lF9mK
O1TSFa6LLqmpr5uTthlF2tuNslOmEdF0HVgKAo//Y68RpkmOyCjgqIg5rsjDRIJf
4IUh9g1dwdR7LkYCTIJ/jDF+SWGVU5w72LGMwCTENteOgA+OgAIcU9k5RJqYJVpe
PiqZyBL43nmNIw==
-----END CERTIFICATE-----