Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File:                     HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier:          cgcp4rOQiZa06QgjsNAl7jkbtvMBytZu320AOhyLjRA=
Subject key identifier:   7B:C9:B8:CA:12:47:6E:A4:0C:42:DE:F8:41:99:9D:C3:9D:22:19:B9
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer:       /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial:       01962F74E84AAD1FFF300DA8E85221398203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number:          1533
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: tE8sxwChx0duVL42e4ORRB86HqNlMSMwWV6jj9LZ3t4=)
                          2: ZV7Mwh8ZSNOok8Cl_6w6xbXd1QM.roa (hash: Q8BEzpuX5kr5QFNdR8ExGubNlojo8W9UU/GtWU/NKmM=)
                          3: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e8:4a:ad:1f:ff:30:0d:a8:e8:52:21:39:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=7bc9b8ca12476ea40c42def841999dc39d2219b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:f3:94:0b:b0:49:8e:e4:2e:48:c3:91:42:
                    ea:5b:86:8e:4c:68:f6:3c:ab:96:fd:19:3e:d4:ce:
                    42:cf:de:6d:68:35:48:1a:3b:57:53:7d:5f:e3:7d:
                    8e:38:d9:c7:ba:bc:3b:72:0a:ac:f8:cd:79:44:e2:
                    9f:31:61:3b:85:cb:ff:e8:55:38:5e:38:61:45:8e:
                    1f:2e:32:15:6f:95:ec:24:d3:d5:da:a8:b8:a4:35:
                    33:c8:e5:61:83:d7:78:35:b5:bd:95:ca:35:60:6c:
                    5a:83:c9:ea:3f:c3:45:46:5d:06:b6:90:10:31:32:
                    6d:8c:42:c2:db:8c:3f:d2:6b:aa:6c:5c:be:73:aa:
                    e5:81:83:9c:d0:97:e2:77:70:a1:e2:2d:12:1c:e7:
                    24:86:5d:7a:fa:83:3d:4c:82:e1:9f:b4:f0:04:22:
                    9c:ac:3c:0e:ab:c8:e8:6d:68:c1:41:45:5c:55:30:
                    e1:c9:70:49:6d:9f:20:dd:04:50:67:d1:5a:df:d7:
                    79:b9:70:ec:d1:10:2c:3e:8c:9e:75:68:8f:b4:f7:
                    b6:93:64:39:59:bd:1b:48:fe:9d:d1:e6:9b:dd:6c:
                    2a:2a:d6:a3:77:02:c9:4d:06:61:ea:be:67:12:1c:
                    cd:14:50:65:22:f3:e1:e2:f3:8f:7a:1c:f9:1e:36:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:B8:CA:12:47:6E:A4:0C:42:DE:F8:41:99:9D:C3:9D:22:19:B9
            X509v3 Authority Key Identifier:
                keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:84:0c:cf:1e:34:34:86:6c:1e:be:e2:ea:58:ff:52:52:
         55:30:e9:58:76:cd:7d:fc:4c:a3:d0:2b:8b:be:17:57:12:6c:
         be:02:7a:a0:1e:4d:97:03:29:b2:de:ea:bd:f9:0c:0d:8e:13:
         46:44:19:81:9d:3c:c4:25:25:d9:7b:96:c0:41:11:72:64:2f:
         1e:6c:bb:6f:a6:d0:bd:04:46:2a:e8:0d:d3:51:4b:2b:40:a3:
         f7:3a:38:55:40:dd:35:e7:df:8b:f7:c3:ba:87:9d:46:db:64:
         ef:36:ca:40:4c:0c:20:3e:30:0d:dd:f5:57:d6:2f:38:2f:2a:
         a7:a1:3d:42:01:a0:11:b8:9a:1d:bc:f2:89:45:6d:24:51:7d:
         89:9a:e0:39:a0:f3:91:f8:5a:52:b0:ec:1e:dd:8c:6d:e2:0b:
         4e:48:4c:d9:16:97:02:ca:ab:f4:15:21:52:1e:e5:75:54:18:
         0c:08:2d:d1:a8:a6:5c:4a:a2:80:08:c8:9b:d2:4b:34:85:9b:
         81:7b:25:ca:fc:9d:9c:ca:05:00:c1:99:0a:05:66:9b:a8:86:
         fb:42:11:6b:6e:85:7f:ea:27:40:54:f7:9f:29:e7:c5:6a:7c:
         ea:ef:4b:02:c2:c1:58:22:50:eb:8e:cb:66:f5:8c:f4:d4:78:
         64:64:fc:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOhKrR//MA2o6FIhOYIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDFmNGRmZmQ2ZmJhNjZjZGY4YzM3NGM5YjBmMDQ3NTUy
NzA1ZGQwHhcNMjUwNDEzMTQwMTUyWhcNMjUwNDE0MTQwMTUyWjAzMTEwLwYDVQQD
Eyg3YmM5YjhjYTEyNDc2ZWE0MGM0MmRlZjg0MTk5OWRjMzlkMjIxOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ/zlAuwSY7kLkjDkULqW4aOTGj2
PKuW/Rk+1M5Cz95taDVIGjtXU31f432OONnHurw7cgqs+M15ROKfMWE7hcv/6FU4
XjhhRY4fLjIVb5XsJNPV2qi4pDUzyOVhg9d4NbW9lco1YGxag8nqP8NFRl0GtpAQ
MTJtjELC24w/0muqbFy+c6rlgYOc0Jfid3Ch4i0SHOckhl16+oM9TILhn7TwBCKc
rDwOq8jobWjBQUVcVTDhyXBJbZ8g3QRQZ9Fa39d5uXDs0RAsPoyedWiPtPe2k2Q5
Wb0bSP6d0eab3WwqKtajdwLJTQZh6r5nEhzNFFBlIvPh4vOPehz5HjY2FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvJuMoSR26kDELe+EGZncOdIhm5MB8GA1UdIwQY
MBaAFB0B9N/9b7pmzfjDdMmw8EdVJwXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUt
ZmU0YTAyY2FlZjdmLzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUtZmU0YTAyY2FlZjdm
LzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc6EDM8e
NDSGbB6+4upY/1JSVTDpWHbNffxMo9Ari74XVxJsvgJ6oB5NlwMpst7qvfkMDY4T
RkQZgZ08xCUl2XuWwEERcmQvHmy7b6bQvQRGKugN01FLK0Cj9zo4VUDdNeffi/fD
uoedRttk7zbKQEwMID4wDd31V9YvOC8qp6E9QgGgEbiaHbzyiUVtJFF9iZrgOaDz
kfhaUrDsHt2MbeILTkhM2RaXAsqr9BUhUh7ldVQYDAgt0aimXEqigAjIm9JLNIWb
gXslyvydnMoFAMGZCgVmm6iG+0IRa26Ff+onQFT3nynnxWp86u9LAsLBWCJQ647L
ZvWM9NR4ZGT8mA==
-----END CERTIFICATE-----