Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          nEPI8rdrIdJFGNSgnbg5WHSxSeLTTUfUVABCP1s3sk4=
Subject key identifier:   F1:81:F0:12:E2:FF:D7:E9:B9:36:5E:A5:8E:B7:44:4E:42:E1:13:AE
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       0195E00F47F258BDF21344985E61C4987323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          1315
Signing time:             Sat 29 Mar 2025 04:00:52 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:52 +0000
Manifest next update:     Sun 30 Mar 2025 04:00:52 +0000
Files and hashes:         1: LES-4NZ2gVtnFASVcYj5bV4jo4M.roa (hash: 2G3ShlRTsn405STqDwUmkyh047FRwXPBWPG0OI/1t/0=)
                          2: S6pEjPdKiDCWT5YS10t21bo7p-Q.roa (hash: pTlwMPVuX2tODYiLJ6YhmWJdp6Y8iDisqjt0seyZtRU=)
                          3: SKBCllM8zLJEbYHJd_EV3itY7MY.roa (hash: Zfen1G7f+hqJM+l1P8PiztKtQe2yRYBq/nE3Qk55hCM=)
                          4: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: ci6dZ2pQRvgjgZNvKFF/BxFmRnQqweYvEiIrVWpytew=)
                          5: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:47:f2:58:bd:f2:13:44:98:5e:61:c4:98:73:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Mar 29 04:00:52 2025 GMT
            Not After : Mar 30 04:00:52 2025 GMT
        Subject: CN=f181f012e2ffd7e9b9365ea58eb7444e42e113ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:7d:95:9e:c9:aa:4c:51:ba:bd:45:3e:70:
                    f9:af:32:21:9e:c9:61:46:8e:28:54:77:53:da:20:
                    f2:00:c4:fa:b9:3e:f7:75:c6:49:e0:2b:1e:5d:70:
                    0d:f2:d4:4b:5b:56:51:d5:a6:c9:a7:32:a4:a3:53:
                    b1:b8:ef:0c:c8:30:e9:8c:c3:fa:bd:c4:29:0f:82:
                    1d:fe:e8:e5:e5:90:15:d4:0f:94:b0:39:cc:f7:b3:
                    27:da:bf:99:6b:83:c3:a3:ec:6c:c8:f3:37:8d:c4:
                    22:f8:c5:f5:16:68:db:be:61:3a:90:50:e5:46:32:
                    21:b4:a7:e9:99:0f:6d:db:b9:4b:0e:ca:1f:64:7a:
                    c5:77:97:03:b5:6d:8e:26:07:f1:96:33:88:fe:13:
                    e9:44:cf:d7:3e:a8:fd:15:3f:90:99:cf:8c:53:2c:
                    5d:d3:2d:8d:7c:e2:8c:33:2f:2f:c6:8a:49:36:ce:
                    f5:02:66:68:20:c0:01:6f:fa:4f:f3:bd:85:2c:54:
                    4e:0d:40:c9:5f:cc:da:3e:61:a5:2b:aa:7d:79:2d:
                    51:09:97:07:c8:b4:92:a8:58:88:14:cc:11:d7:0d:
                    83:59:7f:42:5d:6f:7f:b5:c6:63:bc:dc:35:21:64:
                    08:a2:e9:0c:8d:a6:a6:e7:62:19:47:74:1f:5f:d0:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:F0:12:E2:FF:D7:E9:B9:36:5E:A5:8E:B7:44:4E:42:E1:13:AE
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:74:80:9e:78:42:2f:c8:55:fd:c9:01:84:3d:47:fd:32:
         3f:39:0a:bb:cd:eb:94:b9:ff:c5:94:d7:d4:6b:f0:36:8d:c8:
         0d:15:b9:75:91:c4:62:cb:03:33:c5:09:65:bf:c3:94:2c:1a:
         c2:ba:24:ed:c1:3b:82:2f:0e:ac:c4:3f:fd:47:47:43:b2:41:
         e9:80:78:c4:74:69:78:5a:26:05:17:40:fa:cc:ce:a6:de:c7:
         fc:03:5a:50:a3:ef:3e:b8:80:5a:08:f4:0a:e4:d6:8c:3c:d6:
         70:41:03:48:1a:60:74:c0:a8:f0:54:86:f4:90:a4:1e:95:2c:
         bd:de:76:38:0f:4b:1b:f4:ec:cd:b5:ce:0e:bd:5c:b0:c1:c2:
         02:80:88:22:9a:79:21:1c:3d:8d:fb:29:70:73:65:4a:d8:0e:
         85:b9:f9:a2:b8:e6:e6:cc:bf:4a:38:6d:7d:97:8b:2d:f1:0b:
         e2:bf:4c:7f:b4:82:7a:94:8a:c3:92:60:fe:47:de:7c:71:7f:
         7f:76:2b:88:21:53:ed:cb:d7:49:34:cf:3c:35:50:3a:98:17:
         5d:82:87:b7:fc:b0:99:9a:72:a6:00:a7:e3:d1:18:9d:81:df:
         6f:d2:9f:ec:04:91:63:0d:bd:f2:78:1e:d3:b0:0f:f9:e6:af:
         9a:70:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----