Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File:                     hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier:          39RWZ3HGe0L9P3mOpOy4pn00eNStDP2TBMJQCRz9aJs=
Subject key identifier:   DC:07:B4:BB:5F:7E:B1:DA:5A:92:15:85:4B:D1:21:B3:4F:AF:6C:32
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer:       /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial:       01962E61F63499EC1A5C454BD4F79AE01CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number:          1070
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: AFoF1GuFzHjl8hWS56zz0OT3Bgg.roa (hash: tZKNbZDCtPOdNWQDTedTIFStwLgZ/2vtLmBHU+SWAQk=)
                          2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: p8f1dqn7D42Wo/JKKI4MNRnI6SUA2vf4VRPAxLWML1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f6:34:99:ec:1a:5c:45:4b:d4:f7:9a:e0:1c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=dc07b4bb5f7eb1da5a9215854bd121b34faf6c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:3d:05:a7:2f:de:b1:c6:fc:77:bd:24:13:
                    9a:3f:45:10:9d:19:d7:ae:4b:b7:8f:98:f2:4d:d3:
                    d2:51:14:cf:4d:fd:89:15:e5:49:b2:18:5a:17:4f:
                    d7:47:95:0b:22:68:f2:40:55:86:78:04:97:c2:42:
                    e0:30:a5:bd:41:7d:be:e0:9c:c7:4e:94:e0:2f:65:
                    7d:6a:cd:72:60:2e:ba:55:b6:61:d4:cd:48:e4:75:
                    b8:a3:40:b3:18:ff:ed:11:6d:84:88:6f:66:f7:4f:
                    55:09:2a:3f:1a:cd:d3:44:16:5f:36:ec:8c:7a:d0:
                    29:4d:58:19:4d:77:ab:ff:bb:cb:3c:31:18:f4:f0:
                    f1:41:5e:11:0b:41:a1:00:89:40:0e:e4:66:b3:ff:
                    3c:61:b1:e3:b4:b8:c2:58:fd:27:27:de:91:b2:d6:
                    0b:ca:e0:5a:9a:09:e4:5c:57:ed:83:45:d7:c4:86:
                    64:8a:74:52:66:93:dc:68:1b:0a:83:dd:2f:d9:3e:
                    ec:80:34:d5:f9:b8:55:8d:87:e3:91:c1:85:9b:de:
                    8a:08:73:db:47:94:c0:a3:21:a1:c3:26:51:27:1c:
                    8f:08:c3:cd:18:23:be:2a:bf:c4:cd:0a:4a:64:4c:
                    4a:6e:57:43:cf:4d:65:03:0d:33:00:e9:e5:6e:96:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:B4:BB:5F:7E:B1:DA:5A:92:15:85:4B:D1:21:B3:4F:AF:6C:32
            X509v3 Authority Key Identifier:
                keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d4:68:56:7b:43:00:2b:1f:c7:ee:5d:aa:56:5e:c0:c3:13:
         12:9d:0f:77:4b:87:e3:03:9e:66:c2:b0:31:40:f0:2a:2a:4c:
         7a:03:6c:80:6a:a1:30:b5:10:20:88:76:8c:9a:91:bc:d0:20:
         86:8c:40:f3:e3:ed:ac:a9:ba:b1:74:ec:bc:24:c8:11:41:35:
         c6:f0:6d:45:15:54:eb:7f:90:92:d3:10:d1:1d:66:20:61:ba:
         83:f2:ab:30:5b:0d:72:01:de:b8:e0:77:de:61:77:e5:09:00:
         86:cc:e9:dd:ff:ea:b7:83:ce:3d:c3:0c:f7:92:40:d3:67:0d:
         b7:42:ba:39:fb:34:f0:e8:95:36:ad:78:76:87:cd:6f:b0:e7:
         83:33:2c:8d:04:d9:66:64:5f:81:64:59:3a:21:64:e0:c0:b8:
         5f:ff:0a:8b:5e:1f:34:96:d4:86:d4:62:96:8c:be:ae:26:23:
         e6:61:c5:74:c3:3f:1b:a2:5c:cf:e5:14:61:e8:5b:f6:e8:f1:
         e5:1f:c3:9b:6f:40:5f:9d:da:1a:69:85:09:12:b7:84:6b:9c:
         74:3f:3d:51:37:d1:ea:6c:df:03:5d:61:0b:f2:04:ee:86:99:
         94:1e:c8:f1:0f:79:e6:45:e4:d5:b1:1e:1b:54:ef:43:be:74:
         18:6a:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----