Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File:                     mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier:          V30u4EPjenMJQYlaFqokDCXrNlbb7AmYh9vP1z0iHn0=
Subject key identifier:   18:95:8C:C1:DF:78:87:67:BA:B9:47:86:D3:43:DA:C2:19:A7:92:C9
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer:       /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial:       01962FAB43FE48DE4877DA2F88E65CCCCA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number:          065D
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=)
                          2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: s0BGqn4a6pTYNGufk87sy2YZmpjVPTdIOhfL6knRfGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:fe:48:de:48:77:da:2f:88:e6:5c:cc:ca:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=18958cc1df788767bab94786d343dac219a792c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:49:fb:33:f2:6e:ba:20:2e:4a:63:1c:e9:19:
                    6a:40:cf:9b:a4:d7:fa:ea:f3:d1:69:50:0d:e0:d4:
                    d4:92:50:a6:5a:d6:39:fa:89:0b:8f:6e:81:45:a1:
                    66:30:4b:52:fa:b3:d1:6b:e7:b5:e6:1b:84:9a:ac:
                    d5:84:ac:c1:c5:03:bc:48:b7:f8:5e:71:6b:45:4e:
                    7e:b9:28:a7:98:ad:48:b1:90:33:96:46:75:0e:97:
                    32:5a:fe:67:24:12:2a:0d:ad:26:09:99:41:69:ff:
                    64:0c:36:71:1a:d1:1c:8d:d7:d3:b7:9b:88:14:f5:
                    55:59:00:e0:d0:be:9b:df:06:f9:22:dc:fe:af:17:
                    bf:5f:28:6d:55:80:72:ce:88:d4:db:4d:51:8c:c6:
                    f7:5a:0b:d5:9d:2e:e2:50:96:af:96:7e:65:ec:e2:
                    07:d9:0c:bf:b9:70:f2:2e:4a:40:cf:9a:59:5d:5f:
                    7f:26:af:6c:84:01:36:d3:07:f4:c3:ee:47:89:6c:
                    1d:50:a8:aa:1f:70:cd:a1:54:a6:68:5f:40:0d:3d:
                    9d:d2:ab:2b:fa:01:7a:4d:a1:83:76:4e:7a:af:2f:
                    3a:3b:9c:d1:67:4e:d8:27:8f:b5:f8:01:c3:e2:76:
                    6d:43:dd:8a:f9:e6:99:0f:a3:df:2d:0c:f6:6e:0e:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:8C:C1:DF:78:87:67:BA:B9:47:86:D3:43:DA:C2:19:A7:92:C9
            X509v3 Authority Key Identifier:
                keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:d7:49:09:90:15:4e:e6:5b:96:47:f0:ca:5e:e5:82:f1:
         ba:49:3f:70:a6:a0:f1:b1:38:e9:7d:b1:1b:f2:95:e2:3f:ac:
         38:d3:86:3f:5d:31:e6:7f:3a:b2:11:9c:54:9c:3d:ea:a0:f9:
         24:12:ac:14:72:85:1c:5a:e1:d9:34:60:5e:97:c9:0b:46:33:
         fb:34:5f:41:b2:63:c9:ce:7c:79:1b:02:ed:d6:c0:ba:29:3d:
         8a:01:a6:1f:d3:b5:49:2d:ed:4e:f8:0f:af:29:a5:72:d7:5a:
         e7:7e:60:5f:32:e4:81:c5:97:73:89:60:84:fc:75:e6:6e:c6:
         23:8b:87:00:f3:ce:a9:9c:3d:3a:da:20:8d:04:d0:53:f9:cd:
         c9:83:20:2d:51:1b:76:1c:fa:6c:5a:8d:7f:fc:96:82:90:3c:
         b1:28:b4:f5:41:9f:ca:ad:cf:b9:ef:d8:98:48:4a:b1:fd:1d:
         28:19:6f:eb:ef:4f:46:53:a3:8f:37:aa:b2:c1:c2:f8:16:6b:
         d7:65:78:47:ea:11:87:5c:3e:fa:a2:a2:d9:82:2d:66:f2:03:
         46:c2:16:db:1d:0d:0e:26:1e:25:2c:ff:3c:15:db:6b:e6:3c:
         eb:b4:ac:97:c5:b3:e0:93:ab:8a:43:fd:38:46:d3:e5:70:6f:
         f9:27:73:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----