Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File:                     HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier:          7WsSyDIsOWKCpYeW0LfVWQWJPfS/aBjUFBFJEC8WkK0=
Subject key identifier:   2C:16:C6:E1:28:40:28:1C:8E:90:8A:98:47:28:83:C6:69:74:A9:51
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer:       /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial:       01962E992B21D067FF8682D4C564FC071161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number:          0C11
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: QXIFl6gZDw5MZNTrzUOPaLI7JHyP5ZCaxW0fjhHsYdo=)
                          2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2b:21:d0:67:ff:86:82:d4:c5:64:fc:07:11:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=2c16c6e12840281c8e908a98472883c66974a951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:c6:fb:56:97:20:d2:c2:8e:91:c0:58:49:
                    35:f8:d7:8c:1b:c9:98:f7:36:04:ff:29:ae:e7:77:
                    74:c5:64:10:50:37:cb:34:1d:e6:62:87:40:41:e2:
                    75:47:89:1e:b5:f7:0e:a0:49:48:b8:50:85:a5:b7:
                    c4:ef:27:a7:bc:02:63:d2:55:da:6d:36:9b:af:e2:
                    e4:39:5b:1e:bb:53:ba:7b:c8:78:db:16:c9:c9:d0:
                    01:02:6c:c7:e4:3b:f9:86:20:96:36:54:77:f6:89:
                    75:32:0a:22:fb:79:19:5b:b1:c5:28:40:e7:14:49:
                    05:41:c4:4b:82:70:d6:19:9e:8d:16:03:41:14:6a:
                    3c:2e:0f:f0:b9:bf:8a:a6:27:bb:b6:09:60:d9:81:
                    46:12:e5:0c:94:1d:a0:c3:ae:35:e8:24:f9:5a:15:
                    9b:d9:33:fe:ec:fe:0c:c3:75:aa:15:85:62:c2:cf:
                    a0:8c:97:e0:f1:bd:2a:f4:d8:e5:dd:01:1c:43:06:
                    93:72:52:06:ac:55:39:2f:b0:1d:17:cb:8b:d0:55:
                    9f:97:51:92:b2:2f:3d:06:20:9e:e5:07:07:9c:91:
                    ac:89:bb:b8:2b:17:5d:70:01:bc:11:a0:22:c8:95:
                    9e:02:b6:8a:b3:65:88:89:f5:d8:20:fa:f4:3e:14:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:C6:E1:28:40:28:1C:8E:90:8A:98:47:28:83:C6:69:74:A9:51
            X509v3 Authority Key Identifier:
                keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:74:bd:fb:91:06:92:fe:91:87:c6:28:f6:85:ee:a4:09:b6:
         c5:6d:59:57:2a:56:0a:bd:32:5b:ad:9d:00:80:1e:97:47:74:
         14:f8:94:07:bc:47:6b:98:fe:29:86:67:34:34:9f:88:67:18:
         31:9c:ef:6e:05:76:27:18:38:5e:18:3e:b6:98:06:0a:3b:73:
         71:aa:67:20:20:d8:83:f9:55:d6:be:52:f6:eb:48:fa:45:bd:
         dc:0c:b4:ad:0d:7f:24:24:0f:9d:c6:dd:1b:36:27:a0:48:2b:
         b7:42:40:e3:72:17:85:24:87:21:09:af:bf:ab:12:60:e7:c7:
         26:8d:42:85:8d:3a:ba:62:21:aa:59:e4:a8:c9:7c:ef:09:4c:
         e1:f1:2d:40:71:5b:43:a5:5e:ab:b3:17:3c:62:30:ac:51:d1:
         0a:94:7c:31:49:0f:e6:a9:0d:d2:98:68:70:85:64:ba:ae:d4:
         7a:36:bd:a6:94:1f:fd:90:38:ed:bc:eb:be:e4:f4:2f:e8:dc:
         be:30:80:ae:c6:ca:5e:c0:39:f1:39:f8:ef:40:dd:89:ba:d3:
         09:62:17:56:6a:ee:6c:99:53:14:b4:79:4b:42:19:eb:ef:8b:
         51:8e:d7:a7:db:13:1a:25:61:bd:d2:52:e9:3a:95:45:f3:b1:
         63:64:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----