Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File:                     HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier:          Fd05YRXuppYlIxnRaU3Lq2MPvp/iiImLf/v7NyLsVMg=
Subject key identifier:   E2:39:C8:43:59:53:18:7D:35:EB:32:E9:0B:BE:44:16:2F:52:DA:E6
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer:       /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial:       01962FAB611F2DA6A5F540FD28AC9135DC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number:          13F6
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: QwE6kJqB9+mpwNcumWqmChwr9MCgyK8C85S17hIja0M=)
                          2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:1f:2d:a6:a5:f5:40:fd:28:ac:91:35:dc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=e239c8435953187d35eb32e90bbe44162f52dae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:7b:c9:cf:c5:52:ff:08:56:3d:b5:dd:41:
                    75:00:60:69:f8:20:e4:db:b3:af:bb:4c:2a:2e:ad:
                    25:f7:0d:1b:e2:63:12:5b:bb:36:78:08:33:6e:d2:
                    97:5d:14:04:27:cf:d5:e2:87:80:1a:0e:6a:1f:f0:
                    1f:44:ca:1d:7c:04:74:24:41:04:3d:eb:bc:4c:41:
                    e6:43:07:8e:a2:48:53:4c:e3:3d:81:2e:10:f1:f7:
                    2c:96:49:13:cb:b1:ac:d6:5d:7a:61:34:55:9d:cd:
                    41:59:07:6a:61:c9:1c:7a:20:77:06:41:c6:b6:75:
                    27:4d:eb:cf:57:a7:07:95:af:0d:40:04:bf:b3:5d:
                    00:54:50:6c:a9:a3:df:26:72:68:a2:55:2c:58:57:
                    3a:8a:a7:95:2a:53:42:af:98:38:e9:99:09:58:89:
                    59:76:98:6d:60:51:36:94:c6:4f:5c:68:4d:02:40:
                    6f:09:c6:c1:a3:d0:0d:84:78:a4:de:2c:5b:0f:00:
                    24:4c:fa:69:15:be:df:ef:1f:42:fa:a6:19:58:ed:
                    af:51:af:83:d6:a2:0f:c3:da:79:a1:6e:87:c7:93:
                    6f:10:8d:b9:97:50:1e:cc:bd:8e:97:91:46:f9:53:
                    bb:53:2f:79:2f:8d:f5:78:1a:ee:81:bb:fc:d0:c1:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:C8:43:59:53:18:7D:35:EB:32:E9:0B:BE:44:16:2F:52:DA:E6
            X509v3 Authority Key Identifier:
                keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:10:06:bf:30:e6:59:da:1c:b6:25:fe:58:37:06:13:59:09:
         64:24:a0:ad:d9:26:cc:b1:82:2b:59:58:ad:8a:14:3e:12:b8:
         0f:73:f3:5f:3e:4a:4e:21:e1:98:60:6a:af:9f:f2:0d:bc:cc:
         77:04:70:1d:57:c3:a9:87:76:a2:5e:4f:ff:6f:ce:d8:28:2b:
         9f:14:fc:77:78:29:28:99:82:48:a3:f3:78:57:4e:5b:5a:be:
         0e:59:74:79:39:b2:bf:e1:d5:81:71:e8:13:ed:54:0f:bf:0f:
         87:a2:3b:24:f3:5a:28:2c:09:09:eb:1f:d7:28:4a:bc:b4:7b:
         ec:29:12:b0:dd:80:7d:8a:c7:47:ff:a4:59:c4:d6:bf:33:91:
         3a:6a:b0:3b:dd:72:4b:67:82:fe:a6:7a:48:c5:fe:98:dc:c6:
         44:d6:03:0f:62:a5:8b:93:a2:1f:f3:c3:b0:2d:73:24:4c:f9:
         91:c9:ca:a8:00:1c:d3:35:e9:f4:51:5f:eb:a7:46:5c:1d:9c:
         35:19:19:a3:d9:3c:09:09:b5:32:29:3a:3a:28:45:82:10:c8:
         64:ad:2a:04:77:a4:96:e2:d1:5d:3e:45:19:cb:1c:b5:96:9e:
         6d:1f:01:4c:9f:80:f0:40:71:f3:fb:ee:ea:a4:b2:c9:94:86:
         91:41:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----