Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File:                     hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier:          y5pdVrwKcDJ5yL2JnMYWu8jjXjsWnl7j8e64mMR+nzk=
Subject key identifier:   3B:FB:ED:5E:80:1F:0A:C4:EF:20:F5:4B:DC:63:AC:11:4F:D3:B8:27
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer:       /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial:       01962DF3A8FDA2781FC6FCB19CA3CEEF2942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: H3ImMbbvQMNxCq7qVaimP8GWIJjtvLFdEnJ7JhsYo0Q=)
                          2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:fd:a2:78:1f:c6:fc:b1:9c:a3:ce:ef:29:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=3bfbed5e801f0ac4ef20f54bdc63ac114fd3b827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:77:a6:26:41:5c:18:2b:e6:0b:34:6f:6d:
                    58:0c:07:0d:76:07:85:75:27:7a:a4:55:4d:a7:90:
                    1b:1d:bc:64:5f:15:e8:14:de:13:b7:f7:15:10:7a:
                    5e:14:c0:6d:86:61:7f:e4:b0:e8:e9:82:8c:37:9b:
                    9b:66:ee:d7:18:aa:87:ec:c3:d5:40:2e:84:c8:46:
                    bd:6c:b7:4c:8b:ee:9d:92:09:5b:21:3e:ce:cb:90:
                    38:43:d8:03:ab:4b:ea:3c:55:3d:ac:3d:13:10:09:
                    7e:bf:d2:ea:98:01:ab:2b:c0:8b:f6:bb:46:c4:b0:
                    7f:ce:54:c8:d8:c8:04:0f:be:17:5b:f5:fc:8f:25:
                    c2:56:dd:8d:62:cf:b8:17:0e:c0:2b:28:4e:a3:ac:
                    00:b8:89:8a:a7:d0:91:c1:f3:8c:6e:99:12:61:e6:
                    7e:84:df:36:08:2b:69:1a:6c:33:cd:91:6b:e5:ca:
                    f1:e8:0a:d9:d3:e0:1d:9f:9b:83:2d:5f:71:7e:4e:
                    49:55:3e:3d:5c:aa:96:c9:5c:05:a3:e1:88:59:2d:
                    ed:02:a9:04:c6:0f:f6:27:85:3e:d8:f2:5b:50:6a:
                    ce:c8:5e:29:fa:f9:2b:be:de:52:fc:d4:16:5f:1e:
                    ff:8b:69:03:36:12:10:5e:e3:d9:fe:7c:34:77:4a:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:ED:5E:80:1F:0A:C4:EF:20:F5:4B:DC:63:AC:11:4F:D3:B8:27
            X509v3 Authority Key Identifier:
                keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:39:15:dc:9b:f2:32:1c:4a:1f:82:68:1b:d7:88:2f:dc:
         77:dd:9c:84:57:54:bc:62:2d:a7:cb:41:1b:03:34:30:cd:7f:
         d5:a6:5c:fc:ca:bd:ff:b1:28:77:4e:64:bf:ef:a5:5e:7e:50:
         b5:78:ba:59:b6:24:c8:93:76:0f:2d:d6:23:81:ae:5b:61:13:
         cd:5c:f8:58:7c:54:1a:37:99:88:8b:9c:af:35:73:4d:37:54:
         0e:37:8e:fc:67:ba:4b:d1:6c:66:32:4c:52:02:86:ca:ef:07:
         12:c5:72:cc:5f:10:e4:f4:01:61:97:d1:c7:54:a6:ec:d1:08:
         98:6a:cb:b2:b5:90:60:b4:d3:28:0c:4c:c5:be:29:6c:fd:12:
         e9:9d:34:21:94:cc:50:98:97:09:98:96:e2:1a:78:85:3f:d1:
         ba:c9:e9:a1:9d:93:fd:1d:3a:9a:c4:95:14:1c:1c:1c:dd:b9:
         42:bd:40:39:7e:1a:e6:ca:6e:63:28:b1:5a:8c:3a:e8:10:ce:
         b0:f1:9c:6a:cd:7d:52:9c:a6:2e:76:0e:79:ad:c2:33:30:cf:
         a6:48:7c:21:85:c0:52:ef:31:5b:19:7b:25:7c:e0:df:36:bb:
         ba:ad:cb:70:1b:36:58:31:68:c2:d9:7f:e0:1a:24:ef:d9:d5:
         6a:7c:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----