Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File:                     HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier:          JinDZqFYQpSXXObMoKQGOfSKcLXK3iraXO4EqN9wkIU=
Subject key identifier:   66:5B:C2:31:78:85:EA:4C:AB:44:4D:C5:A4:D2:15:DF:23:C9:B6:E2
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer:       /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial:       01962E2ADE700B18E86486D8D9556814D35B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number:          122A
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: kf3inI40H890zljHPIeipY5DFke3t9u9RKbMCBQEZYA=)
                          2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:70:0b:18:e8:64:86:d8:d9:55:68:14:d3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=665bc2317885ea4cab444dc5a4d215df23c9b6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:47:6c:01:ea:b3:a1:85:64:93:72:b7:d0:
                    b8:86:e6:0a:a5:09:01:5d:67:bd:f6:d8:ed:c9:39:
                    df:7f:37:fb:52:ee:66:7e:0c:71:77:ee:02:75:6c:
                    15:f0:05:55:ac:27:a6:24:76:4f:3f:d9:f6:a7:26:
                    ae:fb:9b:09:f1:3c:7c:6a:47:81:49:65:77:d2:e8:
                    03:e2:85:87:99:de:8b:2c:ce:4d:a0:22:ce:2f:26:
                    ff:fb:3e:17:a3:6b:43:ab:89:ea:31:39:c1:9f:4a:
                    99:cf:0d:9b:e6:a8:9f:4c:50:f9:cb:55:4a:4f:b8:
                    ea:96:8c:e5:90:80:84:16:f6:59:0e:0b:cb:96:17:
                    df:2f:b1:e6:da:f7:6c:32:c5:15:9b:99:c9:2b:2f:
                    0c:34:cc:73:06:23:4b:c4:ea:1a:6f:15:79:80:61:
                    fd:8d:a0:2e:04:ce:e3:a7:6e:56:14:57:30:d8:d6:
                    2d:e1:3a:87:e4:44:c0:c5:84:2a:d9:0b:e1:71:93:
                    09:da:9a:39:d2:ed:ff:ca:60:49:26:37:98:99:fa:
                    6d:42:0c:7b:c3:9e:6b:ac:56:14:19:ae:b5:2a:e0:
                    5e:f9:af:b0:4b:aa:84:4b:f8:97:7e:08:d3:3f:ee:
                    c0:66:10:bc:64:84:c5:b1:27:51:cb:86:20:36:41:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:C2:31:78:85:EA:4C:AB:44:4D:C5:A4:D2:15:DF:23:C9:B6:E2
            X509v3 Authority Key Identifier:
                keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:0a:65:6a:05:34:02:a8:26:06:39:b2:8e:2e:11:20:4c:
         66:68:5e:5d:90:72:49:f2:3f:ed:e0:0a:fd:a3:58:b1:03:8a:
         5d:30:84:f8:0d:ef:61:b9:03:4c:62:aa:31:95:34:ed:af:14:
         20:18:4e:94:39:ce:01:d3:41:bd:fb:87:a6:35:8a:59:8b:9e:
         ec:dc:29:62:b6:fd:76:71:cc:c9:14:3b:94:6a:14:e2:a1:35:
         cc:43:7b:96:a3:24:c7:10:20:be:5d:69:22:f2:55:53:19:d1:
         fe:ce:62:4d:a0:08:5c:0a:36:dd:e6:2c:2a:f5:e8:a7:22:73:
         08:90:a4:c3:9d:03:09:0f:1f:6e:49:3d:94:47:6a:f1:a1:93:
         6f:52:ce:0e:fa:18:a8:38:92:79:96:7f:df:23:4a:66:c5:10:
         eb:e5:66:7e:7a:26:43:b9:5d:3d:12:3e:5f:5c:87:1f:67:be:
         33:1d:9d:7b:7e:da:22:26:50:c7:97:cc:78:0e:ca:99:9a:43:
         c0:76:62:20:db:da:b5:ce:64:b4:4c:cd:65:2c:9a:f0:62:47:
         b2:b6:a5:cf:3f:fe:d5:f5:30:f5:b5:75:b9:4d:c6:74:f6:62:
         d7:39:4e:4d:28:8e:7c:ba:0d:a0:3b:7b:1b:04:71:97:e9:72:
         5e:43:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----