Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File:                     hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier:          Hk3oP+9Ga2ohUO8nxFa0ZWgu/CFvJB1Jb3WfcO0PweA=
Subject key identifier:   28:59:36:00:A8:D4:BA:73:39:67:36:ED:75:9E:80:35:98:37:4E:A3
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer:       /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial:       01962E98CB9C7CE5C8E1C4F74CB199469A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: Yo7j7neOkmlSbP6272VLX0Vg53ocrKHBPpsIxC85hPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cb:9c:7c:e5:c8:e1:c4:f7:4c:b1:99:46:9a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=28593600a8d4ba73396736ed759e803598374ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7d:eb:04:f8:81:e3:83:1e:c8:85:1b:31:27:
                    ec:50:36:82:7b:d9:1a:b0:06:7d:ba:80:fc:27:e5:
                    36:8b:c5:32:62:6d:3f:98:34:5a:b4:28:49:c4:77:
                    de:28:b0:00:ad:db:ca:8e:9a:9d:cd:20:59:6d:6f:
                    a3:80:30:96:8e:25:8b:7a:02:25:49:45:93:b0:fc:
                    64:44:60:b0:6c:c1:99:22:88:19:cd:65:81:83:f4:
                    e6:52:5a:86:9c:52:24:57:82:89:02:7f:51:5a:83:
                    53:9d:a5:db:99:13:ac:f7:af:8d:c1:7e:58:96:4b:
                    10:59:22:66:20:00:c2:ce:cf:7c:0d:0d:16:52:fc:
                    8d:f8:90:2a:24:d2:e2:8c:a0:37:b9:6e:e8:7e:a0:
                    40:b9:2f:c8:bb:4d:ab:d6:0b:04:2f:f6:84:2c:55:
                    69:11:ed:73:f9:93:10:9b:e7:b7:4a:64:71:ca:70:
                    18:54:bd:a1:e9:89:87:c8:70:99:99:32:0f:cc:47:
                    58:09:34:3f:5c:73:c5:a0:f6:c2:79:60:5c:1b:e9:
                    a3:22:76:d9:13:2a:20:b9:ac:60:c6:74:99:84:df:
                    3f:43:ba:95:58:cd:35:4b:65:2b:7f:97:65:3d:80:
                    de:93:c6:70:77:ab:06:a6:be:77:e3:67:d2:bb:80:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:59:36:00:A8:D4:BA:73:39:67:36:ED:75:9E:80:35:98:37:4E:A3
            X509v3 Authority Key Identifier:
                keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:e1:1f:f1:d3:0e:54:e6:76:06:ae:75:bf:3d:88:c2:8b:
         5d:cf:0d:3d:9e:f3:90:04:7f:b5:23:ef:5b:17:b8:aa:13:a5:
         cd:eb:1e:8e:40:10:a1:89:08:b5:66:d5:33:7b:19:15:ff:64:
         a8:e2:98:22:a7:22:b5:03:b7:64:9e:c2:94:78:5b:1d:f5:54:
         ce:63:33:0d:9e:38:96:31:5a:61:30:17:69:2d:7d:65:de:35:
         49:e1:65:5e:df:34:f3:fd:ed:22:82:22:e4:df:5f:c6:7f:65:
         9a:6d:f0:7e:c6:dc:92:bb:db:96:78:7e:7c:cd:6c:05:15:28:
         24:07:5e:96:2a:8e:3f:d8:1e:3d:10:ca:08:c3:2b:56:f7:e5:
         a6:0a:3d:6d:63:a9:7d:3e:96:89:36:84:20:c0:19:9f:bb:05:
         fe:f6:07:d8:43:07:44:a1:60:b7:ee:73:12:f8:6a:4b:d8:c4:
         66:e2:16:82:dc:10:7c:78:d2:32:07:f3:6e:35:21:31:e3:09:
         45:d2:45:5c:36:f8:73:9a:8f:c4:d0:94:02:35:14:83:c9:88:
         92:56:69:02:4b:51:e9:75:7b:2b:25:fb:6f:1a:2d:35:e1:5f:
         bf:d8:3e:5b:de:e6:de:d7:54:10:3b:cd:5f:7f:08:8e:83:7f:
         e6:a1:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----