Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File:                     hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier:          K7rtaPUUd1FozWwDYM9mv4VV+RZUfn4AFh9dSWTIH8k=
Subject key identifier:   93:D9:3E:FD:0B:4E:2D:6E:8E:E6:AE:EB:D3:B0:65:E2:8E:E9:31:63
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer:       /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial:       01962F07474333D07147DB104E4E49761D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
                          2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
                          3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: mR5RUc820lumHB0TW0qmj3R4pfXa8Pu2oTHiKlMt6JA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:47:43:33:d0:71:47:db:10:4e:4e:49:76:1d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=93d93efd0b4e2d6e8ee6aeebd3b065e28ee93163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:32:d0:c7:71:3a:9e:5d:5c:79:c3:c0:57:
                    4d:72:8f:7f:04:1f:04:ce:02:5c:6a:b2:5a:09:03:
                    d0:0a:c5:88:8c:29:58:e3:5d:16:52:df:48:83:35:
                    a1:ec:62:9c:cb:49:d5:3e:53:9b:7d:4d:75:cb:7c:
                    7c:6a:c6:21:e1:f4:ae:63:23:06:1b:93:6e:5f:dc:
                    b7:28:2e:7e:31:4f:2f:ba:96:80:ae:cc:22:df:07:
                    f0:28:10:55:4a:72:1d:42:a5:ba:1f:2d:19:14:7f:
                    e0:96:b8:43:d3:12:09:a8:57:d3:7e:2d:f4:0a:67:
                    23:d7:2c:a2:9b:2e:69:57:f8:e3:cf:41:d3:71:85:
                    8a:e0:36:6d:44:7b:45:23:bd:3f:0c:7f:59:c9:3b:
                    30:d2:24:58:1b:f3:c6:6a:48:e8:d4:bd:12:56:0a:
                    4f:d5:94:64:ec:2f:84:dd:26:1f:1c:22:39:20:51:
                    83:00:fa:97:25:ac:0a:29:76:3e:6d:cb:0d:46:7a:
                    71:3e:60:b3:c2:56:cd:37:53:6e:38:36:c3:d4:bf:
                    b3:37:78:3d:97:9c:18:5e:fe:64:87:d2:d2:a5:64:
                    8f:67:e3:d4:f5:0e:e1:04:a3:0d:59:e7:2d:8b:dd:
                    c1:aa:99:0b:88:75:f5:a1:c9:0a:ac:57:99:a9:39:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:3E:FD:0B:4E:2D:6E:8E:E6:AE:EB:D3:B0:65:E2:8E:E9:31:63
            X509v3 Authority Key Identifier:
                keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:7c:09:b9:23:25:b9:ea:5c:af:8e:5f:76:aa:8d:96:db:
         c2:07:09:84:b4:96:a5:29:53:db:c2:2c:f7:a0:c9:9a:5d:d7:
         73:13:94:06:ba:b5:36:bd:fb:e8:28:f4:ed:5d:20:a2:dd:18:
         ef:8b:3a:f6:75:49:ef:be:9c:42:a2:bd:9e:71:91:8d:d7:d5:
         76:fc:94:67:9a:c0:6a:2c:31:55:99:83:9c:ca:d9:77:1c:74:
         ff:3a:49:32:85:a6:5c:60:9c:b2:b2:38:53:5e:ad:28:2d:22:
         b1:77:c2:a1:ca:6a:66:ea:bc:25:2a:06:01:ff:b8:b9:a3:77:
         bb:4c:6d:f3:1d:e0:e4:71:24:a3:c6:a4:c2:f1:26:5d:79:25:
         a7:3a:76:37:78:1f:8f:68:67:fa:f9:41:8d:43:58:ea:b0:0e:
         ab:e9:ef:e9:ae:33:a5:9e:e3:48:7f:fc:2a:81:a3:77:00:bc:
         90:83:91:83:53:9a:b5:9e:d2:83:fb:4c:01:94:34:29:d1:e5:
         ec:4e:6b:77:05:25:1b:25:4f:9a:f4:cf:c4:50:33:96:35:c7:
         84:a5:02:1b:8e:c2:20:52:55:7a:84:ce:70:f0:73:86:2c:c8:
         58:ed:0d:ca:46:35:be:76:74:0f:11:02:70:e8:a0:5a:22:2f:
         e3:03:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----