Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File:                     HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier:          R7s5VIk3m05XMY/IlSbGqHcKsV+zmVkqASH1GckdoWQ=
Subject key identifier:   60:E9:3F:D7:96:8B:67:6D:66:18:0D:2F:89:9E:A8:DD:67:94:B3:F1
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       01962F749EF6BD4E5FE9904D809FC940B081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: o8lCq4B15LNFR0QEBaNgJPo09yi75vuRzq63GBxRpZQ=)
                          2: HKyKcuG2QNZXVCZbzlsSYd8S3kw.roa (hash: WsComY/xpr7CRKjl1OS19nvkdUYgY57xLKmt+FoyLxs=)
                          3: NMYTYXjVSSW_zjS5UcL1_MJYMhw.roa (hash: sb8TB9OQXYjgHET+s0jEt1SW4MRtm0F3nj4wUyz73j8=)
                          4: OL6AoyvltIWrfared4b30q9zkxI.roa (hash: BCZJFaW2H8wcaghHXjKzyZLLD5xoj/h4op/UrSZpM4s=)
                          5: cdvkytGTuhzfI_n3jlQrgir1LVg.roa (hash: bDSSCJ1WplO8Ib0UIaI2qA5CZAt1v6VMlLCWW3FIaSk=)
                          6: jLAxUa8xvZ_xtGFLN3MZzH02ngY.roa (hash: 2KcY9b/rNpgICtwXDDn50o8m8wTGL/9zVFvIOuzYcZI=)
                          7: jwz6PrQFhFvB8Ouuwat3y2nONuA.roa (hash: TxTry85XsPky+PSHHeTZJCkAX90hbYBwkf2e2x38QSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:f6:bd:4e:5f:e9:90:4d:80:9f:c9:40:b0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=60e93fd7968b676d66180d2f899ea8dd6794b3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:b4:88:bf:9f:68:80:e7:69:77:8b:79:c1:
                    69:c2:28:8b:d2:0f:8f:98:88:61:98:e4:47:9f:77:
                    06:61:64:78:7c:25:f1:03:4b:e3:a7:64:e2:90:aa:
                    9c:08:31:6d:57:08:fd:1e:45:03:5e:83:55:a3:ca:
                    fb:59:bc:f1:0c:2d:f5:43:93:8d:08:49:10:84:23:
                    c6:98:35:fd:8d:65:3d:6d:b8:7f:03:3d:cf:41:25:
                    70:c1:d6:57:ad:01:9d:9a:cf:76:14:a0:f1:0b:44:
                    96:8a:9e:ec:b8:6d:c6:bb:d5:d1:cc:03:2f:26:a9:
                    d7:34:90:0d:f8:35:68:24:9e:ca:a9:1c:e4:2e:6e:
                    c8:91:65:6a:11:e0:f4:39:4b:b2:78:05:0c:6d:c4:
                    14:88:46:fa:86:15:8c:44:04:cd:b6:1a:05:90:2f:
                    9f:07:eb:bc:c9:19:f8:99:2f:a9:44:93:c8:6c:70:
                    f4:2e:0a:18:67:ec:12:cf:2e:14:49:1a:19:b8:4e:
                    dd:16:87:b7:07:75:95:ba:ff:27:95:8d:b5:0c:a7:
                    c4:44:45:46:a2:cc:cc:c8:72:79:b9:68:82:11:43:
                    d2:49:6e:83:43:df:8f:ca:5b:06:33:7d:49:97:3b:
                    c8:6b:c4:2a:02:5f:0c:f1:6c:f4:29:7d:73:c1:f2:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E9:3F:D7:96:8B:67:6D:66:18:0D:2F:89:9E:A8:DD:67:94:B3:F1
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:af:27:5f:30:b3:35:bb:76:7d:79:d6:e4:6d:0c:32:d4:f7:
         68:37:a1:c2:a4:65:26:c1:bb:40:a3:a0:de:c4:ce:99:2e:4a:
         21:0f:87:e0:72:0b:5a:75:54:44:40:e5:5e:52:18:d9:eb:b2:
         02:78:eb:9f:86:ec:75:f6:9b:a6:97:2e:38:39:04:b8:27:80:
         84:21:d4:40:47:e1:7c:7d:58:3e:3e:18:cc:fb:5a:de:02:ce:
         f7:f2:8f:ad:3e:dc:a6:f8:55:4e:2f:2b:5a:95:83:a6:36:cf:
         23:a5:c3:dc:af:07:98:4e:31:9b:68:34:c4:8d:50:d4:48:3f:
         9f:42:b5:25:e4:7d:3f:e4:28:ee:fa:ec:be:ec:50:1e:ad:99:
         5c:05:10:7e:1e:ee:64:74:37:25:73:0d:7c:ff:11:a2:14:19:
         bd:2f:05:9d:e8:9b:1f:b7:dc:88:92:11:43:e5:35:e6:f3:73:
         61:24:5d:3d:9c:3e:e5:f7:a2:25:b8:03:25:44:03:58:c6:4c:
         f9:d5:13:6a:6d:72:e5:80:6f:32:7c:a4:03:01:41:dc:70:5d:
         a5:dd:4d:37:4f:ba:ed:f4:b9:26:7c:49:c3:2d:ee:b9:70:43:
         f1:9c:38:9d:ac:42:c8:9c:e4:a3:0a:63:2d:02:31:cb:05:96:
         02:fb:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----