Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File:                     4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier:          NuDcKsvp/UXQuVcrj2AlSXQZj+Md1j/FSSuTu6VJKn8=
Subject key identifier:   B2:7B:69:60:D9:69:1D:02:F8:BF:76:6B:F9:0F:53:6B:38:61:70:BB
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer:       /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial:       01962E61A7DF6CB16528F37FD067E46E7486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number:          0330
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: jU1n3rqfBEHl4pLpF2PQO5it3rmoHKVWGf03Oj7CEuw=)
                          2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a7:df:6c:b1:65:28:f3:7f:d0:67:e4:6e:74:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=b27b6960d9691d02f8bf766bf90f536b386170bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:c5:0c:af:66:f2:bc:2c:80:10:4c:30:ec:
                    4a:4b:b0:b1:6b:35:9c:af:b1:4e:43:12:e9:05:9e:
                    d6:8c:97:a8:b9:07:0c:f0:12:92:f1:a0:33:2a:bc:
                    d9:31:75:7e:9c:b7:3a:77:e7:bd:9d:b2:22:80:d0:
                    6c:60:85:d4:a5:95:e1:80:58:5d:19:28:d1:b2:32:
                    7c:ed:62:90:2f:d0:0a:13:40:cd:d2:23:b5:d6:22:
                    cb:73:2b:f8:9c:6d:48:9a:7a:bb:d9:80:04:1a:2b:
                    a6:5a:79:98:a6:c6:01:49:c6:eb:be:69:6d:9c:8b:
                    96:8a:47:8f:16:ab:aa:52:c4:27:26:9b:61:fb:3a:
                    db:a7:b6:7a:e6:99:ea:2a:72:c2:3c:aa:89:60:fe:
                    af:56:65:66:59:ce:12:5e:eb:4b:d3:fa:c2:e1:43:
                    2e:96:6d:9e:a2:95:79:86:d9:15:8e:8e:82:f1:82:
                    9d:7b:f4:87:4a:41:3c:59:73:fe:38:8f:63:4f:87:
                    72:97:7f:a6:39:e7:12:80:a2:8f:8e:9b:d9:81:44:
                    7f:5f:25:57:2a:74:47:a8:ec:28:9e:ff:e2:8b:52:
                    4a:b6:1f:a3:45:0d:d1:57:6b:09:14:3c:b4:86:f6:
                    9e:84:c6:93:fa:d7:ce:14:fe:8b:f9:2a:39:10:82:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:69:60:D9:69:1D:02:F8:BF:76:6B:F9:0F:53:6B:38:61:70:BB
            X509v3 Authority Key Identifier:
                keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:e5:1b:e9:18:f9:c6:b8:d4:67:76:4e:5c:a5:6f:85:ce:
         8f:3e:cb:2f:fa:32:bb:24:70:80:29:43:55:df:b9:48:12:f6:
         8c:b5:61:91:13:16:3f:4b:be:49:a6:9d:17:0a:12:64:9e:55:
         0a:46:a8:f3:26:83:03:70:ae:d5:2a:4e:7e:a4:3f:60:46:2d:
         52:3f:16:79:79:13:3b:a0:0c:c2:c1:73:cc:de:f7:30:9c:ac:
         16:c5:98:34:0a:38:d8:73:61:f2:6b:b9:a6:a0:57:46:f8:70:
         23:38:54:8b:05:41:15:ba:c0:5e:71:0b:6d:51:ad:c2:b3:f8:
         c0:20:02:8a:81:f1:72:cb:6e:c9:45:f4:fd:13:3f:ab:ed:e2:
         c1:e9:72:d6:1c:74:b6:a3:ef:25:e8:d5:31:43:5f:8d:59:f9:
         08:04:d1:c8:b7:85:da:3c:ce:fb:5b:d6:d5:25:0e:03:92:3f:
         96:8d:b8:b6:9e:41:4e:cb:97:34:93:9f:e4:ed:8d:e7:51:53:
         16:7d:38:f6:2a:6d:a4:c5:39:31:32:8e:6e:0f:ce:f0:ad:51:
         f7:f0:54:4a:2b:cc:d1:77:71:df:4e:a6:c4:d3:6d:ce:f0:df:
         82:e9:c1:e4:ce:0e:00:70:10:0a:c3:20:75:50:63:3a:18:73:
         d0:62:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----