Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File:                     HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier:          Tro3VYRlFPZJGHvI5DbE07L2PzIKRIPcbxy5I10f7K0=
Subject key identifier:   D6:A1:8D:29:66:66:30:F1:83:75:01:67:C2:C0:60:B3:9F:66:22:10
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer:       /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial:       01962F3D919217867D41617D772F9C535E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number:          0548
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
                          2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: 6A+xVueJhOMJBArFrbyWAFlJ3IZYZcFMfuOCuwWLO1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:91:92:17:86:7d:41:61:7d:77:2f:9c:53:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=d6a18d29666630f183750167c2c060b39f662210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:a9:09:26:e2:92:0c:2f:5f:d0:37:d2:e4:
                    2a:4f:8c:3b:30:93:81:bb:0a:2c:83:d4:a1:82:69:
                    4c:46:82:d3:90:7e:da:8d:f1:42:52:14:6d:e8:40:
                    e9:ab:f4:28:e5:a0:eb:c8:33:5b:f9:fb:3f:c4:c1:
                    5b:25:6d:2b:f9:ab:56:33:5e:f5:1c:b5:cd:75:04:
                    04:1c:a2:f0:3c:46:10:34:04:54:ac:2b:8b:5a:c1:
                    e2:34:5e:77:21:74:b2:ea:b4:32:98:0d:63:f4:cf:
                    bb:b6:fb:92:e2:03:c6:bd:56:85:b8:e8:ce:69:0d:
                    7e:d9:8e:a8:d7:ca:84:37:04:b3:3f:3f:e2:cc:54:
                    88:a8:d9:c1:92:c2:c2:2a:87:e4:fd:49:89:a1:30:
                    b0:db:4e:03:3d:0a:d8:ab:8d:d3:8f:dc:a6:71:25:
                    df:34:3f:b5:3d:03:3c:3e:c3:fc:91:19:27:aa:2a:
                    cb:e1:fb:d7:21:16:ff:58:fb:99:3a:1b:20:13:46:
                    dc:c0:4a:09:32:4b:a8:14:e3:0f:8e:e6:da:c6:e7:
                    96:ef:2d:2a:93:95:b9:79:e4:7c:eb:32:0c:bc:5d:
                    a9:80:aa:ca:61:77:ed:e6:87:33:ee:7b:0b:32:1e:
                    3a:63:17:81:33:ee:eb:aa:21:11:16:72:f7:97:95:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A1:8D:29:66:66:30:F1:83:75:01:67:C2:C0:60:B3:9F:66:22:10
            X509v3 Authority Key Identifier:
                keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:b1:7b:50:a4:91:aa:9e:9c:e7:b1:06:37:66:20:46:6a:
         b8:03:da:61:85:ed:a8:38:b5:f2:b7:59:e0:c7:17:1a:6c:fb:
         04:e7:3e:8e:7d:be:a6:8a:89:a7:bc:41:6b:09:7a:95:af:a7:
         f8:ed:cf:1a:f0:92:6d:d8:12:65:0c:d8:37:3e:23:41:7d:ea:
         90:69:34:73:bc:60:59:c8:8b:7e:bd:0a:ea:75:98:fa:1d:b2:
         5e:97:d0:7b:46:91:c2:1d:83:b8:05:33:c9:65:51:ac:33:51:
         96:50:cc:ae:64:f4:5c:5f:3d:ec:c2:28:87:86:a7:bd:f4:e0:
         a3:2a:9c:6a:db:fa:cf:2d:70:33:f6:4e:83:0a:4f:55:7c:db:
         aa:c5:aa:7a:2c:49:f1:aa:b1:59:ea:b6:40:ab:b7:76:33:73:
         37:cb:6b:68:21:ed:3e:2c:74:26:0a:88:f3:ff:e6:9f:63:90:
         80:c6:7e:35:08:c3:2f:e9:98:81:4e:97:0b:53:57:e8:d8:e5:
         21:b4:81:4c:80:ca:d2:fc:46:4b:51:94:5f:40:9b:67:a2:6e:
         ee:1b:5b:5d:29:26:25:26:86:37:d7:2d:54:04:01:7f:46:1f:
         5f:5a:fe:8e:b0:6a:cd:a2:dc:21:8f:db:8a:35:18:06:7a:59:
         ca:f8:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----