Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File:                     HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier:          nwRN2E/87g3EuE9pYRkSo2Aig5Z/AgN48AiCCHgzA18=
Subject key identifier:   15:DA:6D:4A:18:00:72:89:42:D0:8B:88:0B:99:29:81:22:64:CC:55
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer:       /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial:       01962F3D5BCB1DA43384DE5431EAF650ABAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number:          08EB
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: +UMS25obLMCT+B/1+w/DkIh8F69HiU0b2B+vhg3QMt8=)
                          2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5b:cb:1d:a4:33:84:de:54:31:ea:f6:50:ab:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=15da6d4a1800728942d08b880b9929812264cc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:f7:dd:15:9a:94:a0:93:15:3a:29:fc:1f:
                    71:7a:75:ff:20:88:d1:9b:4a:05:f9:a5:f6:5c:f3:
                    99:f9:75:ad:a0:ae:5a:b6:f3:9a:09:16:89:97:16:
                    f7:79:b4:d1:9e:ab:cc:37:d5:1d:df:e3:8b:61:98:
                    31:04:ff:8a:cb:f0:3d:b0:64:e7:83:e9:85:e3:7a:
                    76:ba:9f:32:06:a8:b1:fa:46:ca:1d:07:8f:1f:d1:
                    01:34:d0:d4:fa:8c:0e:de:33:4a:f9:a3:52:21:9c:
                    d8:17:e3:a8:88:c2:00:5f:c4:84:87:d5:7d:b4:9c:
                    39:52:c0:2e:d0:95:45:90:37:52:06:ee:01:45:97:
                    bb:33:db:4b:db:aa:31:39:14:ec:ad:0a:b9:c5:ce:
                    b6:1a:3e:93:62:c2:a1:07:eb:6d:5c:aa:c9:36:f5:
                    53:3d:5a:82:8e:4c:0e:4e:e2:ca:00:13:e2:88:6e:
                    c0:d7:63:f5:15:73:d1:2f:d2:9e:fc:15:d2:2d:02:
                    93:c7:2a:0e:b3:10:82:e2:b0:5d:e8:ce:6b:0d:e0:
                    e5:32:2b:77:ce:97:ff:cb:30:19:ba:7f:70:31:a1:
                    cd:f4:c7:3c:9d:c3:f2:11:01:7a:3c:db:da:83:90:
                    65:2b:bc:f7:4e:61:77:03:e9:fe:d1:ff:b5:0d:14:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DA:6D:4A:18:00:72:89:42:D0:8B:88:0B:99:29:81:22:64:CC:55
            X509v3 Authority Key Identifier:
                keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cb:e1:12:1e:97:a6:99:33:27:0f:c1:ba:a2:48:49:22:61:
         7d:5b:1d:9e:ca:8b:7a:47:57:2c:18:74:85:5b:3a:51:e5:67:
         eb:3e:fc:f9:78:ad:be:e7:46:ff:7a:8e:57:93:66:3d:e5:62:
         64:78:5f:00:91:1a:89:9d:bf:96:b6:59:1d:cd:ef:8d:e1:a9:
         b4:ce:67:6e:76:a7:eb:66:5b:92:61:84:05:4a:07:91:84:a7:
         4b:07:23:c5:c2:72:5d:e0:d0:95:d1:e4:a4:47:50:d7:99:95:
         61:6f:3d:c7:d5:12:cb:dd:83:c8:05:e0:23:33:bf:b4:51:15:
         2c:36:a0:7f:ab:c4:ae:16:f6:fb:25:b1:08:70:56:b1:0e:1a:
         9d:80:af:72:88:ed:57:78:64:f5:e5:d3:80:a3:9e:b4:1e:18:
         91:5b:4a:85:5b:b4:86:63:ba:5c:f0:f0:1f:6b:ac:cb:33:58:
         f3:7b:78:6c:91:f1:62:a7:ed:b2:21:05:23:30:46:93:62:18:
         54:21:43:15:e8:43:84:c5:ec:65:d0:1b:e1:4e:0c:4a:e6:13:
         fd:86:29:b9:7c:4c:8f:d7:8a:54:0d:e5:53:6e:d2:07:05:6b:
         0d:d2:81:57:0b:67:26:19:d3:e7:4d:d0:e1:fb:25:45:21:97:
         5f:b2:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----