Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File:                     hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier:          rbalzChxMt39g0HgW3HsGF0OTbWvfybN7A7VOZiZtT8=
Subject key identifier:   14:90:8E:38:BA:46:FD:82:B0:8F:AB:1D:B6:0B:9D:07:CC:6D:AC:83
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer:       /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial:       01962DF44601B3E444CF307FE16FDCE9E763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: bkRjZHh7M3lacg1ufbfxMpCJ0NA1KD/KLOzrmhwmVMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:46:01:b3:e4:44:cf:30:7f:e1:6f:dc:e9:e7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=14908e38ba46fd82b08fab1db60b9d07cc6dac83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:ae:97:d0:f0:22:91:bd:82:d3:6c:f4:df:
                    a9:b1:96:bd:1a:d1:1a:6d:ef:a3:3b:60:25:4d:92:
                    0d:5c:1f:fa:21:5e:94:12:ee:64:3b:15:d1:80:fd:
                    ff:51:90:40:22:20:df:b6:8a:0d:15:d8:54:3a:7a:
                    d6:a9:7e:aa:d6:dd:98:6c:5d:d5:5d:04:69:d5:6f:
                    71:47:6d:01:27:bf:82:1c:88:1b:b7:7a:c5:ab:a9:
                    e3:f4:ec:bb:83:24:e9:74:92:cc:f4:99:ca:1f:30:
                    c5:66:a8:15:1c:1b:53:a3:81:8a:a6:d8:2e:f3:84:
                    99:44:a7:03:f2:a7:09:80:c9:53:76:d0:13:71:e5:
                    83:9f:7e:70:12:ba:4b:13:80:f9:67:b9:aa:ee:a7:
                    16:dc:c6:1e:90:1a:29:2c:c4:02:28:d6:5c:04:f7:
                    bb:f6:b8:10:ce:f0:74:7f:d7:50:93:2a:41:9c:bf:
                    fa:b1:ba:5f:a9:3a:cb:ce:d8:33:85:de:48:33:84:
                    38:55:bc:c4:95:82:cf:8b:fc:71:ed:66:e7:55:f5:
                    df:01:85:33:60:9d:33:75:b3:08:0a:30:a9:6d:bc:
                    e0:fe:0c:b9:e8:c3:29:78:e9:61:24:ff:50:af:a6:
                    64:8f:d5:5c:09:b5:34:57:1e:b6:a2:33:80:e0:23:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:8E:38:BA:46:FD:82:B0:8F:AB:1D:B6:0B:9D:07:CC:6D:AC:83
            X509v3 Authority Key Identifier:
                keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:d4:6d:d5:80:14:25:a5:23:4a:c0:0f:96:45:c6:8b:e1:
         d2:a8:c6:a1:fb:25:e9:09:ad:3d:55:7c:1a:22:c2:07:01:28:
         0b:05:21:bb:5d:7a:2c:ff:a8:fc:e4:5a:53:cd:37:90:bd:d2:
         35:8e:30:7d:c2:f0:90:26:2a:7c:4a:43:56:48:d0:64:26:b9:
         66:51:ff:25:ff:8f:f8:d2:90:41:30:8d:0f:3f:8a:5c:9f:53:
         22:59:e3:28:93:5b:95:35:1d:c2:af:e7:e0:e3:41:2d:af:86:
         63:94:fe:f8:36:a6:e9:6e:ef:d9:08:f1:b8:2e:c3:bc:cc:6b:
         98:64:24:ef:41:76:06:d3:bd:ec:dc:9f:e9:3b:ff:dc:83:96:
         4a:64:25:e3:53:06:c1:3d:31:ca:8f:6a:ed:3c:49:86:70:96:
         af:f1:42:52:38:d5:97:8c:9a:05:e6:eb:66:52:52:88:f3:ef:
         1e:9c:6c:a9:f2:05:fd:d6:c4:ce:c7:47:6b:a9:23:24:aa:f3:
         7c:7b:2f:51:01:30:83:e3:82:37:62:35:15:fc:f4:2f:4d:6d:
         9c:ad:3b:91:1f:83:7b:82:9f:b4:db:ce:15:47:a7:84:bb:3d:
         8b:ce:92:95:13:80:32:dd:ed:7f:e3:44:d8:42:eb:2f:76:53:
         fb:1b:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----