Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File:                     HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier:          Eas7H+/FavAq7bYMz0gfe1wdORgL5huRRA88uahbV/0=
Subject key identifier:   56:F1:37:2D:12:EF:2C:68:7B:57:FF:03:F4:11:CD:99:2D:8D:02:00
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer:       /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial:       01962DF3ACAD131F3742DE1E1353FE8A5DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number:          09B5
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: JSMac0iZFl7QAdY4n865GVX2Xvk2Mmr66nx/o0NHHu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:ad:13:1f:37:42:de:1e:13:53:fe:8a:5d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=56f1372d12ef2c687b57ff03f411cd992d8d0200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:29:c8:4d:92:ef:70:06:ad:e3:26:65:69:
                    b3:e8:79:f3:df:85:7c:32:e2:9d:11:0c:1f:38:c6:
                    6a:33:3c:ab:56:61:7e:ac:61:27:d6:1d:f3:30:80:
                    f7:9c:25:c2:35:a9:bf:4b:e9:b4:af:f1:76:8c:b5:
                    56:43:82:d2:28:ee:67:91:04:96:33:c0:1c:7c:85:
                    8e:14:81:98:bd:c6:b3:ad:7f:01:2b:b9:f9:17:d6:
                    8c:a6:d1:8d:fd:32:32:76:b3:7f:8f:a9:5b:be:20:
                    06:3e:70:94:93:23:35:a5:4b:18:1a:4b:d1:11:b0:
                    68:d5:f0:7f:c6:2c:10:fe:de:e3:c0:df:37:f9:21:
                    21:09:a9:30:65:bb:02:30:89:25:33:67:35:3c:6a:
                    49:ae:f7:13:2b:21:80:86:64:b6:58:6f:59:b9:dd:
                    25:22:7c:9a:4e:df:43:cd:33:16:0e:d2:db:3f:07:
                    a3:af:25:bd:8a:2e:f0:ef:e1:4a:e7:00:3b:75:0a:
                    d3:16:a5:de:38:ba:83:c3:d9:4b:b2:c2:67:42:e9:
                    42:51:e1:d3:36:49:77:2e:73:09:f5:47:ad:60:04:
                    1d:95:3d:7a:85:fa:3b:1f:00:81:d3:a9:12:0b:3c:
                    b5:77:dc:0d:52:69:78:ff:c1:89:8a:1e:ba:da:05:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F1:37:2D:12:EF:2C:68:7B:57:FF:03:F4:11:CD:99:2D:8D:02:00
            X509v3 Authority Key Identifier:
                keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8a:c1:0c:f5:75:56:8e:8a:9c:49:a4:0c:38:54:9e:9c:61:
         c3:05:79:e4:d6:8b:e0:e5:10:b2:5c:fc:ef:20:de:18:da:45:
         89:87:4b:cb:13:1b:93:a9:0a:32:bc:af:62:1a:26:39:9a:65:
         f4:91:06:1a:4c:cb:e1:57:5b:63:1d:26:96:b5:0b:b0:c2:43:
         51:97:3e:46:cb:85:bf:ee:87:b3:44:34:16:91:18:a6:6f:5f:
         a9:8d:89:90:ff:c8:01:51:13:b7:24:aa:69:b8:1c:7e:2c:a3:
         36:d7:23:d2:c0:c9:fc:fe:5d:16:90:0a:cf:b9:cd:01:8b:47:
         5c:6b:43:ae:97:32:97:d2:f2:cd:db:a2:88:0f:ac:9d:0a:51:
         70:18:89:bd:cd:4d:07:f8:62:28:5a:0d:8e:a1:37:e6:17:0b:
         54:3d:fe:79:73:81:3f:a0:ee:a7:10:28:07:1a:c3:d9:5d:8b:
         f9:2e:49:1a:fa:15:9a:46:17:07:65:07:3f:ce:9e:b5:65:4b:
         50:6e:1f:df:ef:6e:51:fc:29:e0:19:68:04:bd:94:d5:16:4b:
         e3:f2:57:cf:e3:10:2d:7c:b2:46:d5:e6:15:c0:bf:59:e8:23:
         04:65:fa:37:82:dc:57:5c:c1:c5:e0:a0:82:1c:97:a4:ba:a7:
         eb:43:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----