Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File:                     hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier:          HU4ifQ/LsKTXT4JEAbSKslzNgH04Q0EBsRcd+Ci8coM=
Subject key identifier:   67:79:13:C5:B3:8F:E6:A0:11:13:18:61:B2:5E:A6:D7:0C:44:59:17
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer:       /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial:       01962F3D4C626E62B2EBC64A3BC6B27A0BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number:          36
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: R5+rlNKMJHMoFTDIMIOqMBxlbuRh+jMjOf9gjtkXOY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4c:62:6e:62:b2:eb:c6:4a:3b:c6:b2:7a:0b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=677913c5b38fe6a011131861b25ea6d70c445917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:f0:ae:c6:16:c9:7f:1f:30:c7:5e:1b:b8:
                    02:46:22:40:cc:95:2e:5a:cc:c3:48:b7:de:6d:e3:
                    e6:c6:5c:1d:93:be:df:d6:7b:db:8c:49:06:87:3b:
                    3c:21:04:2f:e6:c0:d5:7e:b3:d7:87:1c:bf:6d:71:
                    a8:df:1f:94:eb:9f:cf:6c:e9:f3:29:5d:30:a6:ce:
                    1a:9f:2c:8b:47:10:91:6a:c5:02:8c:4a:66:73:fb:
                    1a:3e:d8:ce:68:11:54:ce:45:8c:49:b4:0f:03:52:
                    ca:fa:f6:75:d5:be:f2:91:06:cb:f0:e9:31:58:f5:
                    d5:b5:58:ab:b3:ba:0c:dc:95:b2:a6:f9:10:d8:b0:
                    9e:e6:12:19:f2:d1:5e:25:8b:b8:ff:f2:0f:76:6e:
                    c3:b2:20:14:be:be:ff:0f:3b:11:ee:f0:5c:b3:6f:
                    6f:59:3d:4b:4a:04:2f:65:58:68:a7:48:f9:1f:82:
                    4a:01:4a:5e:fb:98:cd:ed:3b:6c:74:b6:7b:e5:bf:
                    96:d9:7a:ea:11:bf:8a:12:b4:e8:e3:60:fb:4f:3f:
                    65:ff:7d:1b:cc:5f:93:49:f8:5d:3e:5c:82:4c:c6:
                    f2:84:49:15:00:33:b4:02:80:55:11:e1:5e:dd:1a:
                    ef:cb:a0:16:27:eb:44:95:10:e2:ec:6a:5d:6e:98:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:13:C5:B3:8F:E6:A0:11:13:18:61:B2:5E:A6:D7:0C:44:59:17
            X509v3 Authority Key Identifier:
                keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:cf:04:9c:ff:50:e2:f3:1d:91:14:66:25:43:9c:af:f9:87:
         dc:4e:2c:a2:d6:2e:70:e4:8d:f3:6b:b7:b4:a0:c8:b4:8d:06:
         42:07:08:93:7c:1c:24:cb:0c:0b:af:c4:ad:61:58:95:b1:f0:
         43:87:c0:56:35:9b:d7:bf:8d:21:31:dc:8b:11:07:37:cf:b8:
         29:9e:92:02:66:dd:64:c2:5f:21:45:6e:08:61:8d:a1:ee:dd:
         af:e7:71:70:09:ae:c5:72:3e:66:a5:dd:b9:1b:ad:37:f7:70:
         2d:b9:e0:ed:23:a9:0c:5a:d6:f5:2b:cc:73:b9:71:05:79:db:
         f5:47:07:c5:18:38:5b:be:28:c2:49:e7:2d:4b:6b:cc:66:34:
         36:9a:76:24:67:51:bc:d8:91:fd:2f:76:51:3b:a8:ad:03:10:
         d7:a1:95:05:1e:80:98:42:b0:26:ed:30:57:ac:de:ba:11:a1:
         c9:b1:23:18:95:3f:90:84:70:c8:ed:20:ce:76:a2:8d:3c:e7:
         de:37:87:7c:b8:95:f8:10:06:7e:46:84:36:66:13:13:8b:bc:
         07:ae:0f:a5:1d:50:a7:9c:73:2a:de:2a:dc:75:c4:f3:05:bd:
         d5:64:d5:04:2f:7a:2a:e2:a7:6b:d7:52:f3:70:9a:19:58:a9:
         06:7a:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----