Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File:                     hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier:          C6GStEF/SzlheUJ+6kuWRdQ+j/sHnSnGE0Zkqlooyjs=
Subject key identifier:   06:B7:75:E7:7E:EA:6D:CE:B3:58:E4:7F:29:00:86:CE:F0:3A:1F:37
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer:       /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial:       01962F0646509CB85EC6BB179993064BF306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: puOScfDFUKjtIEWV1EuTCQ0yALM04E9dMYKmxdfm3dQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:46:50:9c:b8:5e:c6:bb:17:99:93:06:4b:f3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=06b775e77eea6dceb358e47f290086cef03a1f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:d6:c8:8c:2d:4e:d6:f7:76:05:ec:ee:ea:
                    09:6a:bb:d2:34:90:44:f5:e9:21:91:98:e8:16:54:
                    0b:a6:7b:8d:4d:fc:f2:28:95:8e:da:87:1f:b8:97:
                    01:64:80:d4:85:62:78:63:5b:60:52:1f:0b:6c:2c:
                    48:4d:a1:6d:6f:d5:d0:c4:34:ad:a3:3e:1d:6e:0e:
                    23:d5:ec:04:01:1b:ef:98:45:89:69:49:fb:07:7d:
                    9f:80:c3:06:e4:e3:11:71:b4:5b:43:19:3e:9d:6f:
                    76:26:40:bf:25:51:6c:a5:68:16:35:f0:18:03:c3:
                    c0:56:a8:6c:76:97:2f:ab:fc:30:39:ad:37:f5:36:
                    99:7d:6b:99:ea:8f:97:64:f8:87:c6:2a:e2:72:0c:
                    f6:88:43:a5:24:00:00:46:ac:21:73:4a:90:10:e1:
                    06:ba:d7:44:8f:c2:c0:78:ba:56:64:78:40:6f:2f:
                    fa:76:a5:30:a8:e8:6f:04:f5:e3:9e:98:99:9c:22:
                    dd:fb:68:01:eb:2f:fd:ad:23:a0:d4:bf:97:01:45:
                    e9:c5:61:39:ba:33:df:18:51:fc:71:71:ae:19:c8:
                    19:d0:ed:f2:9b:20:29:c4:95:ef:cf:a4:96:6d:e7:
                    5e:08:9a:52:29:df:b2:75:45:a9:b3:28:16:8c:0c:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B7:75:E7:7E:EA:6D:CE:B3:58:E4:7F:29:00:86:CE:F0:3A:1F:37
            X509v3 Authority Key Identifier:
                keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:a1:45:74:dc:8e:ce:9d:64:28:b9:0a:ba:94:c4:b3:86:
         c5:2d:e8:e6:b7:80:b1:bd:72:69:92:1a:2e:b5:d0:ec:3b:10:
         85:54:40:b0:61:35:47:69:91:15:73:b6:d0:57:0d:f4:7e:a9:
         c0:40:67:24:8c:74:4b:0f:6d:d7:e2:42:25:5f:f6:85:4e:8c:
         6d:a6:4f:de:c2:58:6b:92:54:9d:8b:5d:04:68:12:c4:94:16:
         a0:cf:08:4e:35:4e:e0:bf:fc:5c:ce:8d:32:cb:a9:30:4d:3f:
         5e:97:0c:e2:fb:51:be:b7:8a:77:93:be:74:e9:f1:70:c9:40:
         8e:f5:44:37:cb:4c:49:73:53:2a:6f:4f:b9:13:b3:2e:ce:7f:
         be:24:3d:d6:65:d4:df:4e:1b:43:2b:ed:2e:39:e2:c6:8a:49:
         16:0f:ae:b4:e1:56:64:9d:53:fa:8e:85:8b:82:f4:a3:84:80:
         4a:4a:9a:4b:56:2e:3c:88:63:c5:c2:24:23:92:1f:fb:29:ac:
         b9:5b:e9:3d:df:03:27:56:bf:4b:cc:19:e5:72:a0:f2:37:51:
         92:4a:f4:2f:39:1a:21:7b:60:1a:69:5a:f4:29:fa:a2:19:f3:
         9c:71:aa:13:6d:11:f2:8e:ea:76:a6:6a:f3:53:14:07:5f:21:
         60:7f:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----