Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File:                     HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier:          cXPS0gbnvCP3465QslW8m92yZJLCLOAcVWVXDHRqjIU=
Subject key identifier:   33:68:46:5A:6F:6E:37:4B:8E:AB:63:5C:56:72:0E:7C:E6:F0:CE:D3
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer:       /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial:       01962ECF67D2633EC0CCD95CB8C3B2FDEC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: m+GVeDoKRxnm+VQwJCTaauadVDTEgCX3CnHrwRBFb+w=)
                          2: ppcwt792_0fJ4KuVU5oh5bBxCK8.roa (hash: aGVLz4AJdDai2w17wkg6qcb6wYCOJ1V940AR2tF2zrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:d2:63:3e:c0:cc:d9:5c:b8:c3:b2:fd:ec:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=3368465a6f6e374b8eab635c56720e7ce6f0ced3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:e1:f1:81:1e:9a:af:3d:5f:76:f1:c4:b2:
                    14:11:26:86:68:a1:e7:3f:38:41:d1:46:eb:5d:fa:
                    30:6a:78:1c:19:c3:f7:be:8a:ae:8c:6d:d1:4c:51:
                    38:06:3b:04:3b:65:c8:9d:ea:af:72:3f:17:8c:3b:
                    41:27:60:e4:68:b3:68:23:84:6c:c4:2f:05:b2:de:
                    00:1f:0e:0a:62:82:cc:e9:d3:96:e0:70:3d:10:5f:
                    ea:ef:97:1b:e0:77:f5:99:af:c6:61:14:ca:e0:ac:
                    0f:27:bd:c5:1d:8d:34:a7:4d:fc:c8:63:b2:20:73:
                    a8:5f:bd:e9:f7:25:9d:b6:bc:55:f1:93:70:88:9f:
                    0c:d1:75:2b:78:a8:8a:3f:d1:e3:51:ee:f2:49:8e:
                    8c:4d:cc:5a:1e:a8:03:0b:66:b9:a7:c0:76:08:fa:
                    a7:72:2e:ae:c3:c4:1c:fb:03:52:ef:65:11:f0:34:
                    d8:3f:37:e1:36:4f:de:e1:e3:62:cd:09:63:f0:1f:
                    a1:f1:60:ef:dc:80:ce:b0:31:4a:61:0b:09:25:33:
                    98:01:a8:cd:43:56:69:de:1f:4a:64:27:87:80:70:
                    60:7a:f6:bc:fb:b2:40:33:1f:99:91:22:79:75:62:
                    c6:88:02:d9:0b:50:2b:43:c5:e7:be:5b:58:e8:bb:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:46:5A:6F:6E:37:4B:8E:AB:63:5C:56:72:0E:7C:E6:F0:CE:D3
            X509v3 Authority Key Identifier:
                keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ff:34:6a:6e:24:04:7b:aa:a6:74:a2:88:8b:2e:24:56:b1:
         38:ee:0a:39:9a:60:85:ce:96:93:a9:d6:3e:ac:c5:37:07:0c:
         29:97:f5:af:8e:54:72:69:b3:1f:54:81:28:64:75:d9:78:71:
         d7:1a:3d:2b:76:2f:2b:bc:8e:b7:e7:e5:ee:9f:d7:2f:cc:ab:
         68:b6:91:44:90:ff:3a:5d:9d:aa:c7:a9:66:b8:3a:ac:76:12:
         50:85:27:2e:e2:71:29:fa:47:6d:3d:a0:b4:d0:42:2b:f3:8d:
         8f:54:8e:f6:e7:19:b8:cb:c3:d7:1f:e3:40:c4:86:68:d6:71:
         2a:e6:b0:5c:29:b1:e3:cb:91:0d:4b:21:a7:f4:57:5f:5e:3f:
         b7:04:80:b6:de:91:9d:f8:4e:62:4d:17:d6:7b:50:1b:c2:eb:
         01:83:29:61:53:dd:d6:88:32:46:94:c9:2c:78:ed:07:8d:73:
         a7:0d:1f:3e:1c:24:67:a0:dc:ae:c5:c7:7e:ba:4a:e3:07:3b:
         59:17:9f:0b:73:f9:e6:75:0d:25:8e:e8:6d:ec:e5:f9:e7:f5:
         9a:2c:5d:be:09:8a:4b:e7:d0:c4:2d:dc:5b:23:6e:38:1d:10:
         15:41:f8:e7:20:d9:27:71:8b:43:e2:07:87:53:28:e9:8f:52:
         9c:c8:17:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2fSYz7AzNlcuMOy/eyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjhiMDdjMTU3YTVkYzYxM2M5MjY0ZGFmODllN2M4NjBl
MzNlNjMwHhcNMjUwNDEzMTEwMTA2WhcNMjUwNDE0MTEwMTA2WjAzMTEwLwYDVQQD
EygzMzY4NDY1YTZmNmUzNzRiOGVhYjYzNWM1NjcyMGU3Y2U2ZjBjZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6bh8YEemq89X3bxxLIUESaGaKHn
PzhB0UbrXfowangcGcP3voqujG3RTFE4BjsEO2XIneqvcj8XjDtBJ2DkaLNoI4Rs
xC8Fst4AHw4KYoLM6dOW4HA9EF/q75cb4Hf1ma/GYRTK4KwPJ73FHY00p038yGOy
IHOoX73p9yWdtrxV8ZNwiJ8M0XUreKiKP9HjUe7ySY6MTcxaHqgDC2a5p8B2CPqn
ci6uw8Qc+wNS72UR8DTYPzfhNk/e4eNizQlj8B+h8WDv3IDOsDFKYQsJJTOYAajN
Q1Zp3h9KZCeHgHBgeva8+7JAMx+ZkSJ5dWLGiALZC1ArQ8XnvltY6LtFUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNoRlpvbjdLjqtjXFZyDnzm8M7TMB8GA1UdIwQY
MBaAFBwosHwVel3GE8kmTa+J58hg4z5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2Mt
OTYzMzM0ODllODU1LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2MtOTYzMzM0ODllODU1
LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnf80am4k
BHuqpnSiiIsuJFaxOO4KOZpghc6Wk6nWPqzFNwcMKZf1r45UcmmzH1SBKGR12Xhx
1xo9K3YvK7yOt+fl7p/XL8yraLaRRJD/Ol2dqsepZrg6rHYSUIUnLuJxKfpHbT2g
tNBCK/ONj1SO9ucZuMvD1x/jQMSGaNZxKuawXCmx48uRDUshp/RXX14/twSAtt6R
nfhOYk0X1ntQG8LrAYMpYVPd1ogyRpTJLHjtB41zpw0fPhwkZ6DcrsXHfrpK4wc7
WRefC3P55nUNJY7obezl+ef1mixdvgmKS+fQxC3cWyNuOB0QFUH45yDZJ3GLQ+IH
h1Mo6Y9SnMgXZw==
-----END CERTIFICATE-----