Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File:                     rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier:          GeZu4nPocpByVr/IFJyWhFXbfGjCBRF4tqkGkEwRzKc=
Subject key identifier:   FD:C5:6D:B9:D9:A8:BD:B0:3B:E3:11:94:3F:1E:E4:94:73:1F:6A:82
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer:       /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial:       01962F3DAA9F0486784135B7EA2586CA070F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number:          52
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
                          2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: FDWh1TLbXdHH9PeeEHC9sR+9pfP/q9pwyitj04H2uGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:9f:04:86:78:41:35:b7:ea:25:86:ca:07:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=fdc56db9d9a8bdb03be311943f1ee494731f6a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:7a:15:11:f1:06:21:a8:73:a9:3b:37:73:
                    4d:5d:b8:2a:27:42:45:2c:98:e5:28:aa:c8:96:12:
                    5e:eb:75:fb:f8:33:71:48:93:54:66:a1:05:2d:f4:
                    09:68:5b:07:6a:19:0e:9f:52:da:56:ea:47:64:22:
                    81:d7:86:71:e8:66:d7:b0:90:33:36:12:13:d5:f5:
                    76:67:df:28:97:b4:fd:db:1a:e1:e6:6b:91:83:d5:
                    6c:12:b2:c5:81:13:d0:bd:e0:39:64:39:61:26:4d:
                    85:65:71:61:d6:da:d3:9d:03:0a:d8:8b:17:86:fa:
                    41:24:ef:89:0e:15:66:8a:7c:ff:8c:c8:fe:15:a1:
                    84:01:a1:99:a1:60:3c:fa:ce:12:86:db:ff:0e:97:
                    b5:5e:34:ee:0a:3e:d6:f4:c5:6e:e1:22:65:b5:e9:
                    90:c1:23:9a:71:08:da:7c:7a:cc:16:03:5f:a2:1c:
                    c8:27:07:9d:0a:13:ca:e5:64:3d:3c:d4:4b:61:86:
                    5f:e5:19:6b:2c:4b:f8:e2:39:30:56:2c:fb:48:34:
                    d2:48:b8:b9:da:84:b1:db:8b:1b:d2:a4:7e:82:99:
                    6e:cc:d3:65:b5:d3:cc:87:68:32:06:08:b7:b1:b3:
                    2f:90:6b:29:7e:9b:4c:3e:f5:46:c2:95:7f:6e:d6:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C5:6D:B9:D9:A8:BD:B0:3B:E3:11:94:3F:1E:E4:94:73:1F:6A:82
            X509v3 Authority Key Identifier:
                keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:a1:bf:b1:d9:90:31:6b:bd:08:be:60:33:2e:49:85:24:
         63:bf:84:85:ac:be:ef:57:da:49:f4:99:29:9f:66:86:85:c1:
         0d:b3:88:e8:55:3e:92:3b:2f:2a:31:e8:cc:ba:94:18:6c:5a:
         75:fb:d8:da:f7:47:b5:1d:fe:7d:ee:af:ae:96:95:98:db:78:
         2a:48:ee:0e:0b:f5:a6:72:72:78:27:28:6e:a0:37:2a:1b:fd:
         f9:3f:64:3a:e4:0f:91:43:22:53:9f:c3:b3:dc:c6:7c:7f:0b:
         81:96:ac:f2:9c:89:64:ec:a2:6c:ca:72:b6:67:07:7d:8f:cb:
         73:d2:2d:75:20:1f:6c:99:ff:a7:f3:95:78:c8:20:e5:87:bc:
         e0:2e:e4:f4:1a:8f:b7:ea:e3:57:2e:9f:d4:8f:60:f5:e9:85:
         38:2f:4a:df:1e:06:6c:f0:5c:b8:f5:a3:87:37:16:8e:f7:64:
         ee:c2:1b:23:1b:73:38:31:68:ad:4d:05:4d:bc:dd:2f:c7:9d:
         ae:b9:38:e0:28:25:4d:a9:ab:4d:af:66:d7:29:57:db:62:8e:
         d9:0e:d5:8f:b0:09:dd:13:02:04:b0:f0:75:b7:df:36:af:b3:
         69:99:6d:1a:cf:dd:f3:75:49:06:7a:db:e8:65:f2:24:f3:a6:
         93:13:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----