Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File:                     hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier:          sb6CXT34toVC4R/R0SbufzjrnVzZKNBPHCwBM9owEc8=
Subject key identifier:   A7:6F:4F:40:EF:15:35:7E:93:B1:BA:E5:A4:D2:58:11:41:4C:03:73
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer:       /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial:       01962FAB628D5062A14B62F105C671215F63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number:          048E
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
                          2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: D5OJMQLcKHmEo4UW5+W6unQLwiBK7ceYB7yPzGlrAb0=)
                          3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:8d:50:62:a1:4b:62:f1:05:c6:71:21:5f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=a76f4f40ef15357e93b1bae5a4d25811414c0373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:56:b3:9e:4f:b3:35:79:31:41:bf:f0:72:
                    b7:c9:bf:41:45:8d:39:7c:ed:ef:85:2f:e3:38:da:
                    2a:f6:58:72:fb:41:37:55:e3:e4:52:e4:81:7e:47:
                    98:9a:37:73:ce:da:aa:58:01:60:2a:ff:d1:dc:3d:
                    e6:04:e0:12:bf:be:d2:58:33:9e:0f:36:e3:ad:5e:
                    54:fc:d5:b1:fb:de:50:64:3b:52:62:1e:c4:4d:6b:
                    0d:a2:27:a8:24:5b:71:6c:d7:43:92:7c:81:f8:a1:
                    ea:af:94:1c:d1:b8:42:3a:4a:87:8e:af:9d:3c:57:
                    86:6e:fb:5a:72:e5:34:c7:26:bf:0a:0d:2d:a8:e5:
                    90:9c:fc:80:70:5f:6a:ae:e5:fe:8b:14:2d:a9:9a:
                    08:fb:61:63:55:33:a6:fb:86:bf:15:db:40:67:bb:
                    f2:90:4b:48:16:fb:d4:5b:02:8f:6f:4b:8f:19:79:
                    36:77:19:0a:c8:bb:77:07:da:f2:35:21:e4:97:cb:
                    b5:78:f7:b7:9f:c1:40:29:82:7d:02:2d:06:89:29:
                    86:66:18:d7:20:3d:0d:38:a4:0b:38:a8:6f:89:31:
                    b2:cc:44:31:c6:cd:0c:4e:06:95:af:f5:71:2a:4d:
                    35:47:65:0f:f9:0b:42:34:f9:8e:a0:be:f8:7e:e0:
                    f8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:4F:40:EF:15:35:7E:93:B1:BA:E5:A4:D2:58:11:41:4C:03:73
            X509v3 Authority Key Identifier:
                keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:53:82:cf:ad:2c:87:f4:d2:1d:23:04:d1:36:a2:a0:de:e5:
         6b:cc:63:3f:64:b6:eb:ec:00:ac:1f:b3:64:32:9d:23:69:8e:
         fe:2b:56:09:5a:cf:20:23:06:e1:e6:d6:ab:56:f7:6f:99:53:
         5e:9f:88:a7:1e:35:7e:56:e6:4d:a2:58:cd:20:48:69:60:d5:
         6b:6f:11:da:4c:2d:38:72:14:d5:5d:60:7f:41:ad:10:3a:77:
         27:b8:ed:9e:04:9a:8b:9d:ff:0b:07:c9:58:6c:9c:2c:1c:a5:
         0d:61:35:5c:53:6e:d0:d2:07:de:c5:a6:be:e0:f9:92:6a:fb:
         cd:bd:0a:2f:08:70:83:a2:f4:dd:4c:89:83:14:c3:9e:93:4e:
         6b:af:33:e9:ed:89:c0:41:38:34:32:5b:98:60:1c:90:1c:59:
         d3:b7:db:1f:e4:17:d5:ac:23:2d:70:18:9f:d9:b9:53:af:b4:
         26:76:a4:24:6b:22:2d:d4:df:3c:35:73:6d:60:7b:ed:d3:78:
         b5:7b:78:49:fb:76:61:04:ba:f2:03:ae:82:41:c1:6d:54:55:
         60:77:e0:0d:36:c2:d3:ef:5c:ef:28:16:97:0f:f5:1f:85:a4:
         0e:4f:94:89:4d:48:9a:c3:af:34:b1:94:a2:76:01:cd:03:40:
         49:d8:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----