Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File:                     hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier:          /XKfyyTtWj6+1ZwUy1O8Ig69lfLtDQiaRcKFqZ4GX0Y=
Subject key identifier:   D3:96:97:56:AC:84:15:FA:13:E6:1C:42:62:C8:38:01:DC:76:6C:67
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer:       /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial:       01962FAB83A8EB43DD1C156EED66A51E08AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number:          05E4
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: yefb8NC3Z+dtWYE7Vnhanhj9Do0Xw5O1JuznfJCaLWI=)
                          2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:a8:eb:43:dd:1c:15:6e:ed:66:a5:1e:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=d3969756ac8415fa13e61c4262c83801dc766c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:c9:08:95:8a:42:7a:7c:fd:9c:aa:fe:cb:
                    72:45:b1:7f:ab:de:91:d6:7e:d3:ab:a7:cd:49:cd:
                    ef:50:8b:ec:19:f3:da:72:3e:d1:c9:f3:89:3b:01:
                    bc:0c:ec:03:7a:2d:f7:48:c2:32:ea:04:85:32:7d:
                    af:61:91:ae:4b:ba:68:18:01:b4:0e:6b:0e:cf:ea:
                    1e:95:1e:1d:5c:3e:1c:9f:5f:c8:6c:f8:4c:d4:c0:
                    81:bf:7b:40:8c:78:b6:3b:ac:48:06:12:52:8c:cc:
                    d2:e3:69:ff:cf:b1:2f:06:8e:70:90:7e:eb:18:70:
                    c4:ad:4d:41:cb:a6:9d:16:2b:74:31:87:83:b9:ba:
                    4d:54:7e:e3:e2:8a:2c:86:e6:58:7b:0f:d8:56:12:
                    c5:ff:e9:d8:e6:5f:f8:c9:a5:cb:96:26:a3:cd:97:
                    30:1a:59:39:30:ac:2f:ff:0d:1e:e6:48:97:1d:a9:
                    e0:f4:af:a2:5f:54:4e:b6:d5:d2:86:1a:4a:25:33:
                    03:64:08:ce:6d:c2:b6:1b:64:30:f0:fb:38:a2:6e:
                    66:82:a7:00:7b:8a:74:02:ce:fc:9e:9c:6a:2c:de:
                    58:09:5a:5c:30:16:99:f9:38:c9:42:fd:25:de:bd:
                    9b:77:ba:5c:a7:81:72:7b:00:01:95:e4:0b:ca:2b:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:97:56:AC:84:15:FA:13:E6:1C:42:62:C8:38:01:DC:76:6C:67
            X509v3 Authority Key Identifier:
                keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:64:68:da:3b:34:24:cc:a5:bf:84:69:48:11:50:65:e1:e3:
         14:ff:b5:79:30:8e:b5:24:a2:18:ce:80:c2:0f:76:59:bd:90:
         47:c8:90:55:e3:c7:f6:da:81:c5:3f:b0:52:6e:41:46:1d:2b:
         3f:01:bc:17:c5:8c:b7:93:0f:af:41:9f:10:3b:1e:4a:af:2d:
         f0:bd:84:6f:57:53:3b:d7:af:4a:b0:1f:bf:dc:da:80:c1:49:
         29:21:2c:59:08:e2:6e:b7:60:c0:79:17:0d:46:fd:29:28:f5:
         90:60:da:47:d3:40:ff:36:09:ae:2d:f6:85:91:93:d4:aa:1c:
         c0:aa:94:b7:94:e4:90:68:0e:db:92:46:bf:f7:6b:3b:2b:fe:
         28:2a:64:f9:f9:7d:82:54:62:30:d0:f6:41:6e:d7:73:11:b9:
         b2:3f:34:71:54:c3:db:34:66:8d:6e:23:68:44:7d:fc:15:41:
         24:2a:5b:8d:e3:d9:fa:be:49:71:6f:6a:37:2c:12:d1:df:ab:
         b4:c0:ad:e1:0c:94:4e:42:73:fe:bc:b5:bd:5c:23:2f:c6:83:
         ec:fc:0f:1a:96:66:ba:68:96:a2:c6:e9:32:42:ff:70:30:29:
         b4:ae:23:01:f6:b5:03:f2:22:a6:13:12:56:00:fb:da:08:00:
         ff:e7:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----