Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File:                     Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier:          ZhxdsjM7fX9louWdVK0DL2ghAGyS6fvTo3pAioV+BBc=
Subject key identifier:   23:A6:4A:47:75:39:8C:B8:86:D4:03:1F:92:EE:CF:89:3A:2B:7E:B4
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer:       /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial:       01962F06D03EF8898B565F99E26A68BC3A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number:          091F
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: GuX5xg7qQrHgNabshpr1tc5N1waW7QqtYfT1jnLfPq8=)
                          2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d0:3e:f8:89:8b:56:5f:99:e2:6a:68:bc:3a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=23a64a4775398cb886d4031f92eecf893a2b7eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:b0:00:59:3b:68:8a:99:15:7c:08:dd:ce:
                    c0:5f:e9:fe:4e:82:e3:7c:e4:31:c9:c7:ff:d8:40:
                    97:72:7f:87:10:f6:ba:44:0e:0a:f2:5e:64:2a:cc:
                    47:ad:a6:ce:e2:29:f6:60:1d:34:61:85:3d:72:52:
                    3e:54:26:85:15:01:0a:80:11:d1:36:d1:25:e7:fc:
                    e6:0e:5b:3d:3e:b2:0c:12:b3:a8:09:a4:9b:3e:37:
                    54:00:3c:48:49:9a:04:4d:16:ee:66:4e:1e:35:e2:
                    31:a6:80:5f:19:1a:e2:ac:71:99:73:ef:90:a5:2c:
                    34:5f:a1:27:ba:d5:1c:58:ea:60:49:de:92:5d:c3:
                    41:d1:bc:95:3d:77:49:cb:af:39:dc:c0:0d:35:c0:
                    02:d3:b3:4d:bb:a7:3f:3d:ad:b0:a6:f3:b0:6e:de:
                    1b:d5:80:08:ad:5b:b4:f5:4a:32:be:d9:fe:07:6a:
                    15:77:79:80:61:97:87:28:52:b1:05:2b:f9:8c:2b:
                    50:43:86:d2:5c:ed:1c:d4:9a:54:52:59:9d:ad:42:
                    da:9b:1b:27:01:de:de:21:2f:98:14:fc:90:30:76:
                    4c:03:f8:1f:44:5b:44:a9:25:a3:c5:c7:0a:8b:2d:
                    ad:9f:35:fd:c4:42:58:db:ef:0a:6f:8a:a6:31:1a:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A6:4A:47:75:39:8C:B8:86:D4:03:1F:92:EE:CF:89:3A:2B:7E:B4
            X509v3 Authority Key Identifier:
                keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:64:9c:15:9b:b4:f2:2b:8b:cd:4d:9b:c2:07:05:8f:ff:ec:
         4c:76:ae:ff:12:f6:d5:44:46:92:83:29:ea:2c:2b:56:20:9c:
         a0:00:84:cf:06:c3:4e:ce:4b:fb:ea:1d:41:38:69:b8:f2:30:
         a3:31:c4:93:2a:e7:70:7d:9d:50:ff:3a:fd:f1:d5:8f:29:c9:
         fa:b0:fc:76:74:51:9c:d8:a1:11:7d:b1:9b:31:08:d1:39:c6:
         19:79:37:e1:4f:42:f3:ac:17:83:6c:e6:a1:73:c5:d5:cf:a1:
         86:01:9e:6f:c5:2c:36:0e:cc:dc:55:34:02:b9:6f:a9:2c:87:
         dc:8e:37:cb:fa:c2:ea:f1:c1:59:e6:49:9f:dc:bb:6e:14:ce:
         6b:8a:d6:a6:a0:f1:05:5a:1f:1a:51:3e:3a:f0:a6:59:69:d1:
         58:af:d6:55:b6:cb:32:1f:17:4c:8a:3f:55:3c:b5:a4:06:5d:
         38:89:0d:06:49:e2:39:10:37:c7:85:e3:d6:0b:7c:81:ea:56:
         fc:61:ad:d3:20:44:60:a7:fd:93:7d:53:83:d6:c2:59:87:05:
         64:fc:2b:85:0f:15:0e:80:54:8c:d2:81:84:b3:40:5f:37:b5:
         24:05:c6:6e:4b:7b:57:c7:2e:59:ce:bf:e6:6c:d4:43:60:80:
         be:fc:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----