Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File:                     HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier:          JdSjxUybh8hdSbjiRwHHyP1lBKpOZK5c144827vXBhU=
Subject key identifier:   39:82:DC:A1:58:0E:52:BC:51:9D:B4:C3:D6:53:82:9A:5F:7C:E0:7A
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer:       /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial:       01962F746C03F945F48FCB8D095B63962BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number:          0994
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: 5EwRnYFK9m4uABUFO4g3IvXqyGqr5CnR7lClP2Wy9L0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6c:03:f9:45:f4:8f:cb:8d:09:5b:63:96:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=3982dca1580e52bc519db4c3d653829a5f7ce07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:2d:70:d2:c1:58:fc:a7:6d:76:fc:36:22:
                    2b:36:42:69:24:72:9e:64:19:d3:8a:10:d9:3e:c4:
                    37:6a:f7:20:00:cc:3b:42:36:e4:c0:5f:1c:7f:38:
                    f9:3b:6f:5d:fc:ac:1c:0f:35:31:80:e7:86:61:06:
                    8a:41:6c:65:74:0d:5b:60:39:cd:f7:d7:98:23:ea:
                    fa:99:97:b1:e9:a4:3d:08:ad:74:ad:e8:15:5d:d6:
                    b8:8a:f3:93:c3:d6:db:cf:1d:25:7d:d3:13:ce:b9:
                    be:17:0f:4a:7b:f7:1a:81:1b:14:dd:a5:bb:01:af:
                    38:e5:fc:1a:c9:6c:ea:82:4f:82:12:3b:33:55:c7:
                    e3:95:34:5d:8c:07:aa:31:b1:16:b5:97:8a:3b:ff:
                    93:67:af:c9:ad:42:58:9f:4b:bc:f2:6a:11:be:c8:
                    87:e7:90:d5:6c:90:ef:ba:41:91:9a:59:61:c4:15:
                    9d:b9:65:b2:2a:bb:37:17:85:07:ac:a8:53:60:89:
                    25:95:11:5d:89:7e:23:90:a9:9d:d0:e2:ba:a3:11:
                    c9:3c:3f:40:21:86:1d:25:14:85:cc:63:ac:54:61:
                    35:42:62:9a:1c:e8:64:b4:b2:2e:0a:49:ab:a5:5b:
                    08:b0:46:ab:ae:77:db:8e:53:69:41:7e:fa:50:f3:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:82:DC:A1:58:0E:52:BC:51:9D:B4:C3:D6:53:82:9A:5F:7C:E0:7A
            X509v3 Authority Key Identifier:
                keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:75:52:08:9d:4d:9d:b9:43:7f:9b:3e:fe:5a:88:72:81:cd:
         c1:ac:83:10:fb:09:3f:73:7b:7c:33:a1:c9:44:e4:d4:98:c3:
         82:75:f1:23:3b:eb:8a:f4:9d:0c:78:40:28:b6:96:d2:f1:db:
         dc:b0:47:ee:24:00:ba:14:67:ea:90:f9:cd:6f:4e:ab:df:a7:
         19:4c:86:55:96:4e:c0:35:ba:c0:b6:55:fd:70:5f:e3:19:82:
         1b:88:23:1a:16:a4:67:39:38:7f:d0:08:c5:b9:45:bf:7a:39:
         5b:3d:bd:05:3c:3d:a7:f2:63:5c:6b:8e:fa:6c:d7:c7:dc:96:
         2a:46:2c:2c:69:38:a6:03:8a:91:26:a8:9b:87:e5:0f:6a:3a:
         46:d3:29:5d:18:c2:35:19:ee:86:58:f1:80:ce:ee:c5:c5:c0:
         ee:26:bb:c1:9a:aa:c2:2b:aa:64:c0:9d:7b:87:fd:f7:66:9c:
         aa:c4:ac:ec:f3:08:60:01:3c:ee:06:aa:a1:dd:1a:98:10:f1:
         1f:7e:31:7c:a4:84:9d:bf:4a:80:75:0a:47:e9:cd:9f:57:af:
         de:a3:90:10:41:31:e1:a0:88:5a:4b:2c:5e:d1:c7:2f:c5:60:
         e4:dc:b8:3e:2f:a9:ef:32:af:31:43:ac:ff:e0:c4:5c:8b:35:
         24:44:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----