Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File:                     hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier:          YgT+ZFfftQ5dhRXvEpV/vW2S3rqrMC6rAAqpiW2Xw5c=
Subject key identifier:   85:24:C4:5E:CC:03:E5:3F:02:CB:89:42:90:6D:87:32:CD:FE:DB:82
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer:       /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial:       01962E2B138C702FBED9D3A29484E12BD8FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
                          2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: ER0P0i1Ct9Ey0Us/pm1PJEok9234JTCLzzGagoGAEmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:13:8c:70:2f:be:d9:d3:a2:94:84:e1:2b:d8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=8524c45ecc03e53f02cb8942906d8732cdfedb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:b3:72:dd:c9:53:8b:c5:c2:9d:d3:b8:85:
                    5e:5e:94:be:2a:b5:51:d8:60:23:56:9f:39:59:88:
                    2c:cc:a1:4b:dc:58:30:df:f4:49:aa:d2:75:ab:90:
                    a2:28:cb:5c:ba:3c:2e:60:7c:ec:ca:69:89:5a:69:
                    1b:14:89:4a:09:06:26:79:9b:f8:d1:d2:ab:58:68:
                    a8:29:cd:45:bd:a6:89:c7:fd:39:e4:34:80:d3:ca:
                    b9:72:e4:02:74:fc:f2:0f:52:65:63:76:88:84:03:
                    1e:f0:f0:fb:de:63:1d:3e:d5:69:2c:45:ea:0f:75:
                    83:2f:3c:7a:9d:1b:e0:b5:11:15:e0:b2:9a:da:1e:
                    77:a4:51:60:3d:20:cd:a1:30:31:1e:c6:29:fe:c6:
                    1d:e5:42:4b:cd:c8:74:25:2d:2b:22:a8:2c:17:b4:
                    aa:cc:4a:4c:a0:32:79:08:0d:b1:08:4f:16:1b:1e:
                    bb:c8:c0:61:4a:3d:4a:62:ca:05:8e:c7:a1:8b:23:
                    0c:5f:59:63:71:98:f0:eb:8d:ef:b7:b6:67:61:f6:
                    a6:d6:8f:c7:ba:3d:1c:89:79:fb:13:66:c1:c3:94:
                    17:43:55:63:eb:92:c7:2b:32:a2:c3:a0:99:d8:d4:
                    2c:b9:5c:a4:86:f4:01:85:96:99:10:d0:96:26:3d:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:C4:5E:CC:03:E5:3F:02:CB:89:42:90:6D:87:32:CD:FE:DB:82
            X509v3 Authority Key Identifier:
                keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:21:10:64:8b:3e:2a:6a:de:9e:b5:1b:b2:1d:ba:fe:5d:
         c4:39:55:72:7f:16:ee:00:c2:d8:a2:13:ff:41:52:40:95:2c:
         e9:c7:87:a2:ad:9c:da:89:99:72:0c:1c:57:35:36:1c:88:c7:
         45:d3:b4:40:84:d9:7b:0e:29:80:1e:8b:27:d3:8d:0c:c8:0f:
         ee:d4:d6:fe:1f:5b:28:99:16:32:2c:db:bc:a4:ab:74:40:03:
         3c:59:2a:90:fe:99:e7:2f:85:df:45:5b:4a:89:1b:5f:3e:0b:
         2a:1f:cc:f1:b6:61:5a:b0:bd:75:83:c3:34:0e:c9:ed:f7:a4:
         21:82:8f:cb:91:6c:2a:d8:63:53:54:3d:8f:0d:60:4b:7a:a6:
         71:1f:23:6a:dd:d6:08:c6:e0:95:b6:13:90:22:58:c4:48:aa:
         90:fc:c8:76:ae:52:22:54:3a:e7:fb:f2:c3:7c:16:16:33:0b:
         e5:f0:c2:b8:39:3c:03:fc:5c:ad:f3:e9:fc:d7:cf:29:46:47:
         39:a2:ec:e3:8d:ce:2f:e0:6a:64:67:7b:58:64:c2:7f:6c:66:
         58:bb:21:2b:46:97:68:c7:5d:75:ff:8d:3b:ac:62:6d:a4:cc:
         df:e8:d7:59:83:f7:94:8a:bd:cd:3c:ec:0d:63:97:f0:30:63:
         69:92:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----