Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
File:                     hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json)
Hash identifier:          iNUSD4PdsXoauAR8vFaFUlgsHoy9teS18WZEkNMm5gM=
Subject key identifier:   70:B9:27:CC:A6:48:96:5D:9B:AF:F9:E3:47:ED:9D:7E:BD:15:BC:3A
Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
Certificate issuer:       /CN=865122c0e562e407976823d94e19e2a794f8cb62
Certificate serial:       01962E2B1BCA86B601DA4838DDC640168AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: Ui66a47/plTLv33xjUC4cRXPW4ChDf9hUg7AGWbyByU=)
                          2: w-uN_1VCR8_SOj5bY-QHNqktijQ.roa (hash: 0MkMfXtYvuQQQ2rI12rE9KqS+DI9qKcacxegwXpKbvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1b:ca:86:b6:01:da:48:38:dd:c6:40:16:8a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=70b927cca648965d9baff9e347ed9d7ebd15bc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:74:7a:a7:f3:10:53:92:aa:56:3c:38:a3:
                    c6:f4:01:e0:96:0b:05:b1:5f:88:fc:00:3f:9e:fc:
                    46:5b:d5:cf:2a:00:8c:47:df:54:50:61:f0:57:93:
                    bb:76:75:9a:bf:6a:d1:b3:20:fc:f4:cf:7f:9a:98:
                    0c:7c:5a:f6:3f:4e:1b:35:81:14:c5:dc:11:f2:34:
                    a5:24:35:de:98:09:14:6f:e9:e1:17:e5:bf:b4:66:
                    64:e3:e3:2e:b0:da:b0:42:2e:10:0a:68:e1:4e:ef:
                    9b:c7:64:a0:d4:a1:96:7b:7c:d2:bb:c0:a5:83:83:
                    61:35:9f:4b:a8:8a:46:00:64:75:32:4c:32:31:d1:
                    ac:bc:79:04:2a:45:19:26:77:09:0e:25:94:3a:f2:
                    9a:a8:ad:47:7c:dc:a8:40:8f:e0:da:e4:d5:db:87:
                    ca:16:de:79:e7:d3:d9:28:40:a3:3e:5b:d6:5e:ed:
                    2f:27:4c:7b:da:e6:39:97:61:22:09:67:ee:97:72:
                    eb:40:d1:fe:5a:93:af:43:ab:4a:81:f9:a1:c5:d6:
                    72:65:e9:b5:33:04:da:f3:60:52:2e:2d:5d:e8:c3:
                    6a:66:89:ec:40:17:96:19:29:63:f4:18:5e:9d:23:
                    fb:d2:bc:a2:2b:d4:2b:cb:22:4b:9b:38:ef:c2:f0:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B9:27:CC:A6:48:96:5D:9B:AF:F9:E3:47:ED:9D:7E:BD:15:BC:3A
            X509v3 Authority Key Identifier:
                keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:24:c1:d4:bd:54:51:02:ea:1e:30:41:fc:85:6e:bd:ea:
         73:24:e7:88:20:45:a1:9c:d2:c6:6c:be:d8:81:00:c7:ac:b1:
         50:0e:3a:6f:bc:73:6f:1d:79:f1:f4:e1:5b:66:bb:06:7a:53:
         a5:0b:37:c1:ea:aa:29:a1:ee:95:6a:90:c2:08:bc:0b:20:20:
         4a:50:6c:ca:87:51:24:29:a0:ab:64:c4:8b:18:24:4b:2b:d4:
         d8:ef:12:fb:af:94:33:a1:68:bd:a0:55:0e:6e:d6:8d:76:dc:
         c6:40:7f:d9:8c:12:6e:7e:a8:26:fb:cb:52:5b:26:80:50:e3:
         1a:8c:bf:c3:89:4b:97:db:1c:9d:52:be:0d:2e:39:43:44:e0:
         00:f0:8b:39:08:21:b5:d0:90:55:8e:92:e6:e3:8b:32:fa:83:
         07:6f:c9:b9:19:72:a4:9f:5e:5c:0a:c3:79:42:35:2d:7f:0a:
         ea:3b:ef:a3:58:51:50:37:24:05:05:9b:d2:52:ae:7e:e2:89:
         af:1c:eb:c9:14:47:23:01:d0:9b:26:86:9f:2a:f3:eb:97:24:
         92:7e:d4:90:39:2c:97:c0:6e:21:7f:fb:83:e7:15:34:fa:1b:
         02:fa:53:63:6c:96:0a:ce:e3:20:84:4e:3f:02:73:4a:b3:e2:
         3f:6a:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----