Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File:                     HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier:          NS/MLuPbYbF/vGz0TRr6JiAvocJeIHD21nHvS/xxepU=
Subject key identifier:   58:71:C6:EC:62:44:9E:49:51:22:36:29:18:EC:99:93:9E:7B:8A:83
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer:       /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial:       01962DF44430B11E0BEF22F0FF02F9572543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number:          0FE9
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: mNyKQtgKU9P7n/UijdMC9a67R9kTSxCA1nv+rSWmirQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:44:30:b1:1e:0b:ef:22:f0:ff:02:f9:57:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=5871c6ec62449e495122362918ec99939e7b8a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:9f:57:91:bf:d4:50:39:85:31:7f:21:1e:
                    b2:88:36:c0:7f:3f:70:ec:e3:1f:36:90:71:68:1f:
                    69:fe:30:3b:95:90:83:1e:d5:89:89:ce:77:5d:11:
                    00:ce:24:c1:74:5d:ea:ea:53:89:10:45:8a:40:cb:
                    ce:3a:03:de:0e:dc:82:53:ad:cc:39:2a:9f:22:bc:
                    b5:5d:d9:94:7c:10:d8:a2:5e:94:f9:56:9f:ea:42:
                    0c:23:b0:1f:39:77:dc:4a:ce:52:58:8f:da:f2:0e:
                    55:04:7b:58:af:9f:c5:c1:f6:93:f6:84:75:56:bb:
                    c8:a7:39:5e:9d:71:81:8d:6b:ba:0d:42:5d:8d:b4:
                    22:9e:09:d4:c5:d8:da:eb:0d:74:5a:16:2c:05:25:
                    49:c2:4f:1a:9a:69:c9:0f:61:64:be:70:56:f0:8c:
                    74:99:01:be:7e:01:87:ca:2a:fb:1d:6d:7b:04:e3:
                    04:fb:58:53:e4:93:87:bd:86:18:af:fc:d1:db:ad:
                    ac:5b:8b:46:76:6b:aa:82:65:65:56:c4:f3:f1:98:
                    37:90:e6:19:29:3e:4c:42:5a:bf:58:98:e1:db:0f:
                    80:89:0f:9a:ed:ec:2e:c7:c8:14:e0:4d:53:2c:c2:
                    99:e7:1e:83:ac:3c:9b:3f:47:a8:52:6c:19:57:a4:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:C6:EC:62:44:9E:49:51:22:36:29:18:EC:99:93:9E:7B:8A:83
            X509v3 Authority Key Identifier:
                keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:87:b4:4f:9c:c3:bf:38:d7:96:99:bf:02:6b:db:5f:92:77:
         3c:14:3e:57:11:07:d0:bf:72:14:a8:09:ee:42:5f:af:f0:26:
         ea:93:d0:22:16:34:5f:23:59:e4:bd:cc:b5:d0:96:db:fe:5e:
         b9:f9:51:6e:96:db:3a:8c:3d:a9:95:b0:80:28:d9:b8:b6:c8:
         0c:14:73:3c:ad:0d:3b:a0:19:e6:56:2b:51:8a:eb:b8:f3:e2:
         0a:9e:52:e9:70:aa:97:6a:70:30:0b:25:c5:2e:17:56:e6:e3:
         02:55:4e:b6:3f:16:57:6c:46:e7:11:f8:7f:48:7a:f6:90:c2:
         c2:80:03:47:bf:6d:ba:d4:51:57:ef:c3:11:be:de:e1:f6:6f:
         83:7c:a6:9c:f3:93:73:be:a1:7b:9c:75:4f:69:39:d0:4d:bd:
         a7:38:d8:92:03:85:5f:da:c4:f7:0e:0a:c3:5c:da:a3:0a:f8:
         f3:4a:72:d6:2c:75:33:7c:88:1f:48:02:d8:59:57:5e:db:66:
         35:8b:62:79:e6:a3:cd:98:d5:24:88:95:c5:94:f7:85:a4:b9:
         d1:05:75:15:b0:1c:37:65:fe:78:0a:f3:74:7e:d5:84:37:b9:
         ae:3a:11:da:e0:82:68:52:29:4b:69:85:80:76:a7:98:53:22:
         cf:87:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----