Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
File:                     HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json)
Hash identifier:          pBLeRqlC15eiy/O2R7gqUfSQN+Cp1IZQt6IW85HtLlQ=
Subject key identifier:   65:42:1B:01:0B:D9:51:3F:98:2E:A2:3F:4A:46:68:14:04:6A:C0:6E
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Certificate issuer:       /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial:       01962FAB42B281C27209058E5C066C38FA46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
Manifest number:          06C4
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: MI+wYM4KDi1BGpgeLR2BY0XIKmPPVIaNdeqJeUmRNIs=)
                          2: rqzhVkzi0h4-wh5hdOyTariCyBE.roa (hash: JZPGst2h9b4mhNt9N69P+3mEwzrtYiQhlPMWkUbgxjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:42:b2:81:c2:72:09:05:8e:5c:06:6c:38:fa:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=65421b010bd9513f982ea23f4a466814046ac06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:89:c6:68:62:ab:9d:63:03:c1:1d:e1:cd:
                    0c:c8:4c:16:72:2c:fb:a1:36:09:83:16:a0:f9:3b:
                    9d:8b:f2:0c:e3:3d:88:9c:6e:41:e5:76:41:22:33:
                    b4:c8:58:de:78:46:17:65:2f:2f:30:a5:3b:c8:5c:
                    83:1c:f2:e4:f2:12:65:8c:8d:58:75:f6:c1:e5:c9:
                    89:66:22:02:b6:16:52:e0:67:e8:f6:0f:27:97:07:
                    66:92:6c:e3:84:f7:84:b9:a8:d7:9e:ee:52:3f:43:
                    c9:37:03:c3:9c:5b:23:50:ad:32:45:5f:af:2f:51:
                    c6:59:a4:ea:c4:15:84:de:05:fc:05:fe:1d:7b:bd:
                    11:e7:dd:cc:df:8c:28:f0:99:fe:45:81:d5:ea:8c:
                    95:27:d7:1c:a4:48:4e:ea:58:ec:1e:fa:ba:78:83:
                    76:4c:a5:18:5f:b1:a2:68:7b:a6:7d:84:9d:0f:70:
                    dd:55:a4:5b:01:47:83:fd:00:9c:f8:ae:46:aa:d2:
                    9f:58:ff:85:15:e7:91:a5:3b:97:38:ca:93:9e:fd:
                    d1:ca:eb:6f:4a:6b:0a:84:30:7c:96:ab:ae:3f:83:
                    ab:95:0d:b8:8b:ae:02:cd:06:2f:04:ed:a6:77:31:
                    b6:79:f8:b0:fe:60:5e:2d:1f:9a:4e:a0:cb:a8:5b:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:42:1B:01:0B:D9:51:3F:98:2E:A2:3F:4A:46:68:14:04:6A:C0:6E
            X509v3 Authority Key Identifier:
                keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:95:d2:1a:da:8d:a2:a2:43:6b:24:7a:c0:1d:49:9c:f1:7d:
         35:18:06:51:50:de:a4:3f:85:41:e5:20:e0:11:8b:1f:1b:93:
         ef:2d:f7:dc:d0:bd:a2:d5:a2:7e:a0:98:bb:7f:71:f0:5e:97:
         75:57:ba:69:ea:0b:b3:d0:8b:e8:41:90:0b:b8:91:52:24:f6:
         36:a5:ae:bb:08:f2:41:a6:59:9a:a9:2e:38:41:6d:c4:92:50:
         79:76:e5:c9:b2:f3:57:53:a8:51:0e:56:32:92:53:6e:b7:31:
         41:e2:66:59:5b:39:60:aa:9e:53:6b:43:a7:b9:23:cf:13:5b:
         54:fa:3c:70:88:7c:13:9d:20:61:fb:b2:3d:8a:5c:e0:68:be:
         b6:03:7d:94:bc:89:37:71:34:83:dc:66:8b:30:e2:30:4d:38:
         0c:2e:1d:d9:38:39:ad:b2:ad:58:ea:88:f8:f1:07:9b:4b:fc:
         48:66:00:72:18:2e:69:ff:12:95:9b:39:39:aa:75:e1:d4:d8:
         a6:71:7b:64:fa:6c:12:25:2a:4f:d9:6a:04:32:62:b7:4a:16:
         0f:1d:88:dc:55:d2:fe:27:06:f3:7d:be:44:61:d0:09:7c:44:
         04:1b:8d:97:d5:a5:34:a7:a3:88:59:53:b8:e0:7b:89:bd:56:
         72:6b:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----