Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File:                     HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier:          ZoXzqFkUj+8tT2acybCFpkdsFKkUH4VB8qSgcWZ/6P8=
Subject key identifier:   AC:50:77:5B:4C:0D:0F:05:FE:8F:41:71:42:6F:3B:29:0D:59:8C:C4
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer:       /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial:       01962E617B93AFE05DCB83A631EF0DC55070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
                          2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: uw3qTU11R7kvBh6QnhH+3ZYyjJ+jbyujuBI/PewhLYU=)
                          3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7b:93:af:e0:5d:cb:83:a6:31:ef:0d:c5:50:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=ac50775b4c0d0f05fe8f4171426f3b290d598cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:16:b9:92:00:c8:ad:de:b2:20:a1:8a:86:
                    f7:9e:c9:21:88:a0:af:a7:77:a9:4a:3b:ac:24:ab:
                    c3:74:b0:07:7f:45:fd:e7:9c:f0:f0:8d:d1:42:ad:
                    ff:3c:8d:60:ad:7f:fd:83:07:04:8e:d1:25:ae:bf:
                    94:62:ee:45:e7:11:f5:9c:fb:87:5d:e3:d2:10:78:
                    5f:15:39:40:5b:ab:29:a2:a2:00:85:32:8c:0f:c5:
                    1d:0a:4e:0e:7c:79:3a:8f:b8:de:75:3f:07:d4:96:
                    2f:01:fc:60:41:90:06:a2:1e:eb:5d:4e:da:6c:be:
                    81:72:77:f6:c5:31:07:33:32:8f:01:e9:c7:9b:cd:
                    15:96:6a:00:0c:41:0d:a1:47:37:17:69:b6:06:b1:
                    0c:df:ef:fb:d6:e5:6b:c8:30:36:e1:11:7c:b3:8e:
                    68:2e:80:29:23:b8:a8:7a:8a:bb:aa:ca:e9:69:79:
                    3f:b7:74:7c:3f:14:3c:8f:e9:70:a7:f3:2d:d5:86:
                    f3:10:22:9c:cc:95:09:ef:4e:bc:69:fa:38:c6:c3:
                    1f:b0:b8:c1:72:3b:b2:e1:b4:eb:52:e6:b8:a6:8c:
                    65:63:32:02:0a:d4:ea:0d:79:c7:a7:ab:e8:a4:ce:
                    93:01:d9:a6:09:4c:0e:49:f6:f4:25:68:b9:62:b4:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:77:5B:4C:0D:0F:05:FE:8F:41:71:42:6F:3B:29:0D:59:8C:C4
            X509v3 Authority Key Identifier:
                keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:24:31:33:ef:d1:c7:fc:d9:ee:fb:3f:76:ef:ff:67:0d:3b:
         89:70:e6:7a:42:64:eb:4c:70:9d:a2:47:98:82:9d:7d:37:7c:
         29:0e:37:97:32:d0:cb:ad:ca:36:78:31:84:3b:55:10:03:c7:
         a3:1a:8e:68:2f:48:36:0f:2c:24:0f:4c:65:00:5c:bd:73:80:
         db:65:04:b5:01:49:ae:5e:87:73:03:24:6a:04:f1:31:68:17:
         46:3c:3d:4d:90:e0:40:9b:7a:fd:e4:8c:dd:31:d5:a5:9c:fe:
         51:65:b9:a3:ea:2c:7a:04:82:20:11:fd:0d:34:27:af:4c:95:
         c2:58:de:17:21:3a:8b:4d:82:b3:08:33:5f:a5:58:e9:43:d5:
         8b:12:c9:79:1c:d6:4c:72:32:c0:b5:85:59:b9:af:dc:19:bb:
         5c:ee:9f:e5:0e:1d:52:b8:e4:fb:22:a2:dd:00:14:c6:6f:7e:
         ac:e1:7f:bd:53:0f:a1:35:05:75:b6:da:14:00:bd:24:b6:84:
         b1:14:3d:71:e6:be:60:d1:ef:1d:60:45:98:d1:76:5c:06:cc:
         3d:48:c5:c8:76:df:d1:42:34:b7:d3:70:fb:50:81:98:93:0a:
         8c:38:2f:cb:c1:08:bf:f4:4d:f7:b9:aa:cb:24:fb:a4:85:27:
         37:f9:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----