Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File:                     RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier:          dSmMCdc/jvjUJqfAJo8CV/x3uuVGB7scSUW4N2TM+xs=
Subject key identifier:   9F:6D:62:E6:12:2A:8F:BE:B2:82:A5:50:87:CA:3E:A3:82:51:74:86
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer:       /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial:       01962F06DFF76637C8D843A2F5CC5D86DA98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: faXKeLqI02CUzSj4k6OyAM6w3wK4x3GWLQVUIWOf99U=)
                          2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:df:f7:66:37:c8:d8:43:a2:f5:cc:5d:86:da:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=9f6d62e6122a8fbeb282a55087ca3ea382517486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:2d:b8:6c:f8:a9:b7:7e:04:c7:44:19:9d:
                    75:b1:61:2e:62:75:fb:41:0b:24:3f:e5:b4:01:32:
                    f4:34:90:df:e0:bd:37:3a:05:10:2d:97:87:73:cb:
                    05:35:d3:57:f9:90:8d:9f:98:f3:53:6b:5c:d7:aa:
                    70:22:fc:93:78:be:6b:b8:4d:2e:4d:04:49:c6:4f:
                    20:f7:b1:4e:21:33:c9:45:0e:ed:0e:29:61:26:91:
                    a8:41:89:a4:6c:ee:19:24:2d:39:a2:35:f3:27:f4:
                    ac:4f:a2:3f:39:c2:0c:f6:72:ba:c0:94:0b:1c:b2:
                    c6:1f:8f:d7:5b:87:87:30:ce:7d:8e:cb:c1:5f:58:
                    09:81:09:11:a0:cd:28:50:10:93:58:0b:d4:d9:41:
                    07:b1:0f:64:21:88:36:f0:3f:cd:0f:f0:41:6f:97:
                    79:f9:a5:d9:7b:9c:6b:ff:05:11:69:ad:21:23:33:
                    b6:5a:4c:07:19:47:ac:23:28:a1:a3:ca:e4:cc:4b:
                    91:9c:de:c7:91:fe:82:e6:78:a3:45:8c:3f:9e:5b:
                    99:7e:12:90:d9:db:ab:f9:b5:6d:d3:8e:18:a5:70:
                    67:19:83:9d:b8:8d:41:26:53:92:86:9f:49:33:b0:
                    38:2a:a6:d3:93:6b:f4:cb:76:6d:de:47:2e:70:a0:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:62:E6:12:2A:8F:BE:B2:82:A5:50:87:CA:3E:A3:82:51:74:86
            X509v3 Authority Key Identifier:
                keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:18:00:ff:db:e0:bb:34:a8:6b:d6:ad:8c:a3:60:8b:0a:
         14:3f:2e:1f:0d:bb:b5:41:a8:5f:0c:8d:89:d1:f2:fd:e2:26:
         17:65:3b:b9:e1:85:d4:66:97:77:4f:60:a4:b7:94:2a:2e:20:
         f3:01:b2:dd:01:11:f0:50:d5:04:76:03:1f:9a:cc:01:80:b5:
         ef:46:9a:ae:20:aa:b7:96:88:06:e3:4b:41:ec:ce:37:44:5b:
         b0:ef:3a:36:84:e8:c5:47:96:10:01:70:02:a6:92:be:5e:df:
         9b:8d:b5:91:d5:d8:ce:87:c6:8a:22:76:f0:64:bb:59:f2:84:
         47:46:1e:08:b9:80:6f:6d:c5:85:70:a9:3e:54:30:bc:fe:42:
         7d:75:e3:7c:1e:59:b8:0b:96:fd:f7:f6:0d:27:95:06:5c:c7:
         7d:9d:ab:0c:4b:e9:eb:fb:00:79:70:43:15:3e:3b:56:00:fe:
         8e:d2:c8:a2:00:37:6a:40:d4:a2:0d:87:39:42:ee:a7:f2:0d:
         30:d2:ee:ab:0a:24:74:b6:16:b5:ea:93:fa:34:3c:38:d3:fe:
         90:a2:51:84:5d:8b:96:7f:05:cd:51:c3:f3:00:7d:75:6a:9f:
         82:b0:76:58:b8:80:83:7f:ce:0e:1d:b2:30:e2:cb:fa:19:37:
         39:ec:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----