Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft
File:                     HIivL0NlSz9FLVx07QdHElcNH94.mft (raw, json)
Hash identifier:          YtFoyQ6uflp8jGyCbTiMYu3nPrtLX5Gks47Ccj0UU0E=
Subject key identifier:   EF:2B:D2:08:1C:D4:E4:F4:96:62:30:32:19:ED:8C:DB:79:9D:CE:B2
Authority key identifier: 1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
Certificate issuer:       /CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Certificate serial:       01962FAB9856C681C2617D3AFDE51911540C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: CCupZ2Z50lEeozRfCFyqGlk11BE.roa (hash: u0mXYzOevuF7/VUH3KREJcVDAaOJuSJnSH+Q3fKIqwg=)
                          2: HIivL0NlSz9FLVx07QdHElcNH94.crl (hash: W4ZGZPQOCCaDoYAo3shvyrBy7/PMND31+VbBqLLZ5dY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:98:56:c6:81:c2:61:7d:3a:fd:e5:19:11:54:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c88af2f43654b3f452d5c74ed074712570d1fde
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=ef2bd2081cd4e4f49662303219ed8cdb799dceb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:92:ca:38:f5:f2:a2:76:c1:35:4f:2b:aa:
                    85:e7:94:b4:31:fb:a7:83:96:df:76:3c:77:0b:f5:
                    14:0d:2c:e6:e5:71:c6:dd:c4:37:90:f2:33:67:27:
                    b0:f3:b5:ca:b8:c5:df:41:3b:16:27:fa:d8:37:55:
                    9c:bd:33:3d:11:65:ee:5f:d0:71:37:34:d4:f1:cd:
                    30:b5:21:bb:36:85:4d:7f:60:a8:95:24:e8:ca:48:
                    b0:8d:b4:2c:73:b4:23:90:8b:48:20:e5:62:20:c5:
                    63:be:c6:57:89:2c:99:2d:47:39:ac:47:2e:94:58:
                    8e:d2:5a:15:f9:79:0b:bd:6e:12:e3:88:e4:83:b2:
                    c9:5b:0f:d0:a1:c6:3a:eb:c4:75:15:e2:22:32:24:
                    08:f2:a2:f4:9c:84:11:52:19:12:e2:65:d6:0d:71:
                    12:9e:47:3a:d5:71:d6:3b:a7:ec:29:31:c5:ea:5e:
                    df:d7:a1:45:e2:68:e0:6a:a4:40:19:e4:00:6b:46:
                    06:c0:7c:85:b1:61:71:80:0e:fd:d7:e4:6d:68:06:
                    c8:4b:82:88:19:f5:74:f3:c9:fb:a5:8c:3d:28:12:
                    3e:ff:54:78:8f:5d:f5:6c:3f:83:5a:9b:85:0a:87:
                    74:1e:18:84:af:c5:1e:c4:e0:3c:e8:63:95:1d:ef:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2B:D2:08:1C:D4:E4:F4:96:62:30:32:19:ED:8C:DB:79:9D:CE:B2
            X509v3 Authority Key Identifier:
                keyid:1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9d:47:4c:22:19:5c:4a:c6:4d:37:a1:46:3c:a0:ef:7d:27:
         16:f0:2c:4f:53:7c:8e:94:39:f4:da:8c:0a:c0:3a:b6:56:2d:
         70:d5:73:8a:11:7a:e4:1b:4b:92:35:b0:05:dc:7a:36:4b:37:
         df:f6:ac:ce:0f:de:b7:4b:c9:b0:e2:5c:1f:fd:f5:6b:39:98:
         ae:4d:11:26:7e:82:81:f9:c0:ed:04:50:fe:8b:6e:8f:78:b7:
         9f:7d:2f:fd:14:d3:1e:c2:c4:1c:f4:ba:30:12:58:75:56:ac:
         da:b6:28:66:71:03:92:a1:dd:5f:01:f7:1a:3c:a9:0e:13:0b:
         bb:e4:f4:92:91:63:43:52:41:de:2f:9a:c0:4f:e2:e5:37:55:
         99:cc:07:1a:3e:4d:fc:46:a7:d6:24:44:05:f8:da:30:2f:2b:
         e9:30:30:7d:85:c3:27:ed:78:43:f3:87:a6:6c:1f:89:92:07:
         91:3f:e8:e6:75:3f:20:9e:2f:a8:3f:ed:49:18:7c:91:cf:b9:
         b2:43:5f:72:93:40:5b:ef:cd:ab:01:07:20:29:aa:7e:7d:f7:
         9a:76:ea:80:eb:40:dd:9a:36:2b:18:f9:c6:0f:b2:84:7b:34:
         9d:aa:51:df:34:65:74:9e:1e:cc:2c:46:69:8a:21:71:6a:c2:
         28:32:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----