Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File:                     hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier:          1OmIFedozoru3yO5uuBmOhz1s3CEU/eSUtXHGuYsdrU=
Subject key identifier:   7F:BE:1D:9D:15:40:6B:03:94:EF:85:20:CC:0F:F2:0D:F5:61:53:C3
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer:       /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial:       01962FAB8A26BBD4A48E98A551A73DE7160B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number:          0702
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: f3wnYIkeyHnoucjVe/0XR/8KFbP9feLmPLSs4Hgg6ec=)
                          2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:26:bb:d4:a4:8e:98:a5:51:a7:3d:e7:16:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=7fbe1d9d15406b0394ef8520cc0ff20df56153c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:79:6a:b1:4d:a3:fe:59:49:d2:2e:9d:93:
                    39:e2:1c:c3:97:b2:7c:e1:f5:14:2a:b9:7e:97:0a:
                    2f:70:09:a0:53:1e:f4:1c:d8:d1:dd:3f:39:ff:7e:
                    51:65:7c:30:d0:bd:51:d8:d3:7b:c1:da:62:5c:9c:
                    24:3a:fb:4e:d2:07:ae:00:4e:ff:54:64:85:61:7c:
                    a9:39:fd:c6:e6:6e:14:0f:7d:e2:cd:a5:95:f6:bd:
                    84:15:4d:9f:d1:9d:d8:13:48:7b:78:39:7f:e5:fd:
                    b2:16:bf:4c:c3:ef:ca:ff:0a:18:e4:f2:ab:92:bd:
                    f3:58:92:5f:f5:b1:59:c5:70:5a:42:7a:2c:c7:a0:
                    84:7d:ae:3e:f6:38:75:3a:0a:2d:c1:c5:bc:35:8b:
                    69:a7:ce:4a:5a:90:f8:b5:34:c3:59:e9:79:b0:83:
                    4a:56:4c:4b:f5:f3:6d:89:c0:10:af:76:ac:1e:7a:
                    b8:41:0b:9f:4c:04:c9:db:c1:c1:d2:23:d9:49:9c:
                    55:08:fc:1b:f3:4d:a2:c4:fe:50:ed:52:c5:e9:36:
                    ef:71:84:ef:12:35:e9:76:0c:fc:e6:22:f4:11:02:
                    7d:f9:4c:56:2b:7e:a5:8c:ed:8d:01:3f:a6:55:d1:
                    41:2a:43:f5:eb:98:27:9a:b1:1c:a5:d3:94:c8:9c:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:1D:9D:15:40:6B:03:94:EF:85:20:CC:0F:F2:0D:F5:61:53:C3
            X509v3 Authority Key Identifier:
                keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:09:da:77:00:56:67:98:80:ca:a4:d9:26:b1:d3:7d:5e:9a:
         bd:cf:ab:75:3f:05:5e:28:2d:bf:ab:8a:27:2d:e0:6d:a6:b0:
         46:21:30:00:8c:33:5b:9d:bb:d9:4b:28:39:86:ef:14:9e:2e:
         90:1a:7f:4e:91:b1:5a:eb:d0:97:b8:f5:3e:0f:29:17:83:64:
         7b:29:fa:9c:2c:0f:2e:8d:c9:37:36:53:7d:61:36:b8:b3:39:
         b1:13:b3:b2:f8:b5:b9:b4:a2:99:bb:20:20:31:30:73:44:6f:
         58:96:05:7d:b9:6b:54:ad:e6:63:09:c0:35:7e:26:0d:13:e2:
         1a:ca:6e:41:a4:98:84:e1:9d:bc:96:1b:a6:74:0b:4d:d6:42:
         51:4b:b0:31:7f:7f:1a:8e:01:c2:f6:7d:b1:31:19:42:9a:5a:
         38:a3:c1:81:b8:32:96:13:68:f8:9a:c6:18:72:35:c8:4f:0b:
         36:c5:3f:bc:b8:b0:cb:79:d5:89:04:07:38:1c:ad:37:56:3f:
         03:cb:04:15:b5:b3:32:40:0e:ed:08:5b:c3:7f:ec:cf:da:22:
         6d:7a:47:4a:9a:e3:33:9b:d1:c4:ac:d8:19:51:ac:ba:46:90:
         ad:14:18:ac:10:bb:bb:16:08:cd:59:11:6c:67:b4:f7:ef:cb:
         aa:86:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----