Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File:                     hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier:          trXHzMK30fnxTyyRSjRoNI6N0zSFYOcfRNmHVeDlRC4=
Subject key identifier:   37:09:FD:4F:B5:2E:A1:45:12:46:6F:83:92:87:F7:81:16:76:A1:F0
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer:       /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial:       01962FAB8F3443F33E30E1CA8A6611C0A163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number:          0D6C
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: Akvy1NwWAd+aD0xJJdzodIPalk9OlXdkp5j3t9ZyArY=)
                          2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:34:43:f3:3e:30:e1:ca:8a:66:11:c0:a1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=3709fd4fb52ea14512466f839287f7811676a1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:01:3e:84:fa:11:03:5a:59:c5:8e:2f:fe:
                    54:46:79:53:b0:f6:d2:16:d1:21:54:92:a2:30:0b:
                    ee:f1:45:d7:20:93:0c:45:30:73:97:02:63:11:ff:
                    b9:56:d4:9d:49:b5:bb:e1:36:5b:ac:6b:95:22:b4:
                    ad:b6:0c:37:c1:e6:90:b7:eb:21:77:2d:d2:4d:af:
                    b4:16:fb:cb:04:2b:b5:19:9b:9b:2b:af:17:13:73:
                    31:48:18:7f:2a:66:64:be:c9:c0:87:8f:21:69:c9:
                    91:a1:f4:90:a4:0d:78:66:9e:3b:06:67:d8:6f:bc:
                    c0:62:5d:78:5a:18:e0:af:01:11:f5:43:5c:47:2e:
                    a3:bc:c9:c4:11:45:9b:85:a2:6e:c0:d1:0e:10:3c:
                    29:d9:8f:8b:a8:ce:46:ae:0f:ce:4f:f0:93:e8:4d:
                    33:57:82:02:87:82:f5:c2:2d:e2:a6:7f:93:3f:65:
                    d8:ed:95:6b:d3:77:00:61:cb:58:07:fd:80:78:f1:
                    04:51:33:92:36:05:0d:2f:f5:f8:1d:2f:61:0d:48:
                    01:d2:8e:bb:a7:34:bb:7e:75:19:c8:4e:0a:de:21:
                    b2:e1:93:13:3f:74:cc:f7:c2:ab:f3:32:4e:33:a2:
                    e8:d8:33:a5:a7:b4:a0:0c:f6:f3:62:f8:71:0b:28:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:FD:4F:B5:2E:A1:45:12:46:6F:83:92:87:F7:81:16:76:A1:F0
            X509v3 Authority Key Identifier:
                keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:42:02:7b:6c:97:9a:a2:94:70:2b:c9:5e:61:63:4f:a4:8e:
         63:87:bf:e7:f6:9e:0f:01:a5:cf:c1:34:c9:f1:62:7d:32:c3:
         db:c6:6f:54:0d:cf:d0:02:88:e1:02:74:74:8d:a7:a8:10:f1:
         99:a2:75:ae:ef:09:e7:46:7d:58:85:0f:f0:41:92:93:46:4c:
         43:1c:27:f6:12:8d:75:d0:61:b3:bd:5e:14:59:df:20:86:26:
         87:ae:c1:5c:d9:30:f1:b9:d6:06:69:06:86:55:31:a6:cf:92:
         58:d7:b1:90:2c:4f:d6:92:b4:9b:37:94:dd:e4:e1:c3:de:3c:
         b1:43:3b:cc:24:b4:00:f9:3e:0f:6a:12:ac:f0:99:3b:90:09:
         c4:0a:65:38:92:01:9a:80:23:82:65:2e:f6:e8:29:5b:04:9f:
         8b:8a:df:66:12:f8:bb:37:8e:99:e1:ba:a7:88:4b:cb:d7:65:
         78:e5:c2:8c:95:ac:89:c8:da:0e:c8:e6:b9:ce:88:c3:8e:74:
         ad:09:bb:be:97:2b:5d:15:5d:28:43:0a:7f:0f:ce:c7:64:ce:
         80:9f:85:f8:d6:1b:de:aa:40:c5:0c:92:78:54:f3:05:c9:e2:
         9c:06:3f:00:ac:bf:57:ab:55:38:87:21:c9:9e:23:e6:fb:f3:
         3d:d5:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----