Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          kGjTL8AuOwVJiTAHhNwR5Q1YhcJm808NE8KCMSC7mRY=
Subject key identifier:   6E:43:26:14:C8:6C:B5:DE:B6:EA:8B:AF:4C:3B:4C:A1:6C:28:33:2D
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       01962DF3DB5B10BDC7F944F4344D474A6DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (hash: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=)
                          2: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: ginE6NAsOw8/27nxoYh/+ay+Tvd54xktZQNIYyw2ri4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:db:5b:10:bd:c7:f9:44:f4:34:4d:47:4a:6d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=6e432614c86cb5deb6ea8baf4c3b4ca16c28332d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:ee:01:e3:38:47:39:4e:1c:1a:c9:f8:55:
                    98:cf:b5:6f:fd:7e:3e:bb:91:3e:c8:be:a9:5b:6c:
                    d5:61:4f:87:df:75:d8:ae:db:4c:09:19:5d:3b:91:
                    0b:87:b2:b4:38:6a:4c:04:08:29:c1:35:ea:c6:db:
                    d2:48:1d:a3:1f:cb:9a:a8:4b:ad:d4:9c:19:4b:7f:
                    c3:44:ae:57:6f:1f:62:34:69:2e:4b:f9:47:2f:5b:
                    05:8a:d5:41:a7:ef:48:fa:06:d2:c0:12:1e:7e:59:
                    c7:38:48:2a:c0:a0:7e:cd:0e:e8:37:5b:c8:10:f3:
                    d9:7e:33:ba:7e:ce:22:c7:b4:4c:7c:d2:d5:4d:06:
                    c7:89:2e:ec:ab:0a:7e:06:3f:64:e9:ec:ce:e0:ee:
                    55:58:34:28:2d:db:0d:4f:54:97:bf:2f:5a:54:de:
                    79:ac:1f:b9:73:f7:4e:c2:f2:2b:0e:0a:7e:36:ee:
                    48:86:8c:13:0f:69:94:30:99:45:eb:0b:44:c7:3e:
                    59:a7:9f:72:86:e2:85:a3:77:f9:9a:9a:80:83:54:
                    58:de:7d:a2:64:fa:c8:17:18:3f:31:82:87:48:53:
                    d4:38:4e:95:c7:c8:78:85:0e:34:09:e5:eb:e2:4b:
                    b3:4b:a8:1f:86:5f:1b:76:f9:ab:e5:c7:20:1d:b7:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:26:14:C8:6C:B5:DE:B6:EA:8B:AF:4C:3B:4C:A1:6C:28:33:2D
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:cb:72:9e:6f:b0:a2:8a:e4:0e:1a:2b:bf:bb:87:8f:df:
         cf:ae:76:db:61:0d:c2:ee:3f:2e:84:17:7f:c4:99:0f:79:9b:
         e9:45:1e:53:43:83:b6:91:ed:45:0d:4f:64:54:b6:2f:be:4d:
         03:15:66:6c:b0:bf:79:86:e0:6c:2e:0f:90:95:91:e4:b5:ea:
         fd:58:8c:de:4a:33:52:9a:f7:6a:cd:51:e5:f0:72:2b:f0:ae:
         cf:4f:45:bd:44:52:eb:69:19:35:4c:b4:fd:d4:4b:3b:7e:0a:
         fe:32:e3:13:a9:22:8d:d4:75:b7:1b:d9:2d:d4:d3:6c:45:1a:
         b9:ca:66:80:77:c8:2e:5d:5e:df:78:42:52:94:e6:43:31:da:
         25:75:c5:2b:0a:2c:11:7f:0f:8e:6f:e7:53:65:2c:fc:07:10:
         f0:0d:ea:ad:48:6e:05:0c:b9:6b:f8:64:36:da:c2:d5:1a:67:
         eb:ad:14:f8:98:34:64:ac:cf:33:43:f1:be:ed:6e:90:a1:3e:
         b7:52:df:c8:8d:52:66:d1:06:d5:35:b9:ce:1f:8a:67:37:1e:
         89:88:fc:d2:e9:5a:37:fd:7b:79:ea:12:4d:9a:b0:b9:e1:c1:
         d9:ac:a3:ed:97:bc:ff:52:07:b5:67:dd:1c:82:6e:7d:ec:dd:
         62:43:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----