Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File:                     hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier:          thu/abryyQnTQImAuk1bItK29jWJlqjbTfzW8rPe/oY=
Subject key identifier:   0A:CB:E7:96:A2:D5:E1:A5:75:D2:8F:BB:C7:50:90:9E:BD:05:5E:D9
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer:       /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial:       01962ECFE0A252B89CC50DE271CA5FE4169B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number:          09DB
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: bJak5u0yuHrLYdLaLP9uGLAVr6FPr5B0yAErIBUlu+Y=)
                          2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e0:a2:52:b8:9c:c5:0d:e2:71:ca:5f:e4:16:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=0acbe796a2d5e1a575d28fbbc750909ebd055ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:74:fa:c1:e7:68:17:27:35:4a:7d:7b:5b:
                    cc:47:0d:5e:fe:c5:b5:90:da:81:b4:4c:60:c2:24:
                    b1:6f:b5:df:6d:65:a5:6a:ec:91:8b:46:f6:24:fa:
                    c7:b3:bf:43:c8:a1:8a:2a:e6:bd:31:1f:91:ab:df:
                    f2:6b:33:41:07:fe:1b:32:a2:75:fb:b5:e6:db:51:
                    c7:2a:0c:c4:e3:da:d4:c0:28:a0:7d:f2:f4:21:ff:
                    25:6c:00:d5:b0:02:eb:72:85:22:70:09:20:67:ec:
                    f8:6f:3a:a4:7b:e9:65:1e:3c:7f:5c:a4:b6:bf:0b:
                    86:30:0a:2d:bb:de:80:60:42:cb:c5:1c:ec:6f:d0:
                    24:7a:77:94:cd:85:12:b0:3d:95:c6:3c:d9:01:cc:
                    3f:d5:20:f3:88:55:d3:5a:d1:29:fe:ff:d6:42:21:
                    58:a6:39:bb:dd:85:94:09:38:ef:8a:24:f5:41:6d:
                    f8:d0:79:18:d8:13:16:96:a9:18:65:a0:73:08:8a:
                    f5:37:ce:d7:51:95:07:d3:ee:e9:9d:f8:69:db:ba:
                    a7:b5:72:bc:25:a1:90:5e:be:ea:6e:a6:9a:37:21:
                    5b:44:f5:1b:4a:cb:37:e6:d3:62:cb:ba:ef:f4:91:
                    41:a0:ac:54:29:bd:7b:3e:97:26:16:17:5f:08:c9:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CB:E7:96:A2:D5:E1:A5:75:D2:8F:BB:C7:50:90:9E:BD:05:5E:D9
            X509v3 Authority Key Identifier:
                keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:d2:fd:91:b3:e8:92:57:46:de:79:76:d5:71:13:b3:5a:
         5d:37:c5:36:7e:8a:02:57:af:2c:0c:08:bb:b1:fc:f6:f1:42:
         af:53:68:54:43:9b:88:a3:7b:a2:4e:01:a7:fb:72:47:29:30:
         7e:1d:e9:b6:e0:4e:0c:28:72:36:d1:bc:3c:0f:7e:c0:7a:66:
         17:4f:f5:5d:c7:8c:14:43:6c:80:fd:7e:44:82:bf:e1:78:35:
         98:2a:dd:35:e8:61:2d:49:bd:2f:0f:91:b2:bf:9a:6d:c0:6c:
         28:24:bf:60:aa:d9:51:1d:ab:79:cd:9f:98:92:f3:9f:a9:45:
         1e:61:f0:09:db:a0:e1:ba:91:95:88:70:d6:89:3a:b2:a9:1b:
         d8:4c:6f:9b:79:62:91:20:d3:45:b5:35:45:e4:55:7d:71:bc:
         20:b4:19:96:f1:fb:f8:6b:11:b9:5b:6b:1e:38:d5:e4:98:a4:
         70:40:d4:8f:fc:f2:8d:1c:0a:4e:56:47:4d:93:97:90:61:92:
         65:d7:4a:b0:3d:d9:15:57:76:cd:b2:70:a8:76:89:7c:37:ca:
         12:c6:b0:32:4a:a3:b2:55:a6:30:92:d3:f6:db:92:3f:df:12:
         b0:0c:23:67:2c:9e:8b:91:24:59:ef:bb:43:c2:5e:99:4d:21:
         a6:c4:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----