Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          IZ4/15PLXjIvfqiquR+39+alMFbJM5eAYqdeInm1IWI=
Subject key identifier:   E1:43:9C:38:1A:C2:A7:A7:DF:24:EB:A9:A3:6C:5F:61:F5:60:86:0B
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       01962F747455B882E032E72BB31F92A86A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          1494
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
                          2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: 46iNOITEfsMG/USvkWjeORYvwhtEL7AmwfhKY3hou3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:55:b8:82:e0:32:e7:2b:b3:1f:92:a8:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=e1439c381ac2a7a7df24eba9a36c5f61f560860b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:16:58:ea:c0:2e:7c:22:1d:ea:cc:61:b4:
                    ba:96:81:28:6d:54:b3:2c:39:38:67:f0:e7:c2:1b:
                    f5:e8:14:c3:a1:62:60:e9:28:57:7b:20:05:af:bf:
                    90:34:14:a3:a7:bb:64:41:d9:6b:60:72:4d:83:a0:
                    0e:1e:d9:af:9b:b1:e3:bd:57:1f:84:40:ae:f3:c7:
                    d3:c1:35:f4:a6:89:ce:87:b2:2e:00:72:01:71:fc:
                    38:72:ba:46:89:26:e6:37:85:21:0d:34:7d:d2:4c:
                    7d:fa:69:61:66:3d:6f:0b:2b:9d:91:50:c6:39:06:
                    85:65:64:3c:a7:f7:84:12:a3:98:4a:bf:8f:20:e4:
                    6b:78:41:c5:58:14:c0:60:fb:d9:48:1d:00:b9:90:
                    e7:26:73:3b:56:61:a6:ad:69:15:3a:33:5b:ce:13:
                    68:15:e2:e5:5c:62:80:2a:0f:cb:63:ca:cc:70:86:
                    00:d0:1c:28:5f:3d:83:a3:30:c9:0d:91:52:fc:08:
                    53:31:61:6b:c7:9c:fd:f5:eb:a1:cc:ea:c5:ac:9e:
                    e7:69:3f:d1:c9:0d:6d:a3:fd:d3:42:5b:b1:1a:88:
                    6d:89:63:eb:0c:85:a2:ae:b1:50:8e:cb:12:0a:e0:
                    6a:80:5b:d3:a0:0a:16:51:8c:bc:cd:b0:df:17:1b:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:43:9C:38:1A:C2:A7:A7:DF:24:EB:A9:A3:6C:5F:61:F5:60:86:0B
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:b8:33:ab:81:6e:11:36:ad:0f:62:be:0d:62:e2:e8:92:
         b5:05:45:cf:8b:89:a6:9d:3b:47:62:0d:b5:1d:1a:19:6b:84:
         4a:fc:4f:cc:17:39:db:cb:8d:cc:ca:c3:d4:48:86:c8:72:fa:
         8d:6e:2e:09:19:7f:28:e5:f8:cb:7d:4b:fa:9e:87:40:f6:06:
         36:9b:85:27:35:bc:79:e2:48:97:d3:46:23:f6:c3:74:04:3d:
         7d:bb:3f:6c:de:7c:b3:2d:ac:6e:65:93:3e:e7:84:4d:5c:da:
         ed:e8:78:9c:fb:fa:19:75:a4:59:1a:c0:34:ac:48:18:92:5d:
         1a:10:69:0c:bb:35:13:75:32:cb:a2:ee:b6:2d:c6:40:c7:48:
         22:d5:a7:57:48:f6:cd:96:02:b8:47:aa:8d:5f:5a:eb:f2:eb:
         e7:7b:3f:91:df:15:80:bb:4a:98:0a:eb:89:7a:7a:f3:c9:96:
         57:3d:b6:13:2a:9b:07:6e:e3:87:0d:0e:d6:f1:98:50:a0:e0:
         f6:75:8d:9c:95:93:a5:fb:34:5a:e3:e9:16:cb:60:96:d8:c7:
         f6:7c:9e:6b:50:b1:f9:06:51:9a:74:78:1c:86:7d:7c:31:78:
         3c:23:41:ff:90:4f:79:d4:d3:2d:fe:01:b4:58:fa:dc:57:e4:
         6f:56:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----