Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File:                     HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier:          0LQfHeJXjAVpx0Po9DegcLalYeUoIBf4pY7gIe1beKA=
Subject key identifier:   D0:53:2B:31:A9:BE:8A:70:FC:30:E2:66:01:0F:26:0E:36:42:5F:A0
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer:       /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial:       01962DF41F8EEFD8D33281FCB755A77BF962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number:          0A0F
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: o4+fA4bkq1c3inhuAH6Y4aEiH/kyrQp929WSLGIsas0=)
                          2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:8e:ef:d8:d3:32:81:fc:b7:55:a7:7b:f9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=d0532b31a9be8a70fc30e266010f260e36425fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:25:fc:d2:38:63:ec:fe:81:24:1a:ad:76:
                    67:df:3c:aa:d9:53:59:76:b8:e9:23:5b:76:9f:08:
                    95:e8:9e:1d:cf:8d:3b:3b:ae:22:d9:88:42:12:91:
                    9d:71:e4:37:76:2f:17:12:5b:f9:8e:9d:72:8a:50:
                    85:40:f2:75:8e:ed:47:32:51:f2:76:6e:94:19:4b:
                    fb:15:0f:45:f0:d7:1e:7e:3d:3b:d2:a5:ce:fe:b1:
                    6c:0b:68:28:97:01:1a:57:be:f1:26:a7:e1:31:86:
                    8c:b2:10:79:66:4c:5c:9e:31:75:0b:ea:5c:a0:31:
                    9d:8f:b8:12:20:e6:dc:cf:0a:c1:bb:da:9a:5c:9c:
                    7d:f9:94:d8:62:eb:11:b3:73:f1:28:a2:87:71:8a:
                    93:8f:66:09:0e:0a:cc:c2:bf:69:fc:5b:72:f4:e5:
                    da:7d:b6:db:f6:c6:9a:46:03:56:76:d8:31:f9:89:
                    b2:38:f8:59:15:60:cf:bd:46:95:fc:ed:ec:ba:1e:
                    9c:26:79:96:ac:6a:9c:f8:ce:13:47:54:0c:53:a2:
                    94:42:51:48:7d:39:cd:e3:44:96:be:fc:38:40:f8:
                    fe:2c:8c:dc:6a:cf:ae:8b:4d:f5:3e:8d:4d:53:e2:
                    0a:cb:b6:6d:c7:4d:fa:33:82:9c:e9:be:2f:f7:73:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:2B:31:A9:BE:8A:70:FC:30:E2:66:01:0F:26:0E:36:42:5F:A0
            X509v3 Authority Key Identifier:
                keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:c7:53:2f:d8:63:da:67:bd:4e:45:62:51:29:b8:03:94:
         15:89:e4:8d:ef:1b:b2:f2:0c:c6:4c:1f:d4:60:ca:33:51:fc:
         96:32:dd:b8:44:e6:31:d8:af:02:cc:2c:c9:8c:0e:ff:8d:7c:
         df:08:fe:8f:4c:3f:f2:d7:9b:1c:b9:45:20:9b:48:28:7a:88:
         7f:ca:c1:37:2d:31:a4:90:b2:fe:69:36:6d:48:eb:9a:8b:f1:
         24:e5:a9:2c:3a:00:8b:81:a6:f3:b2:df:23:4d:ab:05:e6:3e:
         57:21:12:1c:66:ac:0c:9f:1d:b8:89:43:9c:65:14:ad:22:e3:
         95:2b:12:3b:64:fe:da:7c:05:e2:a8:b6:41:0e:ff:0f:f8:d3:
         fa:97:e3:25:90:a0:b6:04:4b:13:05:0d:63:8b:05:07:48:c9:
         34:21:0a:5a:aa:ff:0d:17:77:92:a4:ab:cf:da:e5:b9:a4:d8:
         2a:4b:60:b6:d0:9e:6c:df:08:83:b1:ad:22:64:e4:f9:6a:e2:
         79:d8:3e:63:a7:84:de:4d:1c:fa:3d:8c:1e:90:cb:00:4d:cc:
         32:1f:78:74:87:31:55:b8:42:4f:89:14:92:1c:ff:2c:59:e4:
         de:2d:67:c1:a2:b4:2a:36:3b:d7:a9:c3:60:b5:94:78:d0:68:
         8b:d5:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----