Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File:                     HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier:          OQaR7qZhxKkuo7iV040DsqI+oazIalG4UOaVtsiEfTU=
Subject key identifier:   C5:21:7D:20:DF:EF:3F:6F:79:AD:4A:43:6C:9A:8A:D1:DE:9C:26:CF
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer:       /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial:       01962F06BAC99D4A03F2962DECA01412F691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number:          0349
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: 89EQW9ji4nalaMioNbHyz7ljfMdjaLusYgOA53+AHWM=)
                          2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:c9:9d:4a:03:f2:96:2d:ec:a0:14:12:f6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=c5217d20dfef3f6f79ad4a436c9a8ad1de9c26cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:b1:a6:af:f2:77:1d:fe:f7:b9:13:71:46:
                    02:52:30:72:f0:a0:4c:c2:92:06:51:73:64:59:3b:
                    71:d7:2c:f8:75:98:46:5e:c1:2a:42:5d:42:04:89:
                    76:27:2a:26:8d:31:46:03:98:bc:52:92:11:38:7e:
                    40:e6:e5:4d:bd:59:bd:c5:15:3b:f1:81:a0:87:01:
                    6b:1e:10:a1:f1:48:bb:58:d9:5c:24:6a:05:b7:dd:
                    fa:5f:a7:96:9a:6f:3a:04:90:34:f9:53:ac:e2:b5:
                    c6:eb:2e:ff:07:d0:21:82:cc:81:5a:d5:6a:1b:f4:
                    e1:f0:ac:78:39:17:48:19:33:b9:49:41:fd:21:73:
                    8c:fc:6c:89:2a:58:38:1a:79:e3:ed:80:3f:8b:6d:
                    2b:95:38:40:51:e4:cd:18:99:39:88:7c:ac:2d:ec:
                    dd:ad:0f:e3:47:5b:12:cb:fc:b3:53:5b:a2:82:05:
                    29:18:87:99:ce:57:ee:26:cf:45:46:38:15:11:0a:
                    07:2d:54:86:83:13:df:43:42:1d:1f:0e:e7:ab:2f:
                    0a:94:be:73:5c:40:72:88:4d:6b:1a:42:47:9f:9a:
                    ac:22:64:bf:61:7c:2f:02:13:01:27:4f:11:72:d9:
                    64:c6:23:d6:c8:1c:4d:93:19:bc:e5:29:b7:b7:94:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:21:7D:20:DF:EF:3F:6F:79:AD:4A:43:6C:9A:8A:D1:DE:9C:26:CF
            X509v3 Authority Key Identifier:
                keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:12:3f:0a:e0:71:db:6d:2e:23:0b:26:0c:8a:9a:99:16:
         4a:f8:95:16:1c:1b:c7:1d:84:17:13:cd:0a:dd:46:ac:ce:20:
         db:30:34:74:44:21:a7:2d:1c:d2:76:9a:51:75:f5:ec:cd:31:
         68:6e:c5:1b:95:33:aa:d5:2d:ed:68:0d:4f:71:8a:55:a4:22:
         64:0b:34:db:66:8f:34:7b:d5:21:45:df:29:29:43:96:13:6b:
         71:9b:25:f2:01:a1:42:52:aa:36:3a:c1:b5:a2:8d:9c:23:d4:
         dc:f9:06:17:f2:93:fe:b9:61:aa:f3:88:8d:e3:e3:fd:10:55:
         1f:7b:c2:08:60:94:f5:ae:7b:dc:25:f3:20:6d:5e:99:d1:d5:
         2a:fe:6b:d9:f4:70:d5:46:09:eb:7d:76:b7:f8:27:11:a9:fe:
         0b:ca:73:79:ff:11:42:57:b8:5b:87:e8:4e:48:0d:a1:49:d8:
         83:6e:11:ff:20:a3:fb:8c:45:0c:c5:80:8b:74:31:97:1a:59:
         10:5b:09:5d:a2:6b:fc:fa:36:b1:22:71:b8:47:8a:e0:49:cb:
         80:96:72:d3:6d:29:45:bd:7e:65:a3:73:e4:e8:c7:7f:2e:4a:
         b5:d2:53:c1:ed:0e:a1:ba:84:49:7d:85:3e:5d:ee:98:22:51:
         cc:f1:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----