Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File:                     HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier:          y1sjV1rQAyUPSMKrQgA+0RfRx+JHChrIlf9FSUpXDsA=
Subject key identifier:   99:0B:87:2B:67:51:23:AF:35:7B:04:F0:A9:89:B4:64:91:CF:DB:EE
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer:       /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial:       01962ECFDCA8A4E14028A4E4CE263AD96478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number:          0601
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: JIp/dlEzQjYg1dHey7izH1+06Rm3rDxIPVjp+wRbfoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dc:a8:a4:e1:40:28:a4:e4:ce:26:3a:d9:64:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=990b872b675123af357b04f0a989b46491cfdbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:8c:fb:36:83:d6:8c:54:27:87:d9:46:aa:
                    82:e8:27:1c:8b:e9:2e:f4:d6:5f:77:14:d6:2a:8a:
                    72:68:f5:24:b5:12:64:e2:35:10:38:40:6e:dc:64:
                    dc:94:ec:7b:41:e0:a4:37:05:5c:20:06:66:9e:9a:
                    49:13:88:44:fa:a3:c5:4f:46:4b:2e:74:c2:12:1c:
                    a2:fc:e4:49:d5:b9:64:bd:a5:47:7e:8e:1e:39:a0:
                    ff:99:3f:c2:b9:86:9f:d2:49:3c:9d:f0:00:c8:c7:
                    26:65:15:3b:5b:39:64:24:2b:b4:82:ec:8b:86:40:
                    7b:1e:7e:7e:db:ef:b7:ce:1e:87:93:f3:4b:cc:e9:
                    f8:f1:a7:35:53:14:4a:ee:fd:8b:36:87:4f:6d:cb:
                    8b:9b:bd:63:5b:76:1a:9c:e2:62:f6:e4:d3:d7:25:
                    d5:e6:23:5f:03:c5:01:1c:aa:5a:d9:0f:3a:2d:73:
                    9d:90:77:17:67:15:63:71:d2:1b:03:b1:68:88:7d:
                    bb:11:8d:a7:86:fd:c1:94:7e:bc:fc:c3:23:2e:2c:
                    d0:e9:a6:f4:73:be:6a:d4:2c:98:ac:14:5d:12:a0:
                    e4:f2:b5:35:e8:2f:26:38:76:da:25:e6:4d:6c:cf:
                    f6:ef:65:c1:67:74:ff:8d:8e:fc:0b:c3:f0:65:9b:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:87:2B:67:51:23:AF:35:7B:04:F0:A9:89:B4:64:91:CF:DB:EE
            X509v3 Authority Key Identifier:
                keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:68:34:46:19:39:d1:6f:e2:83:55:7b:ce:81:c5:e1:38:5a:
         82:b0:ba:44:0e:62:de:ad:d8:ae:80:65:41:84:57:0d:e2:0e:
         2a:4c:25:b4:21:b8:b5:63:e5:a9:80:9b:27:28:5f:59:44:8b:
         67:81:40:05:36:3b:cb:96:36:24:da:01:ed:a8:9e:73:8c:c2:
         03:75:1e:99:87:2e:b3:a9:49:78:c2:e5:13:22:f6:52:67:0b:
         1b:8f:8f:cd:a3:36:f0:39:46:e7:18:6c:31:e8:07:ea:0e:0c:
         99:05:40:9f:40:d3:72:79:c9:c5:5f:53:02:d7:cd:a2:26:bb:
         95:b4:df:71:88:4b:2d:6e:fd:cd:2a:84:24:c9:80:e1:55:65:
         38:b2:b7:73:9c:86:bd:00:50:d7:d0:32:80:55:01:6f:4d:cb:
         ae:a1:03:47:47:33:b6:22:f4:4c:15:72:c5:ae:8b:70:ca:e5:
         b8:96:04:08:be:13:fe:b0:70:da:0e:4a:57:8b:74:11:a3:c6:
         93:8f:c3:8a:0e:00:1d:2c:a7:db:b7:b7:51:83:9e:7d:fd:24:
         30:87:77:cd:90:4c:8c:71:8e:0a:df:c1:a7:e8:25:a9:24:24:
         fa:19:cc:1d:a4:9a:af:d9:50:ce:5c:aa:b0:81:71:36:ea:bf:
         b2:12:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----