Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
File:                     _hpSVPN9jCkbEd2r7YiwY0gdr2s.mft (raw, json)
Hash identifier:          Ys19DLzXc/FeG2RXyyklUZ1DbR8/V/2SOjFzyH6P2fg=
Subject key identifier:   9F:68:CA:F3:CD:A9:70:BC:24:96:CB:98:6F:94:65:A6:7C:1D:BE:D3
Authority key identifier: FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B
Certificate issuer:       /CN=fe1a5254f37d8c291b11ddabed88b063481daf6b
Certificate serial:       01962E98D52FAA96AB8DA77BC5F81FFE66D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: _hpSVPN9jCkbEd2r7YiwY0gdr2s.crl (hash: l60L+hAW4Euk6PSrClWhoBksosGIL9IYW+HvnQpq1MQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:2f:aa:96:ab:8d:a7:7b:c5:f8:1f:fe:66:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1a5254f37d8c291b11ddabed88b063481daf6b
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=9f68caf3cda970bc2496cb986f9465a67c1dbed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c7:26:ce:6b:05:2d:b1:01:15:69:39:f1:f0:
                    40:92:d2:60:44:d2:37:2e:ca:60:03:bc:55:2c:3c:
                    22:0e:cc:f4:4a:ab:37:a8:9a:5a:19:69:b3:05:24:
                    5d:bd:40:d6:75:dc:52:47:21:70:72:6b:e4:97:31:
                    0b:f8:bd:0c:41:b4:24:29:82:4d:e8:12:cb:3c:24:
                    79:ee:ef:94:43:60:77:72:5c:c6:22:99:00:2d:72:
                    e1:4e:e7:b0:af:4e:11:b8:fe:a4:17:be:7f:63:24:
                    c9:35:23:5a:41:7d:e9:a3:27:e6:2f:e5:27:03:2b:
                    9f:7f:a9:28:b9:3e:e6:0e:a9:4e:06:8d:ea:eb:c4:
                    20:a6:ba:8d:81:30:e8:44:64:23:12:94:91:03:bc:
                    12:48:da:87:7f:ce:73:b4:cb:e7:b2:d2:c2:e2:26:
                    c0:db:01:a4:b3:ea:13:63:c8:fd:69:bf:5c:6d:1a:
                    1d:d6:ef:5a:aa:73:eb:10:f2:05:f4:aa:10:73:b1:
                    23:44:d3:8d:0f:41:05:99:e9:01:79:13:9b:49:8f:
                    ce:18:dd:1d:fa:04:66:4a:68:7e:5e:a5:cd:8b:6a:
                    fe:b2:33:a6:80:e7:5d:3d:09:c8:00:a9:fb:79:b6:
                    9d:bc:fb:91:d1:dc:2e:9c:fa:cf:cb:75:23:5a:e0:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:CA:F3:CD:A9:70:BC:24:96:CB:98:6F:94:65:A6:7C:1D:BE:D3
            X509v3 Authority Key Identifier:
                keyid:FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:4a:b2:51:73:67:e7:bb:e1:fc:4c:b4:f3:11:21:b3:21:
         24:50:de:6d:ae:2c:a8:75:32:0e:d8:f6:eb:c3:2f:7f:de:77:
         63:fa:73:07:5e:96:17:71:b5:ee:94:c0:07:91:04:60:39:ef:
         6e:68:ad:15:6d:46:ee:34:86:d3:c2:9b:ff:79:e2:c6:9a:14:
         0e:da:2b:cb:47:55:f4:08:4b:74:58:bc:9e:03:7e:40:f7:fd:
         ec:cc:91:4b:ae:d1:24:03:29:62:17:9e:8d:73:6a:db:3f:64:
         40:4d:a5:c5:c7:e3:fc:e9:8d:12:d1:b4:7c:f8:ec:e1:f6:15:
         3e:48:0a:07:2c:47:dd:c7:12:a5:51:00:b5:3e:d2:5c:16:22:
         80:6f:6c:95:c7:b8:f9:ac:cc:6a:3a:ef:c6:da:9d:fb:8d:24:
         6c:9c:25:99:90:f9:98:6e:af:46:14:90:8a:09:33:e2:ad:1c:
         b9:1e:d3:6a:e0:ce:e1:a3:3f:1a:0d:53:57:72:4f:d0:b3:9e:
         fd:1d:0f:df:03:80:9e:11:c8:6a:ef:f9:84:82:c8:66:9b:20:
         0f:45:26:c0:0a:b8:28:8f:db:9e:a1:88:3d:01:ab:25:5a:82:
         5b:7c:5a:84:b4:ba:a3:2e:6e:a9:ed:7f:d3:de:bb:0b:af:f4:
         ba:b4:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----