Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          U0VhD4nzEXDALIrjvILMY2GAuBvWhy/Jnm4WfFvcEMc=
Subject key identifier:   58:6C:82:56:DE:AF:84:5C:07:D6:CB:98:8E:84:F3:0B:4F:E7:97:FF
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       01962E992E7642B34F526C2E28B4F0FD5047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          0739
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: /dbfDbPAI7DvC2BteWrjbGroX/C8QrUpk94MJDXYeVc=)
                          2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
                          3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2e:76:42:b3:4f:52:6c:2e:28:b4:f0:fd:50:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=586c8256deaf845c07d6cb988e84f30b4fe797ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:b2:20:5d:d5:09:4a:d2:c9:f3:a8:86:67:
                    7c:c9:dc:43:a7:a0:c5:8d:53:3c:f8:a4:72:4b:75:
                    1b:2d:29:c2:2a:c8:d8:6b:db:64:ce:1e:27:88:ae:
                    d9:76:c9:34:1a:d0:01:0b:9a:3e:36:9a:39:29:f0:
                    50:5c:27:9e:5a:5a:74:38:30:df:7c:94:53:c7:50:
                    0c:81:fd:6c:f4:c3:9d:ac:b9:ad:91:85:34:f0:d5:
                    cd:b7:9b:67:7e:19:6f:fe:83:78:99:6a:bc:e4:4c:
                    de:12:41:65:79:12:59:db:df:09:b9:c6:e3:5c:e3:
                    8d:3f:a9:02:ea:d1:f4:b9:fb:b9:1f:a3:f3:1e:da:
                    eb:55:63:2f:d9:8f:b4:50:30:cc:47:1e:9f:1a:06:
                    0c:a9:f3:4a:b4:96:f3:09:c5:bd:c8:f6:46:9f:e3:
                    71:15:7e:20:04:11:37:2d:e9:59:e2:29:f4:bb:23:
                    68:2d:a1:1e:ca:1b:cd:68:4a:bd:49:11:af:7d:56:
                    ba:e8:04:bf:2d:ef:14:f1:94:79:b6:bc:24:7d:7f:
                    8c:91:ce:16:9a:6e:63:25:7e:1e:82:e3:4a:d5:24:
                    15:dc:fa:8d:be:e3:5e:1f:9a:86:1c:f0:21:96:43:
                    c3:cd:0e:70:61:2b:45:c2:13:48:9f:c0:a2:11:b4:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:82:56:DE:AF:84:5C:07:D6:CB:98:8E:84:F3:0B:4F:E7:97:FF
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:55:57:a5:47:1d:11:37:ec:14:25:2e:8a:93:89:32:75:c9:
         7e:24:34:3b:25:4b:3f:b1:2a:59:0f:57:62:b2:97:bb:15:f9:
         1a:22:50:69:9e:4a:a9:fe:99:24:d4:6f:d3:19:99:18:d2:d5:
         27:37:e3:99:d7:0c:83:64:86:77:8a:15:8a:16:74:2d:d3:2a:
         14:d6:8c:e7:33:6d:5b:60:8e:fa:0b:8d:68:84:25:3b:c4:d3:
         2b:3e:5b:6f:17:90:bb:b9:a8:14:08:29:47:e5:7e:e1:0d:9b:
         63:32:94:f7:7c:e9:0f:e4:bc:a2:c5:44:a7:71:5b:d0:33:a8:
         a7:33:ee:59:4d:57:22:aa:d0:a8:79:de:37:4b:70:aa:8a:60:
         6b:42:83:3d:44:06:61:51:4b:b6:01:ea:b1:a0:42:91:d4:6b:
         84:32:fa:35:1b:1f:93:f9:2e:93:1c:b8:85:41:cc:0b:0b:92:
         80:5e:ad:ae:f7:34:f3:c5:9b:53:05:8e:59:b9:2c:85:90:c3:
         1d:77:bf:07:50:b8:45:16:dd:fa:12:f3:60:70:fe:a5:67:0e:
         58:70:cd:c5:a0:20:ab:de:71:40:e3:fe:7b:bd:07:dd:a2:a6:
         76:72:3c:e1:41:2a:04:cb:66:33:06:88:a0:0a:81:8a:4b:44:
         53:6c:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----