Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
File:                     HzJorQbzq480bQ3jm9SuqztlhNk.mft (raw, json)
Hash identifier:          g20d2UMsO1v25RIk7HrL5zWRI482uXMva/BvAEdk6EI=
Subject key identifier:   E2:33:A5:41:CC:90:26:F7:B0:81:2C:AF:D3:1F:9A:7C:20:40:BD:2C
Authority key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
Certificate issuer:       /CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Certificate serial:       01962E9901744AE1B938B5EF2592CB16C99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
Manifest number:          06E4
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: HzJorQbzq480bQ3jm9SuqztlhNk.crl (hash: 9f4RntQKp8shp/jv5AvfT8WbRAfE3AYLsb33pMARyqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:74:4a:e1:b9:38:b5:ef:25:92:cb:16:c9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=e233a541cc9026f7b0812cafd31f9a7c2040bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:19:38:79:d4:35:31:05:5e:1e:31:94:65:
                    f8:be:ae:ea:49:b9:5b:90:51:02:b4:19:a0:1b:d5:
                    95:46:d2:b3:35:12:4c:e1:f5:cd:0b:45:42:12:46:
                    3e:51:57:78:10:9d:5b:57:b9:97:ad:02:fb:55:82:
                    45:89:31:f1:9b:ae:77:fd:c3:ee:9a:a9:57:c6:4c:
                    04:26:48:e0:1c:1b:66:19:2d:09:7f:cc:95:83:61:
                    c2:e0:be:52:f7:f4:b3:f5:78:5e:fb:dc:21:d8:c2:
                    5b:d7:ac:40:ca:06:fd:7f:df:a4:dd:af:1b:7c:ec:
                    ea:54:9a:56:09:19:37:27:ff:cd:b9:15:fc:bc:1f:
                    af:78:bf:cc:2d:5e:b0:33:a9:a8:e8:c9:7b:ff:6a:
                    5c:37:ff:d6:3b:c8:a2:ab:39:8b:24:ec:23:e0:44:
                    21:f3:79:83:b3:e0:d8:73:d0:10:45:19:d3:0d:cd:
                    68:29:ad:ca:b3:c5:06:45:f8:a1:18:98:55:89:36:
                    a8:d6:6e:cd:04:b8:03:98:0b:8f:09:5b:68:18:d8:
                    0d:2f:f8:fc:20:31:7c:eb:65:2a:db:2d:72:6e:eb:
                    ea:cb:85:52:0b:2d:18:da:b4:cb:e5:88:f8:b3:6f:
                    1f:9a:0c:30:39:37:18:c5:a2:60:b6:cc:2a:70:9e:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:33:A5:41:CC:90:26:F7:B0:81:2C:AF:D3:1F:9A:7C:20:40:BD:2C
            X509v3 Authority Key Identifier:
                keyid:1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fd:a9:98:c6:b4:66:96:fa:ee:18:fe:09:55:84:f1:c9:f1:
         7e:84:09:d7:44:03:88:35:34:3f:ab:36:0c:0e:61:14:a7:09:
         b5:d7:44:10:09:37:26:32:ac:fa:a3:5b:3f:4b:e0:eb:b3:50:
         a1:15:51:df:0f:af:35:96:4f:b2:43:48:b0:de:3d:8a:a4:e4:
         20:79:c6:4a:01:12:43:96:0b:85:f5:06:4b:de:e5:26:85:81:
         0a:53:54:41:37:f6:8f:6a:56:ab:5f:0a:80:88:8a:91:58:da:
         ba:c6:99:ab:ed:13:d6:b5:29:95:4f:a1:0c:8a:9c:78:51:13:
         f6:95:69:de:22:62:60:44:a3:75:96:ca:2a:5d:46:13:38:d6:
         31:4e:60:e1:16:27:10:d7:19:cc:c5:2e:8b:0f:3c:5c:dd:7d:
         b3:75:81:b1:6e:31:11:c8:58:d0:05:f8:27:78:be:6c:5e:4c:
         2f:d7:4e:c8:be:43:7f:c3:58:a6:7b:6a:33:47:15:8c:e2:aa:
         e1:2a:97:38:67:ec:2b:f2:0a:cb:c5:14:19:81:7d:bc:7f:7b:
         b5:c2:ea:b0:c2:80:df:36:89:1e:d3:d5:13:fa:ce:28:ac:85:
         c2:db:08:b0:36:15:74:d9:f7:d7:f1:cf:6e:5f:ec:f4:c4:da:
         b8:98:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----