Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File:                     HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier:          WvN/748qk8+CsqRj6pAuCv8MAJEBA53hYuy75vG9Lcg=
Subject key identifier:   6D:56:CC:64:53:AD:F2:5C:A7:99:F8:7A:6B:FC:ED:58:70:C4:1A:D3
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer:       /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial:       01962E9882397AB7E67B028218FC64858E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: QyjDl55AYUkUhl0RkCbOKl03L8cwPWVVrFd9pzqrzOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:39:7a:b7:e6:7b:02:82:18:fc:64:85:8e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=6d56cc6453adf25ca799f87a6bfced5870c41ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:d7:92:5c:c2:29:37:de:75:21:3e:1e:bd:
                    78:1a:ac:70:9a:2b:64:5b:20:ae:f7:db:f9:9f:44:
                    28:6d:a5:5f:38:3e:6b:99:b9:be:f6:06:f1:c5:08:
                    98:98:4f:21:67:ab:e4:fc:9e:00:16:09:05:fb:fd:
                    ce:85:41:a6:76:95:4a:ff:b2:1f:34:fc:8a:19:0c:
                    11:6e:b0:b5:68:6b:70:05:62:68:3d:91:c2:c3:61:
                    58:e0:71:d9:9f:ef:10:b2:ec:2d:9e:23:6a:8e:ac:
                    a8:7c:92:9b:83:af:4d:a7:69:1f:2f:e2:fd:be:7c:
                    56:fc:f5:d8:42:ec:8c:3f:38:87:04:bf:f1:72:25:
                    e6:eb:bc:92:0a:bf:aa:f6:b8:41:ab:50:52:01:df:
                    ac:a1:1a:8d:03:93:8d:15:cd:15:c8:68:33:64:da:
                    89:ab:85:f8:0c:31:16:09:b2:91:d0:43:33:ca:c5:
                    0b:7e:5a:55:4f:c5:e2:8c:21:f1:17:59:9c:59:de:
                    32:8a:b0:43:69:1d:56:85:65:28:2e:3e:86:a5:2f:
                    e8:86:b6:5e:c1:65:6f:74:9e:4f:4e:ca:65:5e:95:
                    af:7b:a1:b9:1f:24:1b:6a:8f:5a:40:53:e8:e3:3a:
                    64:32:ed:1a:30:b4:e8:0c:b8:00:11:96:29:63:a6:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:CC:64:53:AD:F2:5C:A7:99:F8:7A:6B:FC:ED:58:70:C4:1A:D3
            X509v3 Authority Key Identifier:
                keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5c:0c:f6:d0:ce:e1:f3:90:c5:63:f5:67:17:71:f6:68:13:
         6c:42:68:fa:dc:a0:8e:56:68:7f:01:bf:de:7a:d2:e0:0b:95:
         a1:4e:a2:6c:b0:cf:ce:c0:13:35:63:44:13:f4:b2:ae:04:db:
         95:89:de:26:2c:28:b3:c1:b0:d0:1d:38:92:00:7f:2b:03:c6:
         cc:17:c8:95:9c:43:83:e7:e0:d7:9f:b9:70:40:eb:a8:97:2c:
         ee:df:a6:a9:e6:e3:18:e5:75:4a:ef:b2:d6:c2:72:7b:10:a6:
         3b:7e:98:69:55:8a:41:d2:b3:4e:46:7b:4e:21:d3:54:dd:16:
         69:1e:c7:dd:55:00:9d:27:f1:ce:5c:e7:a2:48:34:d6:2c:7f:
         a2:be:a0:43:08:b4:7e:12:a0:4f:ae:40:84:50:8e:2e:28:d2:
         03:e0:8e:8d:f8:47:6d:94:ff:8d:06:68:c2:26:74:04:93:e6:
         4d:98:74:48:ea:6d:84:b4:74:c0:93:0e:96:1b:26:c5:69:c6:
         87:1d:94:66:57:9b:23:15:74:fc:6a:ec:af:ff:2d:0f:17:78:
         0e:65:81:d5:80:84:d0:4d:07:06:c6:be:30:5d:b6:20:c9:b5:
         cb:b6:9e:7d:1d:65:a9:00:98:47:04:e2:57:d0:f3:76:52:b6:
         b3:29:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----