Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File:                     HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier:          DWblO/ffIQSxw2rEKwDHy0Xg3MZ8vRSmglIGLjqaVME=
Subject key identifier:   C6:0F:EC:76:B7:9E:A5:86:98:2A:E3:01:27:96:0C:56:05:49:B5:2E
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer:       /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial:       01962E98A06B736509281AC37606AFBBC564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: 4vaxk3jT14bdxNGDHMxIE1uXKt7Um2YqzDof1ab5ydQ=)
                          2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:6b:73:65:09:28:1a:c3:76:06:af:bb:c5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=c60fec76b79ea586982ae30127960c560549b52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:a7:b8:14:06:ad:61:3d:27:45:ab:c1:ce:
                    ae:d3:73:a9:0b:f9:a0:f6:b9:bc:3c:d5:a4:9a:37:
                    50:46:7e:fe:b3:f1:79:e7:90:48:b3:e0:74:17:3f:
                    a5:19:22:91:79:13:2b:84:a8:ba:2c:16:7c:b1:22:
                    bc:c0:fa:a2:f8:59:c6:d5:4e:09:0f:a6:8d:e8:ed:
                    57:0b:b6:72:75:f1:34:a0:70:ea:93:69:0e:9e:13:
                    fe:2c:21:d8:1f:78:3a:7e:d6:83:91:34:4a:3e:f3:
                    c1:a8:04:00:67:a1:54:88:bb:ab:6d:eb:27:77:c0:
                    68:2e:9e:86:f0:14:45:40:a5:a6:8e:8f:d1:27:dd:
                    f7:e2:d4:63:97:a3:90:e6:62:91:64:4c:1c:f2:f7:
                    58:9b:62:fc:39:bb:d2:e4:99:d2:58:9e:47:ba:15:
                    de:a8:fe:0c:ac:96:b9:12:9e:53:57:2b:22:19:9c:
                    ad:f0:c7:11:51:33:63:2f:b6:37:46:b5:0e:fa:b4:
                    8c:35:91:a7:ab:de:9c:e6:cc:d8:8b:ea:81:a6:b8:
                    8f:d5:c8:5d:f8:a6:24:75:ab:c5:11:d4:16:e7:62:
                    d1:4f:fb:b9:83:93:b7:d1:67:ed:24:f1:19:9f:e9:
                    36:15:b3:ef:f2:e9:db:35:48:03:3b:17:bd:4d:e8:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:EC:76:B7:9E:A5:86:98:2A:E3:01:27:96:0C:56:05:49:B5:2E
            X509v3 Authority Key Identifier:
                keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:12:6e:ea:85:c6:88:78:46:9e:9f:d2:37:4c:43:47:3a:6e:
         c4:a3:a9:cc:e0:de:d1:ca:17:9a:03:af:fc:74:ef:72:e1:6f:
         f7:6a:ef:4f:75:e5:bb:61:0e:22:fb:0a:06:00:6f:03:a8:d6:
         14:1a:5d:7a:f7:9d:9e:1b:33:da:0d:dc:77:26:5f:0b:6e:3b:
         8e:c3:5c:c2:4f:aa:27:c0:01:b9:d4:ac:b3:9e:22:09:c4:24:
         ee:3d:d4:b5:48:63:37:36:5b:8f:d9:28:f9:4a:a0:2c:bb:ef:
         8a:22:64:cc:16:24:0c:67:ac:14:57:02:6a:12:88:f7:59:86:
         54:5a:3a:dc:37:7d:aa:70:f1:6d:46:2c:32:85:72:ff:ca:ff:
         24:b5:39:b1:de:e1:1c:9d:9a:f4:c4:9b:78:21:72:82:ce:53:
         72:62:b4:e0:72:b9:63:e7:93:0c:86:fc:16:f8:be:68:5d:6c:
         27:96:1e:29:70:2c:d3:51:a0:cd:f0:2e:3a:3d:74:ec:62:8b:
         ec:ea:b8:01:01:a3:ae:4d:a9:47:d1:9f:45:16:83:0f:bf:81:
         3f:83:3a:3b:4c:1b:6b:16:98:f5:84:65:77:46:63:69:e2:79:
         86:39:68:df:97:4a:47:9e:9d:1d:f0:b8:ee:82:e6:31:89:f3:
         4b:1b:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----