Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File:                     HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier:          PMePhpQz8/yIwGqebGjjOpsqJzodwS6RQs7NHFPBedA=
Subject key identifier:   5B:0A:C1:5C:12:38:D1:56:09:77:15:DB:E3:F5:AC:A8:A6:C4:32:6C
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer:       /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial:       01962F06D840BBDC747CE2C2EA88AA023092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number:          1101
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: gcc+s1pQgm8lu+jISSvxWOZhgyBbSFkSit1xOJb4sRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:40:bb:dc:74:7c:e2:c2:ea:88:aa:02:30:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=5b0ac15c1238d156097715dbe3f5aca8a6c4326c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:89:37:2e:db:2b:e9:86:f9:4d:10:0c:3c:
                    25:7f:ab:ee:c3:9f:d6:0b:67:79:f0:46:c7:59:96:
                    db:d0:b4:19:f5:e7:b1:25:dd:a7:c8:b3:ea:f6:42:
                    24:56:db:c7:a3:7c:d3:af:cd:7a:e2:70:8e:c8:1c:
                    cf:35:2a:e3:a7:67:79:03:39:a4:ca:15:ce:24:f7:
                    83:a8:8c:70:74:4d:eb:0d:5b:d8:c8:32:5a:f3:60:
                    60:f1:2c:a6:08:a6:66:d4:b2:37:ce:51:bd:0a:64:
                    4f:e2:6c:69:43:2b:6f:45:41:d6:67:d2:da:02:78:
                    46:ad:c0:64:22:e0:83:b3:2e:ef:ec:df:56:ae:0b:
                    cf:ce:45:f4:c2:a0:61:d7:8e:44:84:78:a6:5f:1f:
                    5b:8c:8c:6d:67:43:5b:cc:34:26:bd:f7:56:92:57:
                    04:5e:fb:92:b9:09:fd:87:5d:25:6e:90:52:90:86:
                    e4:49:89:94:e4:03:b6:45:dc:34:ac:fa:c4:48:14:
                    d7:4b:c5:21:87:cc:f5:f7:81:27:3d:7f:30:bc:b7:
                    dc:17:ca:cc:ed:cc:12:fe:cc:29:16:79:3c:0a:dd:
                    a0:58:6b:5b:b5:3e:a3:ed:ec:f2:20:67:45:f5:9a:
                    54:51:a9:40:28:76:a3:1c:69:35:c2:e6:ae:3e:ed:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:C1:5C:12:38:D1:56:09:77:15:DB:E3:F5:AC:A8:A6:C4:32:6C
            X509v3 Authority Key Identifier:
                keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:20:e7:f5:19:bf:62:50:9f:01:b0:71:f0:c2:f6:24:ea:
         20:93:a9:3f:9e:2f:bf:39:94:36:84:05:03:93:58:a8:fb:43:
         f7:0f:9b:56:50:9c:3a:fb:b4:cc:1d:19:a1:9a:fa:ec:ee:4f:
         50:0b:04:cd:79:ae:d4:0f:2d:51:62:7b:c2:b9:d3:43:93:9b:
         b1:7e:fd:7f:73:6d:78:96:59:c4:16:54:e1:7a:7f:13:5a:b7:
         48:1e:3e:7d:2a:c6:29:b9:70:b0:4d:71:0b:91:ec:1c:1b:8e:
         d8:ab:4c:29:c8:a7:c0:de:33:7e:44:36:75:18:85:fe:11:db:
         56:89:6c:b4:b5:d3:ad:73:55:bf:d3:1f:da:ec:1f:2c:37:fc:
         d5:75:1e:d7:d0:cb:30:cb:06:00:b3:a7:4a:c4:92:17:d8:3e:
         e4:62:68:6f:67:aa:94:6f:c2:1c:02:4f:20:92:24:ef:f8:d0:
         e8:44:d1:a6:80:28:c3:33:d9:8e:f8:24:f8:28:7f:75:c0:40:
         27:83:79:a7:77:0e:43:03:db:70:66:96:df:e8:f9:8f:f4:95:
         86:4f:63:b6:2d:5f:85:72:55:d7:7c:2b:87:52:9b:00:59:2a:
         cf:2a:63:79:02:eb:1b:32:a2:95:14:a0:e4:50:85:cc:3c:d0:
         72:47:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----