Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File:                     HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier:          y+fqCA9E5PMfvkn4tdFDMoHdIxH/QM7iyZI1oFEOksQ=
Subject key identifier:   93:49:A6:C2:A9:9E:4A:B8:7E:B9:8F:76:A1:C2:BF:5B:6A:95:12:3C
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer:       /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial:       01962E987AA298E3BD3EF8AB8A59B2604300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: O9cNNeHYzja1DQOwoM2fAYxHBXWaXblLB3HIbL1GwJ8=)
                          2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7a:a2:98:e3:bd:3e:f8:ab:8a:59:b2:60:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=9349a6c2a99e4ab87eb98f76a1c2bf5b6a95123c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:0a:4a:37:d5:b9:3b:a4:f2:00:59:00:b9:
                    f6:5c:f8:81:d4:e9:e2:30:11:38:0b:f6:4d:2a:14:
                    e3:b4:e5:eb:e0:45:02:b3:d2:18:39:aa:ea:70:8e:
                    7f:31:b2:42:71:11:a7:9e:7c:cc:63:1c:75:94:a3:
                    70:7a:1a:67:a6:bf:b9:1c:c0:f6:31:8d:23:10:66:
                    28:a7:33:a3:fa:f0:73:fc:13:c3:62:aa:af:9e:cd:
                    81:e0:53:7b:07:9f:2b:64:4d:1a:14:66:4e:3b:e8:
                    83:4a:1d:14:4d:a1:ab:40:c8:df:85:78:e1:1c:85:
                    e9:23:7c:56:ff:62:76:37:29:99:59:22:f1:35:83:
                    24:20:03:8f:d0:a6:92:4f:1e:18:77:65:fd:d8:d3:
                    91:f8:3a:64:5d:fc:4d:2b:84:ed:36:e0:3a:ff:a6:
                    bc:9c:e8:00:47:b0:c0:4c:ee:f6:6a:f8:ed:77:80:
                    ac:69:9c:50:91:e1:63:40:09:e3:c2:f5:fd:11:e0:
                    fa:91:e8:05:00:48:ca:32:3d:c0:1c:98:6a:bf:13:
                    a2:c5:aa:d8:99:4d:7a:53:4f:c2:b5:2a:98:28:82:
                    58:48:fb:0e:25:5f:78:06:d9:75:fa:0b:f7:51:fb:
                    09:a5:27:73:27:fc:3c:63:75:44:db:86:7a:86:e3:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:A6:C2:A9:9E:4A:B8:7E:B9:8F:76:A1:C2:BF:5B:6A:95:12:3C
            X509v3 Authority Key Identifier:
                keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:74:36:f3:fe:6e:1b:4b:43:31:f1:e2:76:b3:69:13:60:
         c5:20:ee:bd:43:83:e8:06:f9:ac:d0:96:4c:e8:82:1b:33:6a:
         91:b5:1e:63:3d:7b:1f:f9:5a:08:00:15:00:9b:86:c2:af:07:
         5e:ae:06:9d:6c:37:53:99:91:ba:88:c8:c7:d8:33:96:93:4e:
         8a:14:58:30:83:2b:2c:8b:cc:e7:a0:a6:53:61:d6:97:83:4d:
         38:63:3a:3a:c1:e3:4d:4b:ba:62:f8:dc:57:c8:3c:32:24:42:
         e0:4d:9e:37:ba:c8:62:ec:95:c0:ae:55:59:8f:4a:14:58:53:
         03:4e:e4:7f:29:11:45:cf:91:78:74:d2:54:fe:0e:ef:b6:e6:
         fb:15:76:b5:3a:e2:99:d8:63:fc:87:27:cf:bf:b6:d1:b5:31:
         48:ed:48:b6:94:1d:b9:88:02:23:d1:68:98:fd:c0:de:a8:9b:
         af:9b:b0:11:35:06:fc:8f:30:94:45:28:e2:71:bc:e3:87:00:
         75:eb:d4:d6:7b:e5:6d:3f:34:d3:dc:5a:b3:20:33:f1:35:40:
         af:6a:cb:bc:e0:b1:12:72:df:55:8b:64:fc:55:7f:ca:e7:94:
         24:35:8b:30:69:f9:46:21:93:35:d4:7f:0e:52:51:6a:e8:ee:
         70:42:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----