Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
File:                     hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft (raw, json)
Hash identifier:          p5v+vMdPPveFZGVwODz3o3N/MpT4SYQlgwk1+KGBER4=
Subject key identifier:   8A:6F:ED:76:D2:D4:A6:66:A7:82:9E:A7:2B:E2:01:F9:04:2E:CB:6F
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Certificate issuer:       /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial:       0192AEF315E7274C0FE068A7979AE696024B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
Manifest number:          1327
Signing time:             Mon 21 Oct 2024 12:00:19 +0000
Manifest this update:     Mon 21 Oct 2024 12:00:19 +0000
Manifest next update:     Tue 22 Oct 2024 12:00:19 +0000
Files and hashes:         1: T4vEqiKTdVYoUTm2eUtL58YzJSc.roa (hash: q4zo2EQCBioAOfoYjPbq046hPQfa0Ma7LR74g9rlEjM=)
                          2: hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl (hash: nCSwi472ja/izrBcntcL6Uz+A8hrW7MmQ2hYL7+Psi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:f3:15:e7:27:4c:0f:e0:68:a7:97:9a:e6:96:02:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
        Validity
            Not Before: Oct 21 12:00:19 2024 GMT
            Not After : Oct 22 12:00:19 2024 GMT
        Subject: CN=8a6fed76d2d4a666a7829ea72be201f9042ecb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:ed:b2:2b:84:9e:6c:f9:e1:14:2e:92:67:
                    d2:93:6c:37:43:6d:2a:a3:de:b5:14:72:c4:61:f2:
                    d8:0a:55:f5:5a:81:7b:5e:03:a1:4e:29:27:27:4b:
                    78:d4:22:03:2a:f4:11:69:7d:07:dd:ec:3d:63:b6:
                    c2:75:69:26:72:07:33:30:40:87:8e:8b:84:d9:9c:
                    17:ab:74:d5:28:82:cc:0f:46:80:b7:da:c0:7c:cf:
                    b6:10:a1:84:c7:40:7f:20:85:03:9d:a6:10:06:97:
                    96:c0:b2:84:a4:fd:b5:b6:c5:9a:17:e5:36:88:1a:
                    a8:ff:47:81:08:9e:e3:0a:8a:98:1b:21:c9:2b:f6:
                    04:00:b5:62:e5:0c:c2:c0:b2:64:08:1c:76:2d:0d:
                    65:24:26:0c:e9:b3:8b:98:29:d3:1c:05:45:17:d0:
                    55:0a:3d:7d:5c:4d:cd:30:15:91:26:dc:ba:dc:e0:
                    d3:5e:fe:cd:ec:d3:09:29:fc:29:e8:3f:12:8e:3e:
                    47:29:77:74:53:7e:cf:3a:a1:a2:b6:dd:95:92:73:
                    67:44:c3:68:ed:d8:06:b4:ce:60:cd:ae:c9:d2:03:
                    36:e0:d0:fd:10:c3:88:58:70:6a:e1:02:37:a4:bf:
                    cf:8a:82:ab:1d:78:f5:24:ed:5d:9a:1e:45:e7:52:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6F:ED:76:D2:D4:A6:66:A7:82:9E:A7:2B:E2:01:F9:04:2E:CB:6F
            X509v3 Authority Key Identifier:
                keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:3d:b4:e2:36:06:63:93:b7:4a:84:b3:da:7c:f7:89:38:
         a6:be:6e:bc:ed:9e:14:50:18:fa:8c:38:da:94:69:a1:56:5f:
         3e:81:77:79:30:29:49:11:ee:95:1e:d9:8a:46:36:5f:aa:97:
         2b:88:69:0d:1a:c4:44:d5:ab:d3:19:60:be:0f:45:f7:8c:64:
         1b:30:48:09:16:16:47:e3:d4:ac:2d:70:f0:d4:71:6e:ae:fa:
         04:2c:88:06:0a:c8:b9:dd:56:5d:4b:06:a5:0c:9e:a9:21:1e:
         19:ab:fb:7f:b5:e9:2b:5a:54:08:fc:59:eb:0b:b4:ce:cb:00:
         8d:38:2e:9a:23:4f:6c:c9:c8:4a:cc:cf:7b:f2:ce:d0:82:90:
         5d:1f:13:67:f6:bc:c5:db:93:9b:cf:96:2c:cb:8a:3f:b2:8b:
         a7:7d:3b:d7:53:82:94:52:6b:f5:6f:14:ab:c7:5a:79:ac:58:
         6e:19:d3:fb:ea:09:ad:dc:ef:9b:0e:e4:c2:b4:58:c7:de:61:
         80:ca:02:9d:77:2d:38:09:22:c0:a4:4c:79:78:c1:bf:0a:c7:
         b8:9e:97:72:f2:55:ba:14:25:8a:78:c1:6e:d9:86:06:ab:8a:
         87:da:08:a7:2d:92:a8:dd:52:a1:ac:8e:d6:cf:90:a9:29:05:
         5d:b6:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----