Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File:                     HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier:          S5YYxNRdqtcBl8OWeZsNULzAFKu1Wr0y28keFPDK7I4=
Subject key identifier:   9C:8E:B0:83:2F:A6:C9:58:F0:4C:C9:08:16:51:2D:BB:89:AD:14:E4
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer:       /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial:       01962FAB93616066160DBFDDD7B7513903E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: SkpbFk5UJKiitSb7ao8oQuG8nzTzn5Eal36U4ud7cco=)
                          2: R12AgdneGd4IinauuD2IQCzaNdo.roa (hash: 0Vf4DfoprRpqIbS3viTk0elhBi8JnCMTTU8OHnzZBdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:61:60:66:16:0d:bf:dd:d7:b7:51:39:03:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=9c8eb0832fa6c958f04cc90816512dbb89ad14e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:ed:10:25:9c:86:12:46:5f:98:1f:08:17:
                    5b:19:46:5c:a7:43:8a:bd:88:c2:e4:9e:33:50:61:
                    13:5f:0c:0d:da:9a:01:06:fb:cc:38:56:b1:6f:aa:
                    f5:37:77:11:fe:82:01:19:fb:e0:5c:76:06:9d:ca:
                    7d:de:36:a2:8a:7b:87:69:92:89:7e:82:9a:cd:00:
                    c7:e9:72:2e:0a:2a:cf:02:a4:4b:ab:6c:01:9b:27:
                    fa:ac:ce:e0:a0:0a:96:43:a9:b1:7f:8a:45:6a:2d:
                    16:cf:db:d3:b5:be:20:d9:b3:56:11:fe:3e:53:51:
                    27:fa:02:3c:4b:1f:8a:a0:89:d7:f3:74:b4:9d:b6:
                    ed:22:db:e0:b4:77:1d:6b:aa:54:d7:fa:26:7c:5c:
                    6b:7d:27:8b:ac:c0:0f:49:26:28:2f:8a:91:09:b7:
                    87:64:aa:fb:71:1f:aa:3b:32:01:a3:6a:3d:4f:8b:
                    d6:63:64:83:39:62:ce:13:a0:fb:86:a7:8f:75:c1:
                    0b:44:64:f7:fb:31:f1:16:4f:80:e7:5d:69:3c:d6:
                    15:d5:93:50:a9:cc:95:f8:d2:67:62:4b:4d:58:71:
                    40:fd:ff:fb:66:b4:59:77:5a:0c:84:0d:b7:1c:49:
                    c5:0f:06:ef:a3:e7:77:86:64:da:13:6d:8d:02:e8:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8E:B0:83:2F:A6:C9:58:F0:4C:C9:08:16:51:2D:BB:89:AD:14:E4
            X509v3 Authority Key Identifier:
                keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:11:7d:6c:8d:21:c7:1e:9f:6f:8e:8d:09:ec:e6:48:80:
         3e:84:f4:f7:c4:68:90:cf:20:7b:84:6f:8d:4b:c5:30:6b:6f:
         8e:ba:24:9c:fa:08:51:6f:41:2e:93:30:bb:d3:b6:de:eb:6b:
         9b:3a:8c:bd:8a:c4:05:be:31:ac:16:83:c9:eb:55:53:dd:f8:
         98:23:0e:33:7b:d8:0f:3f:82:ae:a5:d3:e0:82:2c:c7:a9:6d:
         ca:0b:44:ef:43:e3:0d:78:ed:b0:c1:d0:47:30:39:6b:51:80:
         e1:3f:d3:1f:e4:93:10:8d:59:2e:f8:e1:1f:84:74:dc:a1:6a:
         ae:c9:1a:71:10:d7:88:c2:f6:bc:c6:48:97:84:34:30:93:ad:
         0a:e3:5b:94:41:89:c7:51:fa:d0:3c:90:36:4f:36:af:08:68:
         83:05:9a:5d:20:f1:c3:21:3d:97:2e:58:7d:0f:2e:1f:f6:a2:
         7a:f3:13:01:c8:00:22:68:4f:64:bb:61:55:33:5a:f1:8e:88:
         fe:26:2e:16:09:b6:66:4d:91:eb:c9:26:f5:02:cc:c2:70:57:
         4b:45:7e:bc:b7:88:ac:ed:80:c5:2d:69:cd:d3:9b:e5:37:22:
         87:bc:d8:38:46:1b:2e:3e:df:1b:33:0f:fd:c2:00:80:15:4f:
         bc:d9:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----