Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File:                     uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier:          upFIdfBYODBy1gVwtzuy9nP6ttNxfganr6SNjy0qCQ0=
Subject key identifier:   DC:A1:43:A5:A9:52:CD:78:91:11:40:E1:7B:E5:7A:2D:11:47:3E:94
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer:       /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial:       01962E99B0EB545A0BFBA050527D1BFDC45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number:          95
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (hash: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=)
                          2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: jvtoyOZt597ieToyyOWA6B4yiVvVGpeDTp27TF2zN/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b0:eb:54:5a:0b:fb:a0:50:52:7d:1b:fd:c4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=dca143a5a952cd78911140e17be57a2d11473e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:8d:85:42:56:2d:a6:53:7c:49:49:57:47:
                    86:c8:f0:9e:da:41:c4:e4:f1:53:bc:86:7c:66:cb:
                    a2:ed:a7:0e:c9:85:f2:9e:39:b8:f3:87:e8:b8:fd:
                    e7:b9:99:ab:c5:2c:67:0e:6d:05:1c:63:cb:26:f4:
                    a5:56:3d:bb:95:70:65:9d:69:21:5e:cc:30:16:be:
                    fe:f2:97:a5:68:3c:b6:78:a4:40:22:49:6b:55:29:
                    9f:38:7b:64:74:98:5a:5e:f4:aa:1b:1a:dd:45:e2:
                    de:34:26:6b:59:93:84:20:fa:aa:96:ee:f9:28:59:
                    ae:85:62:d9:8f:47:1d:86:e6:ec:83:31:5a:3b:7a:
                    1f:63:52:c1:dc:62:96:b8:ce:de:87:da:05:47:50:
                    c3:3b:09:35:84:f0:4a:93:6f:66:1d:b8:a8:80:72:
                    e1:8d:21:99:13:0d:7c:7d:3a:15:b2:21:17:23:5c:
                    d5:b8:18:03:ec:db:76:d4:a7:ba:fe:79:bb:5c:eb:
                    14:de:ee:76:c3:11:96:8d:64:63:bd:ae:45:97:bb:
                    b3:d6:d1:93:65:75:50:76:d0:1a:e1:21:c5:81:79:
                    04:eb:50:4a:81:bc:e2:ef:26:19:8f:2d:80:54:2d:
                    b2:c2:b9:ac:45:80:f5:b4:c2:1b:83:6c:cd:b2:62:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A1:43:A5:A9:52:CD:78:91:11:40:E1:7B:E5:7A:2D:11:47:3E:94
            X509v3 Authority Key Identifier:
                keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:c0:6d:81:fb:1e:17:bf:27:ae:0e:44:d4:a6:14:c1:84:
         5a:f4:6d:f1:5e:71:4e:21:d3:2c:72:6c:4e:40:4a:e9:a2:a1:
         74:1c:3a:58:aa:ba:30:02:87:ba:59:be:2e:ab:f9:b2:73:4a:
         71:2e:e8:ab:cc:03:d3:26:b5:68:99:c2:65:f0:6c:8e:ca:ce:
         8e:e9:ce:43:c3:db:54:db:d1:24:5d:b0:03:9d:ec:c4:c7:f4:
         cb:7f:fe:8e:1e:b8:bb:3f:7d:e9:a9:b1:41:e2:a5:47:a4:a9:
         6c:ee:5c:b1:d4:41:fa:04:05:34:33:14:62:ba:85:f8:f7:ca:
         34:ac:49:24:2e:56:de:d3:23:03:95:5e:08:54:8f:33:9b:fc:
         2a:b5:9b:42:5a:95:4d:fc:df:4f:f5:93:10:fe:39:67:de:95:
         73:fe:54:f3:5a:50:5b:91:1d:0f:d1:4f:7b:35:6d:a2:9e:e2:
         f1:40:5a:7f:b7:5b:f2:9c:e6:83:4f:1d:c9:19:05:27:b6:db:
         29:15:38:34:3a:ca:6d:71:6f:dc:bc:89:f1:92:02:1e:b1:0d:
         c6:04:bd:7b:99:97:3f:a3:b2:48:52:ec:38:a4:ec:1f:f3:a7:
         c6:df:cf:74:40:ae:b9:ef:a4:7a:d3:57:7d:07:1e:d8:dd:09:
         16:21:72:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbDrVFoL+6BQUn0b/cRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMDJhYTlmYTQ1ZmM5N2JkYjJlNmRjOGZjMGE3ZjAzNzFj
ODRkZTkwHhcNMjUwNDEzMTAwMjI2WhcNMjUwNDE0MTAwMjI2WjAzMTEwLwYDVQQD
EyhkY2ExNDNhNWE5NTJjZDc4OTExMTQwZTE3YmU1N2EyZDExNDczZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoeNhUJWLaZTfElJV0eGyPCe2kHE
5PFTvIZ8Zsui7acOyYXynjm484fouP3nuZmrxSxnDm0FHGPLJvSlVj27lXBlnWkh
XswwFr7+8pelaDy2eKRAIklrVSmfOHtkdJhaXvSqGxrdReLeNCZrWZOEIPqqlu75
KFmuhWLZj0cdhubsgzFaO3ofY1LB3GKWuM7eh9oFR1DDOwk1hPBKk29mHbiogHLh
jSGZEw18fToVsiEXI1zVuBgD7Nt21Ke6/nm7XOsU3u52wxGWjWRjva5Fl7uz1tGT
ZXVQdtAa4SHFgXkE61BKgbzi7yYZjy2AVC2ywrmsRYD1tMIbg2zNsmK0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyhQ6WpUs14kRFA4Xvlei0RRz6UMB8GA1UdIwQY
MBaAFLsCqp+kX8l72y5tyPwKfwNxyE3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQt
YWMxODNhOWFkZWIxLzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQtYWMxODNhOWFkZWIx
LzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrHAbYH7
Hhe/J64ORNSmFMGEWvRt8V5xTiHTLHJsTkBK6aKhdBw6WKq6MAKHulm+Lqv5snNK
cS7oq8wD0ya1aJnCZfBsjsrOjunOQ8PbVNvRJF2wA53sxMf0y3/+jh64uz996amx
QeKlR6SpbO5csdRB+gQFNDMUYrqF+PfKNKxJJC5W3tMjA5VeCFSPM5v8KrWbQlqV
TfzfT/WTEP45Z96Vc/5U81pQW5EdD9FPezVtop7i8UBaf7db8pzmg08dyRkFJ7bb
KRU4NDrKbXFv3LyJ8ZICHrENxgS9e5mXP6OySFLsOKTsH/Onxt/PdECuue+ketNX
fQce2N0JFiFyeg==
-----END CERTIFICATE-----