Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File:                     HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier:          c/nKMiNRahw4NDlMBP8bz4OqTpHqJmcDHmzojEqAZgI=
Subject key identifier:   D3:B3:B8:B6:8A:88:17:00:5F:4C:C4:67:80:3C:11:4B:F0:31:A0:EC
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer:       /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial:       0194BBCE68001B45D68721DDD893DCA22D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number:          0761
Signing time:             Fri 31 Jan 2025 10:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:53 +0000
Files and hashes:         1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: yVcnRZtGB/u5ik1TepDHvEZ7rq1k+P9y73iV7mhz5WI=)
                          2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:68:00:1b:45:d6:87:21:dd:d8:93:dc:a2:2d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
        Validity
            Not Before: Jan 31 10:00:53 2025 GMT
            Not After : Feb  1 10:00:53 2025 GMT
        Subject: CN=d3b3b8b68a8817005f4cc467803c114bf031a0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:c3:66:86:cb:92:f5:7e:28:a5:64:01:24:
                    97:81:c7:94:70:75:0a:5a:b9:6f:d0:ba:77:fa:54:
                    45:41:35:c2:19:b6:b8:6b:9b:49:3f:21:60:eb:b6:
                    40:dc:c5:7b:d3:1b:1d:3a:43:65:d4:cf:b2:6c:be:
                    0e:3d:7d:c4:4f:0f:3b:97:06:aa:8d:4c:11:88:27:
                    39:60:78:2e:01:82:0f:74:20:1d:df:06:3f:90:d7:
                    d1:a4:cb:7f:9c:04:3d:c1:c2:8b:f8:7b:59:d8:c6:
                    ab:ca:b0:9b:6d:fc:eb:0f:5c:9a:1a:9d:4b:17:e0:
                    56:dd:4b:d7:c1:53:45:6b:98:1e:a5:77:e7:77:1b:
                    6a:75:b0:70:35:b2:75:12:41:97:a9:cf:6b:b5:36:
                    98:57:9b:38:0b:46:4c:47:5e:28:e3:12:91:34:d7:
                    7c:a0:3b:16:fd:b4:31:06:34:4b:29:47:de:65:e3:
                    cf:82:4d:fd:30:2d:f8:eb:64:3e:dc:39:a4:5a:6a:
                    9e:a3:24:cc:b5:a5:cf:fb:cc:34:27:14:bf:b9:38:
                    f1:e6:cc:c5:0a:94:55:e9:73:3d:8f:4a:4a:7f:3e:
                    b8:fd:23:8c:93:48:85:ed:22:13:2a:a6:c5:90:db:
                    d0:06:34:c6:b5:ee:11:bc:52:b6:66:d6:f1:90:45:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:B8:B6:8A:88:17:00:5F:4C:C4:67:80:3C:11:4B:F0:31:A0:EC
            X509v3 Authority Key Identifier:
                keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:96:24:88:41:93:1c:92:22:15:cd:db:bf:2c:75:57:f6:
         57:01:f2:55:94:5b:a3:45:df:79:ac:5f:02:26:2f:29:34:9c:
         32:8f:7e:77:df:f3:e6:43:0c:46:ff:ab:8a:2c:67:fd:46:b0:
         bb:ce:4e:83:01:79:7c:21:83:2e:44:b1:d5:d4:d3:2a:c7:2c:
         ef:21:54:c8:83:a8:65:fb:e8:56:fa:81:a3:e5:81:91:6a:49:
         eb:aa:b6:c0:aa:2c:77:aa:fa:6d:3a:26:74:ba:3c:a8:10:a1:
         7f:75:64:26:77:d4:b5:a5:5a:59:ec:ed:71:6d:98:de:16:e9:
         72:4d:0e:ba:30:ed:cb:a9:31:2b:09:70:da:64:8d:d6:a7:d2:
         5d:8e:a3:c1:52:bb:bb:11:70:6a:4a:9b:00:16:47:71:3f:f3:
         5a:7c:52:a2:ee:92:15:80:8a:f0:95:08:5d:a2:85:1a:67:cd:
         ce:fa:e8:0a:f6:82:a0:f5:ef:b1:aa:e8:06:c2:f5:0c:94:77:
         fa:07:05:25:4d:09:75:7c:5f:b4:2c:52:ac:dc:4b:9f:06:f6:
         97:6e:cf:46:b0:4c:6f:e8:49:6d:3f:35:56:ef:23:47:d4:0f:
         2d:b5:bc:62:8c:67:a4:6b:47:e9:cf:aa:c4:83:5c:d6:16:a0:
         66:a5:00:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmgAG0XWhyHd2JPcoi1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjA1M2FhZDZkYzVkNjExNTdlNjczZmQxYTc4ZWVhNjU2
OWU1MzkwHhcNMjUwMTMxMTAwMDUzWhcNMjUwMjAxMTAwMDUzWjAzMTEwLwYDVQQD
EyhkM2IzYjhiNjhhODgxNzAwNWY0Y2M0Njc4MDNjMTE0YmYwMzFhMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDnDZobLkvV+KKVkASSXgceUcHUK
Wrlv0Lp3+lRFQTXCGba4a5tJPyFg67ZA3MV70xsdOkNl1M+ybL4OPX3ETw87lwaq
jUwRiCc5YHguAYIPdCAd3wY/kNfRpMt/nAQ9wcKL+HtZ2MaryrCbbfzrD1yaGp1L
F+BW3UvXwVNFa5gepXfndxtqdbBwNbJ1EkGXqc9rtTaYV5s4C0ZMR14o4xKRNNd8
oDsW/bQxBjRLKUfeZePPgk39MC3462Q+3DmkWmqeoyTMtaXP+8w0JxS/uTjx5szF
CpRV6XM9j0pKfz64/SOMk0iF7SITKqbFkNvQBjTGte4RvFK2ZtbxkEUI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOzuLaKiBcAX0zEZ4A8EUvwMaDsMB8GA1UdIwQY
MBaAFBwgU6rW3F1hFX5nP9GnjuplaeU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hY2E1ZjctNzJmZi00ODIzLWJjNWQt
ZDZiOTlkZjM5ZmQ4LzEvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hY2E1ZjctNzJmZi00ODIzLWJjNWQtZDZiOTlkZjM5ZmQ4
LzEvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOCWJIhB
kxySIhXN278sdVf2VwHyVZRbo0XfeaxfAiYvKTScMo9+d9/z5kMMRv+riixn/Uaw
u85OgwF5fCGDLkSx1dTTKscs7yFUyIOoZfvoVvqBo+WBkWpJ66q2wKosd6r6bTom
dLo8qBChf3VkJnfUtaVaWeztcW2Y3hbpck0OujDty6kxKwlw2mSN1qfSXY6jwVK7
uxFwakqbABZHcT/zWnxSou6SFYCK8JUIXaKFGmfNzvroCvaCoPXvsaroBsL1DJR3
+gcFJU0JdXxftCxSrNxLnwb2l27PRrBMb+hJbT81Vu8jR9QPLbW8YoxnpGtH6c+q
xINc1hagZqUAZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:06 2025 by rpki-client