Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File:                     Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier:          +aroFG+elmpmHTIo3pp7oRAOtCejfDNL8ptPkbbwE5o=
Subject key identifier:   C3:2A:DF:4B:26:0F:A6:F7:AF:C8:B2:A3:46:92:D9:B8:30:31:DF:4F
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer:       /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial:       0194BD17FA46FC55BF488D65A8DEB551328D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number:          133D
Signing time:             Fri 31 Jan 2025 16:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:52 +0000
Files and hashes:         1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: DAoImLdcMthsVXZyWekJghRiuTEMPLN0tIgRLnTc/eU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:fa:46:fc:55:bf:48:8d:65:a8:de:b5:51:32:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
        Validity
            Not Before: Jan 31 16:00:52 2025 GMT
            Not After : Feb  1 16:00:52 2025 GMT
        Subject: CN=c32adf4b260fa6f7afc8b2a34692d9b83031df4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:ec:ce:e5:5a:5b:0c:02:53:7d:c5:9d:44:
                    3a:5f:3c:1a:16:9f:5e:eb:e8:6e:bf:ee:16:4e:a3:
                    6f:0b:aa:f9:13:d8:30:ed:46:6c:a9:f7:91:69:c6:
                    24:2b:62:d8:a8:03:a6:32:b3:8d:b5:c1:1a:1b:b0:
                    31:91:7e:bf:ea:b5:5d:07:e8:f4:fc:59:4a:52:89:
                    0e:03:c2:15:fe:be:e4:82:29:a0:d4:a1:90:84:ff:
                    38:d6:1d:a9:a6:ad:df:74:b3:87:38:3e:22:69:4f:
                    e0:be:46:d2:5d:98:8e:80:ed:92:49:eb:b7:5d:88:
                    b2:ea:ac:68:3d:59:a6:08:fb:f3:74:be:b9:db:bf:
                    38:4e:7b:94:d1:a2:64:3d:26:d6:cf:f3:59:17:bf:
                    4d:17:c0:28:85:67:b0:c1:23:36:3b:96:f2:ab:9a:
                    58:f3:52:c5:93:3b:d5:13:ab:ee:b3:c3:19:f1:64:
                    4f:fb:80:45:ee:58:40:47:ad:87:bc:97:76:9b:3d:
                    6b:d1:dd:cd:f6:a8:ec:1c:b7:70:11:b9:32:a1:f7:
                    65:68:04:51:eb:c4:33:b2:8c:55:5f:66:8a:0c:2d:
                    45:f1:41:9d:36:72:c4:2f:66:25:fe:c3:71:47:e5:
                    2d:09:02:b7:37:f0:b3:46:86:6b:da:00:e1:62:d0:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:DF:4B:26:0F:A6:F7:AF:C8:B2:A3:46:92:D9:B8:30:31:DF:4F
            X509v3 Authority Key Identifier:
                keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ed:a7:a9:a9:02:cb:6d:df:df:f7:99:37:6a:b4:a9:e7:c9:
         3d:87:0b:6a:df:d8:99:2f:dd:27:11:f5:89:ba:fa:e3:6e:a0:
         31:a4:f0:18:39:d5:d0:67:b7:38:c4:7a:ba:c5:ae:9b:27:e4:
         31:54:85:6a:c0:e0:8b:4c:36:62:40:32:55:af:4f:7d:dd:a5:
         e4:d6:27:1e:3c:c4:bb:14:24:65:42:8d:60:39:05:00:da:39:
         ec:c6:31:81:3e:2f:61:fd:d3:62:4a:78:fc:09:22:ef:72:27:
         65:4a:ab:b0:b7:2b:00:fb:00:08:f7:be:9c:a3:8d:65:fa:84:
         2e:a5:67:31:83:45:8b:9d:4a:58:06:e0:ec:42:63:a9:f8:2d:
         20:e3:23:d6:c3:b5:d8:07:e0:cf:41:c1:66:09:84:63:df:11:
         1b:5e:d0:6c:0c:b2:7e:e9:04:7a:7a:4e:7b:d7:22:d7:28:69:
         f0:8b:6f:e6:0a:51:5e:ff:82:89:80:fb:bc:6e:91:c0:fb:b7:
         32:57:1c:44:ca:16:14:9e:2a:0e:0f:c0:e1:72:48:44:dc:8c:
         a2:8c:3c:d7:df:47:ef:c4:59:49:c0:9b:1c:d5:51:2f:56:27:
         40:46:d1:5f:b3:77:a5:e8:f6:a8:7c:7a:0a:1b:80:f0:b4:18:
         80:22:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:11 2025 by rpki-client