Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File:                     hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier:          gClyjfRNiOa8iSCWJVgoxlKzEKj8nwaMhMqQba6TJhs=
Subject key identifier:   B1:50:70:69:DC:32:55:DE:4A:71:37:FA:8E:82:8A:52:DE:2F:E7:65
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer:       /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial:       0194BCAA42BDC457C10948979ED7C5D2D3FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number:          0F56
Signing time:             Fri 31 Jan 2025 14:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:02 +0000
Files and hashes:         1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
                          2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: MtSJV/ILRD24JgZUz89a2loiX7ws6a8ZJW8euZdAQWU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:42:bd:c4:57:c1:09:48:97:9e:d7:c5:d2:d3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
        Validity
            Not Before: Jan 31 14:01:02 2025 GMT
            Not After : Feb  1 14:01:02 2025 GMT
        Subject: CN=b1507069dc3255de4a7137fa8e828a52de2fe765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:40:6b:08:a0:b6:25:22:38:d8:0e:fe:d8:
                    42:07:96:40:2a:27:aa:3e:8e:89:94:a5:d4:c5:fb:
                    8c:a3:c8:31:a1:04:7c:af:15:6e:42:2f:8c:bf:2a:
                    46:94:ec:ec:80:05:1f:79:bf:0d:cb:66:0d:2f:9a:
                    23:2d:83:d1:e5:f4:6e:b0:90:72:60:f5:e6:2c:22:
                    ae:b9:f4:98:6a:fa:19:1b:fa:2d:ae:92:f2:13:aa:
                    e2:99:8e:c1:23:51:57:00:91:23:f3:c1:22:5d:b6:
                    a7:78:b1:59:11:91:a3:00:cf:34:a9:ee:69:a0:49:
                    01:2e:73:d6:c6:30:8d:22:06:ad:fc:79:01:75:c4:
                    2d:b4:72:e3:ee:1f:8b:59:04:ea:c7:a6:02:83:4d:
                    70:1d:34:c6:7a:8f:91:c5:86:a8:1d:de:b3:b9:3c:
                    a1:33:ae:84:f1:b2:09:ef:06:36:b1:f9:fc:1c:f2:
                    b6:3d:a1:67:56:96:02:71:67:13:0b:08:f7:a9:9a:
                    62:1f:e1:a9:09:75:84:4b:28:1f:1c:3c:fc:b2:7d:
                    f5:cc:c7:02:3f:21:81:de:8e:7f:1f:bf:b9:21:f2:
                    2b:63:d0:3f:42:13:f0:70:d0:9e:d2:46:e0:b3:df:
                    82:d1:91:b3:ef:be:ed:57:01:0a:f1:00:de:b6:eb:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:70:69:DC:32:55:DE:4A:71:37:FA:8E:82:8A:52:DE:2F:E7:65
            X509v3 Authority Key Identifier:
                keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:25:5c:09:f9:c2:34:86:27:80:c0:ee:fe:57:58:ab:6d:5f:
         7c:33:2b:03:70:16:0e:a7:6e:16:00:6b:09:60:27:da:67:b3:
         f1:67:42:d0:6b:f8:fe:0b:6b:10:73:73:cd:d5:bf:3e:09:56:
         b6:e9:ea:e4:59:5f:5c:12:7c:09:c8:19:8e:68:ff:98:6e:73:
         99:70:82:90:b5:80:c3:e2:a6:9b:f6:01:a1:ba:a0:51:57:a8:
         44:55:97:d6:71:27:28:39:06:23:9e:fd:01:ba:a5:36:1a:a2:
         cd:bc:03:54:de:9a:0d:f1:cd:fe:40:8d:8a:2c:04:69:83:6d:
         84:a0:56:67:59:f2:ea:42:26:51:9a:fe:74:a8:74:17:15:ba:
         a6:85:ec:b6:64:5d:9e:57:3e:fe:d6:09:a5:e5:10:f0:35:f5:
         e6:71:8e:30:76:20:fe:49:91:1b:60:4e:10:97:f4:15:b5:88:
         bb:1c:44:df:32:8e:67:5f:e9:a6:c4:13:40:ec:db:0a:d1:1d:
         bc:07:6a:14:e7:f6:44:e6:75:04:c7:31:98:b4:fe:cb:94:20:
         f4:8f:14:75:c3:7d:b1:61:19:42:32:1f:95:f4:07:3d:32:3e:
         2c:de:11:7c:21:a9:06:b5:b7:47:a8:4e:32:b1:ff:06:52:59:
         06:a5:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:53 2025 by rpki-client