Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          ghpvVdckzUpTuiC4Sk7gHYm9nGNEYfsMavBsn1IABlA=
Subject key identifier:   D8:1B:2E:5F:3D:89:5F:AE:85:85:08:C4:BE:A9:DF:72:B1:03:3E:E2
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       0194BC3CB282CE7897A26FB8EE4D8481338C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 12:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:21 +0000
Files and hashes:         1: GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa (hash: 49YBW2j0tiBN16/cc6cP9HT+URCIjSHjxZeBvIsvdsc=)
                          2: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: XJ2Kq20LMbI0JWHGuw6NfNEPAMGstX3BWulmRVaqXqk=)
                          3: mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa (hash: 4FwhfGdWmlyBhnx1X+ZJalRnXOeqaX7xZDQnuMN3V5I=)
                          4: qLkvJ0dRmfL0QBHRb9r1vRVUITA.roa (hash: uVLCZ/Z/jxamtxU6+Njb90gPAMuKb8Jw/Ec8/lYETUg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:b2:82:ce:78:97:a2:6f:b8:ee:4d:84:81:33:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Jan 31 12:01:21 2025 GMT
            Not After : Feb  1 12:01:21 2025 GMT
        Subject: CN=d81b2e5f3d895fae858508c4bea9df72b1033ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3d:29:9c:ed:d5:77:f2:c7:ff:7b:55:d8:72:
                    c6:71:10:15:c6:85:ad:ae:f2:b0:b2:af:18:36:c3:
                    f5:36:2b:d8:af:f4:19:44:a4:e0:9b:34:f4:86:ac:
                    4c:52:22:67:8c:99:2b:26:23:0a:5e:83:70:be:42:
                    06:6a:6e:0f:4b:d6:ac:58:fa:30:0b:ef:55:ae:c2:
                    69:f9:20:fa:4b:94:da:5b:84:d7:c1:5d:63:7e:6f:
                    3e:d6:9e:47:e8:13:40:18:9d:bd:fd:93:39:43:ff:
                    99:82:f0:96:02:ad:8a:e9:aa:34:79:10:70:16:f2:
                    e7:ab:91:71:11:eb:da:54:c4:9c:21:bd:72:54:9d:
                    31:79:44:f7:dc:04:19:7b:af:03:1c:85:58:6e:c9:
                    46:a6:83:e5:13:f3:4a:17:c8:75:b6:46:b8:1d:00:
                    44:72:e8:e9:b6:1c:14:ed:84:9c:98:3d:b7:3b:53:
                    44:f8:58:65:37:76:d2:0b:57:37:c9:9b:3c:51:da:
                    80:84:e6:9e:d8:b2:91:fd:b0:3c:41:0c:42:e0:73:
                    c9:1c:33:b3:17:9e:1d:eb:49:0b:ba:7e:40:57:8b:
                    2b:19:e9:e0:26:51:99:c7:0e:41:1e:e4:9a:64:d8:
                    64:1f:d2:b6:fb:f4:d2:01:d0:c9:29:b1:94:3a:90:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1B:2E:5F:3D:89:5F:AE:85:85:08:C4:BE:A9:DF:72:B1:03:3E:E2
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:a4:a4:84:2e:19:69:09:15:74:8b:cb:0e:fe:8b:02:85:
         6d:18:5d:97:be:d0:45:7e:a8:b7:4c:c0:aa:c9:d5:17:ed:df:
         53:45:ce:1b:cc:0d:ec:9a:58:15:bf:04:ec:b3:1a:4d:50:44:
         8c:35:0c:dc:21:94:ce:2d:d3:e1:50:eb:3e:eb:ba:30:c7:2a:
         c3:af:33:70:01:e2:0b:f9:fc:1d:bd:c9:ee:f0:66:36:cd:c0:
         7d:35:47:5d:97:e3:55:5b:c5:47:12:bf:74:67:0a:99:db:cc:
         38:7f:4e:5c:e8:e5:77:b5:67:30:48:74:0b:1f:3a:7c:e9:95:
         b1:4f:15:67:a0:5d:6c:f5:66:30:e9:07:35:d7:e8:ac:14:ae:
         3d:e1:ca:58:76:9b:5b:b6:ef:4d:93:27:ab:62:d1:de:35:11:
         0b:18:c1:42:12:6b:de:e2:37:6c:1a:86:1c:ee:9d:3c:a7:e0:
         2e:af:3e:04:00:21:b2:2e:82:79:36:5e:5a:42:4d:c0:91:a8:
         b5:58:86:11:38:94:a1:9e:42:07:21:b3:fc:b2:23:a9:cd:7a:
         76:d7:2b:39:c7:f0:32:a5:08:78:93:da:c0:58:d1:6e:ad:e4:
         f3:b6:7c:1b:34:df:01:c8:4f:d5:6e:8f:c2:c7:45:07:af:83:
         ed:5e:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----