Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File:                     hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier:          0ULqDHXn+uEFM3LN/kYtz1+2L/rjEPRJxGEKLWyi5L8=
Subject key identifier:   70:26:02:EA:4F:0E:F0:40:69:FA:FA:4C:C8:F1:CB:9E:1B:62:BA:1B
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer:       /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial:       0194BCE08062C30F343FD99A668272B63760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number:          0524
Signing time:             Fri 31 Jan 2025 15:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:17 +0000
Files and hashes:         1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: +bFZ2WmkLRfQgR8S5qfOqZTIKJOrybl3pc3+bQWAYKE=)
                          2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:80:62:c3:0f:34:3f:d9:9a:66:82:72:b6:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
        Validity
            Not Before: Jan 31 15:00:17 2025 GMT
            Not After : Feb  1 15:00:17 2025 GMT
        Subject: CN=702602ea4f0ef04069fafa4cc8f1cb9e1b62ba1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:1a:02:e1:39:54:bd:df:72:22:af:a0:6c:
                    e9:69:25:93:71:72:80:52:ac:9c:ff:49:1b:46:0e:
                    c1:8f:37:6a:97:e4:b9:5d:ff:e0:76:7e:a0:2f:c5:
                    00:d6:65:c3:72:dc:53:fb:90:6c:5f:eb:3f:68:5f:
                    b2:06:fc:e9:cb:cd:2d:aa:1c:64:c8:b4:d4:83:8a:
                    bc:91:4f:3c:ba:80:69:ce:2f:e3:c8:8e:c8:ac:37:
                    cb:5c:7c:01:ed:f1:12:20:3b:92:b7:36:83:49:87:
                    b0:cf:42:39:14:7c:66:e3:f3:00:69:ee:ca:f0:84:
                    72:e5:74:98:bc:af:ef:8c:f6:ac:a5:b3:9a:28:ca:
                    23:18:00:20:e5:b8:7f:d6:1f:c7:8d:09:53:af:f9:
                    43:4d:8b:4a:c3:e7:23:8c:d9:07:fc:09:94:5d:d1:
                    91:d0:53:ec:7f:e9:46:f7:ec:ed:23:d3:3e:bc:38:
                    c7:ea:ca:5c:d6:7d:c3:cd:18:0b:ec:9a:86:78:20:
                    79:9e:74:72:be:f0:b6:19:3f:ac:b5:68:82:44:7d:
                    e7:25:7d:a2:80:5e:e9:b5:8f:70:7c:c0:73:b7:02:
                    be:ee:de:ff:78:19:c7:68:2a:4b:a9:86:bd:b5:2c:
                    a3:7e:60:c8:f5:36:1d:dc:3f:77:e3:20:0f:cf:5c:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:02:EA:4F:0E:F0:40:69:FA:FA:4C:C8:F1:CB:9E:1B:62:BA:1B
            X509v3 Authority Key Identifier:
                keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:49:a4:b1:c8:5f:32:85:e3:f1:a9:01:5d:2c:19:d3:6d:7c:
         ba:ae:0f:a3:44:e2:cc:ef:ed:4b:3f:39:8f:22:d4:a0:68:cd:
         ba:33:9d:9f:a2:89:8f:02:26:1c:d3:96:da:3b:6c:f2:0c:64:
         83:c2:2d:a2:00:65:5a:1e:f5:c5:28:86:9c:9f:f0:bc:f4:38:
         ff:f0:b2:0e:8e:be:61:fc:00:12:9e:63:af:46:3a:3f:97:c7:
         97:2e:00:35:50:68:cb:3d:cd:83:34:37:97:b0:ed:82:5c:9a:
         d4:c5:fc:7a:67:dc:a3:47:c8:3f:ab:6c:1b:a3:2a:7f:ad:da:
         05:7e:78:35:54:32:6f:8e:b0:6e:98:34:d6:bb:7e:49:80:cc:
         e4:16:57:35:83:25:2a:02:d4:a2:f2:83:d2:4f:07:2f:ba:e6:
         f6:bb:36:00:ce:61:64:25:5e:c9:b3:26:41:44:c4:55:c0:01:
         9d:2b:2f:d8:e7:5f:81:ef:11:b4:c0:cd:76:2d:26:ce:e4:f6:
         e8:f4:fb:19:22:24:b0:f9:ae:82:76:20:df:8b:62:ac:df:1f:
         eb:1c:dd:20:84:d3:10:68:e2:8f:0f:65:22:0e:80:d1:70:52:
         38:9e:69:b8:75:17:9a:b8:fa:66:af:ea:b7:d8:be:19:d1:68:
         c6:1b:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:15 2025 by rpki-client