Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
File:                     Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json)
Hash identifier:          tO5Yc5s0bixFzXx47+EVxPFl+dG6UeS6JWUorPUTlhc=
Subject key identifier:   96:81:E2:4C:69:3F:1D:42:CE:E2:97:8E:31:8A:18:63:40:68:D0:CA
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Certificate issuer:       /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial:       0194BC3C6D06CF9070617BB6701C32E268F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
Manifest number:          1457
Signing time:             Fri 31 Jan 2025 12:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:04 +0000
Files and hashes:         1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=)
                          2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=)
                          3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=)
                          4: 7idUuv0EXo6JR_OGSzIShJ9UoSA.roa (hash: aZlW8lszwRkMGG5gCDnCD/32X330P7BpES+2uAiCzK8=)
                          5: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=)
                          6: BFNHxMvu6o_pd190MA5kHo9K38o.roa (hash: FcPSU/d4/c62liqKr9vyijfDqdlxWMulLIte1dKOTFI=)
                          7: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=)
                          8: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: l6CU2qkvhhrJE6Fr3n6Ik07cng8cQVfFa6ry76OUdiM=)
                          9: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=)
                          10: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=)
                          11: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=)
                          12: bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa (hash: jmPCp6yXzxLJDYKrtXi4j0Nqwi74mWH6TllKsaF2WqU=)
                          13: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=)
                          14: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=)
                          15: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=)
                          16: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6d:06:cf:90:70:61:7b:b6:70:1c:32:e2:68:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
        Validity
            Not Before: Jan 31 12:01:04 2025 GMT
            Not After : Feb  1 12:01:04 2025 GMT
        Subject: CN=9681e24c693f1d42cee2978e318a18634068d0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:3d:2a:96:89:68:20:15:08:62:97:fd:4c:
                    38:97:d3:aa:61:c2:70:16:da:db:9d:fc:e3:75:25:
                    33:56:6a:b9:6c:2e:d1:27:27:cd:6f:d6:df:07:d5:
                    be:b5:a2:01:7d:9c:0d:5c:8b:a5:2b:cf:c9:d1:9b:
                    45:2f:d7:b7:5e:c1:1d:85:f4:cd:97:b4:23:6a:dc:
                    7e:f0:0b:1c:41:8b:d7:c1:05:b7:08:7b:e4:fc:10:
                    c0:f9:66:e9:d6:55:8a:9e:6f:c7:09:b6:7e:ef:10:
                    7b:d4:ca:a2:b4:9c:c7:84:64:03:48:b5:dd:af:50:
                    cc:f2:0a:61:e3:06:b7:f9:de:dd:5b:06:3a:d3:07:
                    df:53:b3:ac:14:ae:e3:91:03:68:06:d0:b7:f2:2d:
                    28:a2:08:e2:a1:87:2a:22:77:d5:46:85:2c:52:10:
                    ee:e6:7a:2f:ce:3c:27:a1:90:84:a5:e6:43:2f:02:
                    22:e3:df:cb:f8:6d:b9:f0:ff:6f:21:42:74:c3:79:
                    ff:b3:e6:fb:5d:5c:2c:33:43:7f:3c:7a:f9:a5:25:
                    eb:3a:a5:ae:42:18:47:17:ee:95:80:6d:4e:6a:94:
                    eb:ee:7f:43:3c:ef:e5:a9:2b:0e:ae:d2:de:e9:7c:
                    2e:ae:b6:e8:5b:ff:0d:49:20:b5:80:11:3e:20:0f:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:E2:4C:69:3F:1D:42:CE:E2:97:8E:31:8A:18:63:40:68:D0:CA
            X509v3 Authority Key Identifier:
                keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:10:e8:eb:6d:96:4d:e5:6c:b0:24:ad:7a:bd:28:9c:41:
         50:ea:19:a3:36:0a:f0:d2:63:19:70:9a:59:00:cb:5f:2f:73:
         3f:75:69:b1:de:4a:ad:8c:91:35:4b:f3:16:5b:16:ab:0e:87:
         35:34:1d:23:03:f7:bd:d4:6d:02:7e:5f:2f:77:39:36:15:42:
         e6:b5:75:7a:da:fd:2a:3b:86:41:f6:9f:ee:d6:3b:cd:78:c0:
         6d:7a:66:5e:5e:f2:82:79:4a:c9:cf:ee:0e:6e:38:e9:50:54:
         83:4a:6c:30:0b:b5:53:3b:b6:1b:ef:d1:fa:94:d8:f5:e5:25:
         11:21:e5:69:e7:f6:ca:cb:a3:54:62:31:f6:ed:b9:a3:c1:1d:
         a5:e6:ac:4f:0f:77:e5:69:cb:e1:68:aa:cf:5b:3a:e2:18:36:
         11:8c:57:3b:b3:6b:ec:25:50:37:bf:8e:16:4d:2b:dd:9f:c9:
         38:2c:24:e0:2f:c1:3a:a3:a6:f7:f2:a3:47:55:46:02:29:c4:
         18:7f:d8:25:d6:3f:8b:fd:64:ca:04:9d:9d:a4:e4:34:ef:74:
         c1:41:fe:4e:0e:b9:37:a1:28:17:b9:22:65:38:85:7c:d0:15:
         29:e7:e8:6d:a1:2b:94:7f:1a:7f:89:0f:30:ac:6e:06:39:57:
         cd:5c:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:38 2025 by rpki-client