Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File:                     hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier:          3DkBjeivzojarLJpYfiDnk7i5M5FmhoPs96R0saxv0I=
Subject key identifier:   27:7D:6B:A0:63:14:71:83:28:3F:9F:AC:63:2A:D7:70:81:5B:B6:B5
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer:       /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial:       0194BD179BF6B449A70614527D9723BCEC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number:          1045
Signing time:             Fri 31 Jan 2025 16:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:28 +0000
Files and hashes:         1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: xL5+kKhDAVLtc7pBBXu3n4KYLEbWqEOiUS9NaKaTCWs=)
                          2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:9b:f6:b4:49:a7:06:14:52:7d:97:23:bc:ec:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
        Validity
            Not Before: Jan 31 16:00:28 2025 GMT
            Not After : Feb  1 16:00:28 2025 GMT
        Subject: CN=277d6ba063147183283f9fac632ad770815bb6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:9d:a4:8f:f4:c3:fb:09:39:80:77:ba:fd:
                    be:f0:76:bd:3d:0a:40:23:5b:0f:a3:42:11:52:ce:
                    7f:47:0d:44:37:dd:c9:98:bf:09:dc:14:25:c0:76:
                    a2:64:f0:a6:5c:a1:86:ee:8b:b6:89:5e:af:bf:3d:
                    5c:22:4d:38:b4:b5:fe:5d:8d:b6:9f:9c:d6:2e:13:
                    46:0a:5d:69:89:f8:d1:48:3f:6e:29:e8:05:17:15:
                    6b:ef:8d:51:ef:54:76:8e:00:ed:98:dd:a6:86:2d:
                    2f:4e:da:32:b6:87:bd:9d:78:f5:3a:f2:e5:82:eb:
                    a9:e1:c2:7f:f8:14:46:22:33:9a:ba:aa:c9:31:c0:
                    c6:24:ea:da:1c:e1:de:eb:bb:c9:34:3a:f3:7d:8e:
                    b9:a7:96:2b:a6:c9:51:cb:59:44:ea:bc:d9:ec:98:
                    69:01:f2:5b:01:62:ab:fb:7e:d7:a7:56:dd:23:60:
                    fe:cd:0c:15:85:7d:1d:5e:8a:8e:aa:fc:8b:01:b6:
                    09:f5:19:6f:cf:b0:0d:2b:bc:1d:fb:6c:78:3d:e9:
                    0e:9a:f3:c2:2d:20:5f:76:c1:02:9f:ea:69:69:6c:
                    20:01:33:85:e4:95:01:1c:9e:09:3c:f8:71:d8:88:
                    1c:62:ca:89:d3:e9:fa:eb:d8:0f:ca:dd:9a:55:15:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7D:6B:A0:63:14:71:83:28:3F:9F:AC:63:2A:D7:70:81:5B:B6:B5
            X509v3 Authority Key Identifier:
                keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:c3:4c:cd:25:fc:9a:2b:58:6b:7b:77:0f:91:79:33:46:
         a7:5d:c8:60:38:c1:1f:ca:64:e7:9c:b4:1f:fe:ea:87:3b:f6:
         00:2b:a1:76:1e:18:0a:22:28:e0:f0:c6:36:49:67:5a:b3:ea:
         b3:23:97:b0:d6:2c:43:97:af:e6:6b:b7:03:b3:c9:26:2c:3d:
         78:61:df:31:c1:ad:d3:17:61:61:ce:74:35:3e:00:60:c3:9b:
         bf:b9:f8:e9:7d:3c:cd:5d:41:2a:f7:b2:66:3e:78:52:87:10:
         df:f9:5c:89:68:cd:4e:12:ba:ee:d9:5a:68:23:aa:10:e5:c4:
         3e:8c:7e:e9:b0:78:b2:d1:32:d2:0f:41:4d:d9:bb:24:5b:a7:
         d0:ff:8c:f9:1c:69:04:2e:d0:fb:59:e9:9e:d4:d7:cf:2b:60:
         0b:28:1a:6e:c0:65:45:da:cc:f4:c1:b6:20:10:61:af:46:2b:
         fe:04:7d:5d:2d:27:bd:33:47:a2:48:4e:e9:ae:1f:90:85:6f:
         26:f5:9b:40:85:77:9c:8e:2d:da:03:72:b1:c4:ec:9f:95:b6:
         2e:9f:7c:ca:4c:28:28:54:7d:28:55:e5:3f:52:7e:5b:fd:55:
         ca:3f:7f:c4:4a:1c:99:44:2d:8a:d2:55:b1:49:79:86:36:e6:
         36:c7:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:34 2025 by rpki-client