Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          UAIbRZLR6hy3feivQ7mCuOwp4co83UqZiqq6MvMds30=
Subject key identifier:   92:C9:74:38:5C:25:83:1E:B5:76:3F:7B:38:2D:15:D5:16:3D:FC:08
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       0194BC3C1D3229C703AA0E44CC0E3CB0FB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          10FF
Signing time:             Fri 31 Jan 2025 12:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:43 +0000
Files and hashes:         1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
                          2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: GcPPYOAHFyL6qOv4brD38tnOdqiBNuEQXLMn6Ga/qTE=)
                          3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
                          4: HiXwFWaPzRWDb6Zauf5Z5EdAs3E.roa (hash: 74lujDzOZ3dVJtH+CV4yLBEU59EeNeO0W4GkJWf9zl0=)
                          5: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
                          6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
                          7: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (hash: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=)
                          8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:1d:32:29:c7:03:aa:0e:44:cc:0e:3c:b0:fb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Jan 31 12:00:43 2025 GMT
            Not After : Feb  1 12:00:43 2025 GMT
        Subject: CN=92c974385c25831eb5763f7b382d15d5163dfc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:19:e2:c4:32:35:bb:be:49:44:38:58:d6:
                    b4:08:ff:47:39:ff:5c:93:6c:5b:be:b3:83:d6:99:
                    3b:44:55:d5:e5:10:d3:85:40:13:54:0d:d7:a8:ac:
                    94:d1:e9:00:b7:1d:bd:ba:20:e7:39:a0:c1:18:5c:
                    ee:81:fd:d9:bb:b9:1d:89:14:1e:29:00:61:2f:c8:
                    d0:01:71:fd:72:0e:65:54:c9:60:90:72:b3:12:21:
                    36:48:52:2f:a7:94:f7:8f:53:b6:91:3d:15:69:af:
                    d6:c6:ac:82:dc:19:50:ba:60:df:88:b5:c6:9a:36:
                    66:f2:f6:75:12:6b:d3:f3:9b:d4:82:20:b3:e8:6e:
                    bf:aa:74:a6:77:c4:00:46:10:d6:20:0c:68:5a:e8:
                    27:a9:22:76:c0:ba:04:31:63:fb:11:5f:07:a5:69:
                    9f:f1:e7:2e:08:bc:d4:72:33:92:ec:13:e7:72:53:
                    c3:73:6d:ac:5d:66:d1:02:d8:a0:8f:9b:0c:83:44:
                    5f:8d:fc:fa:b3:4c:2c:97:24:a9:ae:18:f8:22:63:
                    da:9b:fd:fb:e3:07:44:a0:33:10:df:b4:43:c3:43:
                    c0:66:44:fc:9e:9d:51:3f:3c:82:55:69:15:ad:d5:
                    9d:33:6f:59:d5:bd:5b:c2:1c:fc:2c:8f:8a:b5:bf:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:74:38:5C:25:83:1E:B5:76:3F:7B:38:2D:15:D5:16:3D:FC:08
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:00:cd:95:14:b9:a0:1f:be:70:97:59:2f:d9:4e:f2:a1:
         49:8b:7a:f5:8e:2d:61:18:6f:df:72:08:a9:5f:c5:01:f9:85:
         3b:8d:3d:50:c5:ba:82:09:df:41:01:20:dc:37:7b:d5:e1:a7:
         71:7d:68:b5:f1:7e:6a:aa:12:96:32:23:f9:b5:17:e9:74:f1:
         77:b7:a2:9a:d0:81:57:05:50:67:0f:f2:69:91:68:1a:7a:c2:
         54:80:9f:89:e2:38:ab:51:3d:16:cf:f5:bc:cd:e2:de:8e:28:
         81:e3:73:e8:41:97:10:9e:bc:7c:bb:a6:49:ab:8f:8d:d3:39:
         03:a8:ca:38:f6:8e:c7:c4:75:96:9f:a3:d1:fc:7d:99:0e:54:
         ae:30:d4:9e:c5:e7:ab:cf:36:5d:d3:11:36:4d:09:42:6a:5b:
         a7:91:0c:9d:56:4f:c7:99:2f:81:06:a5:a5:ca:4e:b9:47:93:
         8d:b5:70:7c:d6:1f:2b:a0:42:af:67:ce:c5:a1:48:63:4c:43:
         fd:30:e5:f2:bf:97:de:6f:38:d5:9a:50:0c:39:7a:28:2c:7a:
         d5:29:ba:16:46:10:20:11:1c:9a:a0:af:54:0a:c1:38:d1:1a:
         12:09:61:d9:e4:ec:b2:86:06:be:3b:5c:12:d7:d0:a9:86:db:
         0b:00:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:17 2025 by rpki-client