Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          xapHOh6Dolzcqta9UOMGIvkb4BL8/7nT3A3AuiGV0yU=
Subject key identifier:   7C:A9:1B:86:7D:0D:2F:E1:3F:80:51:DA:C7:68:1D:16:CE:2F:F3:7C
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       0194BD17898FBA46835113355F2A7ECC1525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (hash: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=)
                          2: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: eNjRubn8k0N387f4DqvrubCuYcbdidGvlywIJwjgxgI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:89:8f:ba:46:83:51:13:35:5f:2a:7e:cc:15:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=7ca91b867d0d2fe13f8051dac7681d16ce2ff37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:fa:97:58:00:f9:dd:2b:bc:24:c1:e7:b2:
                    20:5b:db:0c:4b:6d:2c:5a:1d:98:91:38:dc:36:5f:
                    c5:73:dc:a7:f9:ed:16:c3:34:6c:1c:6d:8a:0f:2d:
                    69:4f:b1:d1:d3:b7:56:ec:fe:9a:61:49:21:23:84:
                    d3:86:ca:5c:ec:71:87:8d:25:fa:40:be:2f:e5:ab:
                    34:05:69:56:0e:7b:44:59:8d:6c:b5:ba:da:fd:79:
                    55:91:6f:16:60:5e:33:5d:b9:07:0b:11:d2:be:11:
                    7a:60:0d:21:89:dd:11:15:4a:d7:f3:ee:ff:e9:c5:
                    f3:65:0d:81:5b:09:7c:2f:78:e1:27:89:b9:91:68:
                    01:70:47:40:99:87:8d:13:88:99:fa:0e:0b:0a:71:
                    50:99:70:ee:48:17:c2:2b:8e:04:59:ce:d7:25:19:
                    12:c5:4a:ad:a6:dc:4a:4e:ed:d4:10:97:6d:42:7b:
                    47:6f:ee:96:19:d5:28:60:44:79:c2:fc:5a:89:7a:
                    f6:90:b1:6f:a3:7f:11:42:2e:d5:10:63:f1:b6:20:
                    2a:20:c5:7f:36:3d:b3:b5:e8:2a:6f:af:34:30:22:
                    64:bd:85:c0:83:7c:12:72:9e:99:74:c7:58:dd:7d:
                    e4:f2:c0:f6:66:a8:78:38:85:ad:07:1a:e1:84:e2:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A9:1B:86:7D:0D:2F:E1:3F:80:51:DA:C7:68:1D:16:CE:2F:F3:7C
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fe:29:d4:5c:25:90:49:90:06:32:87:8a:2d:f4:93:3b:79:
         04:96:bc:62:ac:33:d4:e3:c4:d8:39:da:a1:85:44:85:9a:74:
         e9:5c:8a:83:47:ad:fb:66:cf:0f:82:31:6b:6c:f2:9b:40:88:
         e0:81:f5:d8:de:a9:1f:18:79:e8:c1:4e:5c:8f:99:94:41:86:
         f0:6f:18:0e:c8:98:1d:4a:f3:47:2d:7e:64:5a:40:29:b5:b1:
         81:7a:4b:f8:20:db:fa:52:2d:df:f6:92:c9:59:11:38:bb:c8:
         7f:53:b5:21:93:8f:62:17:83:d0:8e:3c:81:ad:f5:b9:fc:1e:
         19:ae:64:78:8e:2a:9e:f3:e6:00:8b:dd:9e:25:d5:a3:91:eb:
         eb:91:75:5e:96:1c:61:3f:13:46:b0:2c:af:85:cc:07:73:b1:
         c0:60:4a:63:57:15:ac:b2:cb:b5:b2:52:22:f1:fe:d8:cf:ad:
         07:b8:29:d1:11:03:3e:72:60:f5:a9:03:78:c9:16:2f:d6:27:
         b2:1a:93:ec:03:95:6a:2a:e5:db:1c:bd:9b:2e:33:d9:2e:d1:
         43:bc:02:df:ed:db:13:18:c3:23:2d:6b:53:20:32:3f:80:fa:
         8f:67:1b:18:90:bb:ab:23:d1:0e:e4:05:96:c9:15:a8:3c:2b:
         93:2e:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:35 2025 by rpki-client