Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File:                     1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier:          a1o9tYfccJ6ErLv0SHiTr65QCSYBZxwTVSLK5Nem6sw=
Subject key identifier:   DB:44:EA:76:3A:9E:47:E5:34:7B:78:38:B8:0D:57:25:D7:C2:C8:25
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       0194BC72BAB4B20423C54DAD41B6FAE6BFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number:          0552
Signing time:             Fri 31 Jan 2025 13:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:22 +0000
Files and hashes:         1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
                          2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
                          3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 5opSY62DsRGza63MYWq2tVYRTUQFIraUmvorWhORsYM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ba:b4:b2:04:23:c5:4d:ad:41:b6:fa:e6:bf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: Jan 31 13:00:22 2025 GMT
            Not After : Feb  1 13:00:22 2025 GMT
        Subject: CN=db44ea763a9e47e5347b7838b80d5725d7c2c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:8a:46:d4:9f:bf:ff:14:fe:65:65:f2:60:
                    f4:75:3f:26:fd:ef:71:e8:9e:f1:6e:07:be:81:29:
                    7a:24:a2:f4:38:ee:75:fa:d3:55:40:af:69:8d:39:
                    1d:40:49:af:19:62:96:67:e6:2a:30:ab:82:ea:df:
                    4d:18:f4:36:56:a4:aa:d0:b5:4c:00:2c:6b:8c:25:
                    a3:c7:6e:51:f0:5a:c6:a3:e0:23:f5:54:29:33:6c:
                    d3:05:2a:b3:be:27:54:fe:06:c5:42:ff:e7:b3:8f:
                    2b:d4:f7:88:1b:80:f7:35:13:5f:40:06:c9:4c:cf:
                    cf:89:8d:7f:91:b2:8c:ec:6b:97:de:49:76:50:f2:
                    d1:22:ec:95:46:78:bc:a8:4d:8c:27:d8:8e:91:a3:
                    f5:a6:4f:d6:6f:f3:b1:e7:f2:35:cd:2b:97:1b:2e:
                    61:83:81:97:96:6a:a6:b8:92:8d:d2:30:ff:c9:05:
                    91:5f:30:0b:22:b8:34:64:35:79:89:f3:1c:dc:6f:
                    70:6b:b1:b3:62:bc:12:72:ab:6a:fd:69:b2:20:80:
                    2e:2b:c3:e3:99:4c:8b:ec:92:d8:66:17:b4:21:79:
                    4c:0e:4f:2e:43:97:dd:2e:80:52:97:67:47:b2:7d:
                    e8:f9:ec:36:74:6e:7e:41:78:ab:10:9f:e2:8b:fc:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:EA:76:3A:9E:47:E5:34:7B:78:38:B8:0D:57:25:D7:C2:C8:25
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:16:93:54:87:85:f9:9c:b0:bb:28:3d:11:a3:68:98:5a:06:
         ea:92:45:d5:dc:d2:8a:3e:5a:fd:dc:2b:58:02:ea:64:58:92:
         58:e2:f2:6f:da:cb:4f:2f:ab:49:e2:88:95:0d:09:f2:2f:aa:
         dc:d0:5e:48:8b:dc:c9:54:30:36:63:b9:eb:69:88:97:de:29:
         f4:10:34:bf:9c:f8:1c:c7:b5:64:cf:86:18:0a:d5:4a:ad:2f:
         46:08:7a:fd:68:37:ad:a4:7c:01:8b:a6:2f:98:bd:ff:89:da:
         26:a9:d9:fe:da:a8:ab:01:c2:a7:d0:7f:d3:db:48:68:70:15:
         5b:0d:40:6d:6f:b0:d0:5a:46:ab:7a:9b:03:08:df:10:ef:a4:
         46:a1:66:ce:ba:f7:e8:8c:32:46:61:d8:d5:5a:52:cd:71:9a:
         ae:80:1e:cd:bb:9d:c7:90:da:ec:35:4a:be:01:ba:b3:1f:46:
         c7:3b:74:77:5d:5c:2e:e5:06:0e:e5:00:9d:76:57:07:3c:ef:
         a4:f1:52:a1:5d:8b:5a:1d:96:de:f4:4e:99:aa:5c:8b:ea:50:
         16:b9:6b:cb:d3:52:82:1b:25:56:d5:55:71:bf:92:0f:3c:03:
         60:30:25:9d:ef:81:c3:63:72:59:3f:f2:13:a5:f8:0a:d9:4d:
         bf:89:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:09 2025 by rpki-client