Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          dcyN0BKegBzONCu772PICwUqdwCorTSO0+Ue0MTTwLo=
Subject key identifier:   83:B3:58:5A:9C:75:85:62:C7:D6:C3:85:97:11:F0:8F:DA:80:91:B6
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       0194BC72C5BCF5AF166F5377FBAE1E502EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          1447
Signing time:             Fri 31 Jan 2025 13:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:25 +0000
Files and hashes:         1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
                          2: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
                          3: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
                          4: 785tweZ-YHn9U8-ha0ja24xwcz4.roa (hash: IyUKM9NcNfmMwS9a6wdhdtqxjfkAp93tgTjqGCn2gAU=)
                          5: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: JyRAYXQdpQzJa9zgp75VOSZJsCTsMoA0XEE+GVVhTPE=)
                          6: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
                          7: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
                          8: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
                          9: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
                          10: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
                          11: oUGWXabxket5PTztOZR0uml1MRY.roa (hash: rXm+B8+y2xX/hIJa6cxTVZZjDMuLiXt5xhYTbZFYmk0=)
                          12: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
                          13: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=)
                          14: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:c5:bc:f5:af:16:6f:53:77:fb:ae:1e:50:2e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Jan 31 13:00:25 2025 GMT
            Not After : Feb  1 13:00:25 2025 GMT
        Subject: CN=83b3585a9c758562c7d6c3859711f08fda8091b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:a7:3d:5c:f0:99:89:ca:f9:b7:ea:6e:30:
                    c0:4d:c6:7b:c0:a9:27:8a:f2:ea:db:3c:75:2e:2c:
                    49:19:28:bf:78:0c:d8:5e:bc:69:56:b0:5a:05:fc:
                    1f:cc:38:ad:1e:45:8a:ba:f2:d2:5d:ec:9b:e7:56:
                    f4:9b:7a:c7:f9:89:79:0c:1b:7e:42:48:b1:13:90:
                    65:53:b5:04:14:c0:3b:7f:d4:81:9f:7e:57:d1:25:
                    01:23:ee:8b:85:5f:35:f0:ff:f0:26:7a:ef:59:d3:
                    86:ea:dd:2b:a5:22:58:35:68:a3:48:8e:5c:d2:25:
                    f4:fc:9e:18:69:c3:5d:be:40:82:05:f2:3d:20:56:
                    47:4d:15:c1:ae:09:5e:b3:83:49:9f:78:28:77:a0:
                    9c:cc:32:f0:fe:98:e9:c5:96:a5:1d:5a:7a:7a:e0:
                    57:6b:47:2d:d0:de:13:18:8c:2b:af:7a:96:96:fb:
                    22:9e:b6:6f:5a:a5:5d:96:7b:87:e6:3d:39:06:57:
                    c4:12:bf:92:c6:3d:7d:4d:00:55:49:4b:3d:d4:cb:
                    db:3d:75:59:22:a2:b3:cd:07:87:26:e8:38:35:bc:
                    7f:51:5c:3e:2a:ac:19:6d:d0:53:53:09:8b:68:99:
                    d4:e9:6c:a6:50:7d:7d:6f:fd:83:f6:49:54:0e:ba:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:58:5A:9C:75:85:62:C7:D6:C3:85:97:11:F0:8F:DA:80:91:B6
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:9c:c6:48:39:61:6b:60:5a:3f:31:c3:36:47:c9:71:80:
         99:25:3c:b7:77:6a:92:c2:d1:9a:52:5f:1b:53:1d:7f:11:92:
         e1:98:ff:0e:0f:ce:1a:77:09:10:1c:b7:5b:cf:84:70:c6:59:
         a7:92:4c:44:3f:ff:52:3b:33:1c:50:dd:15:c9:a9:89:32:0d:
         d2:a7:61:ec:c3:2d:8d:54:a4:b1:2d:2b:ec:c3:1a:a4:41:cd:
         4c:11:0b:0b:24:b1:da:01:a3:54:0e:52:33:68:0d:70:57:d4:
         d3:f5:08:d5:a1:d4:4d:da:56:66:d3:21:60:48:89:32:6f:e6:
         70:de:3e:97:49:03:41:ca:c1:20:62:f3:09:87:16:11:a7:1f:
         0b:25:81:74:bd:1f:0a:42:d1:58:98:7a:37:1e:c6:1e:24:f5:
         67:de:f6:c4:f6:a7:17:a3:b8:77:f2:c6:76:f0:23:65:b1:42:
         c4:80:69:d5:a8:fd:87:0f:2b:7f:bd:cd:21:b4:5b:72:ee:e9:
         d5:6e:91:c6:eb:be:34:f5:0f:fe:a1:b8:f7:66:7d:25:f9:39:
         8c:45:53:36:08:de:0c:05:a9:5c:3f:93:3b:49:64:49:03:57:
         4f:4c:d9:e1:61:09:b9:5f:60:cd:ca:17:fe:e5:bd:95:2a:7b:
         57:b4:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:49 2025 by rpki-client