Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File:                     HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier:          V1p8btmrepn7EhA2Ai68Hr9FQhT5RRdvYcHawulb5sI=
Subject key identifier:   61:F7:54:BC:18:68:B6:7F:E6:48:FF:40:F0:DB:CE:7F:3A:82:2B:19
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer:       /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial:       0194BD175BDC59C282FDCF393A8E6CE48B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: dCvJJtULyK6hp7xJ2yswd0hfoKyvJAZPhK3GFMUTZ/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5b:dc:59:c2:82:fd:cf:39:3a:8e:6c:e4:8b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=61f754bc1868b67fe648ff40f0dbce7f3a822b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:46:07:19:bd:79:07:90:d7:c5:0f:6d:4c:
                    81:49:aa:46:f0:14:dd:4b:25:e9:d4:20:08:d1:d5:
                    53:0c:68:4c:f7:97:ab:8e:54:d8:c3:63:34:9d:cf:
                    f0:7c:48:5c:b2:48:97:01:92:9a:10:8b:eb:55:87:
                    44:ed:fa:42:3f:f9:0d:e8:4d:a9:11:21:11:e5:4e:
                    35:58:14:c8:19:8d:57:ec:76:86:b1:f4:c1:30:e7:
                    8e:32:a4:0c:cb:65:8a:c3:06:32:95:5e:65:81:a3:
                    72:3c:55:d7:34:81:97:5a:f9:19:27:ba:78:79:5f:
                    d5:ca:9a:c9:61:c8:8f:15:c8:8f:f7:e1:f0:97:a5:
                    58:ca:49:11:39:af:ae:bc:61:dc:3b:f4:e1:58:b2:
                    19:a9:f6:27:cd:e3:43:3a:fd:87:62:e1:63:83:89:
                    bc:32:47:08:9d:34:97:da:70:e8:ee:27:d7:7a:c9:
                    17:47:cd:40:69:5a:17:15:79:f2:82:6b:76:e6:06:
                    eb:93:3f:a1:86:b1:91:bd:a9:47:ef:d4:ca:6d:87:
                    1e:0d:7a:18:8f:06:af:fb:dc:d8:3f:ff:9e:db:8e:
                    a1:af:08:97:89:58:65:26:32:41:fe:93:07:58:6e:
                    ea:24:e1:5c:e4:2f:32:ed:ed:3c:eb:47:9d:f5:f9:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:54:BC:18:68:B6:7F:E6:48:FF:40:F0:DB:CE:7F:3A:82:2B:19
            X509v3 Authority Key Identifier:
                keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:5f:48:94:c9:1c:bc:4e:ef:f5:1d:bd:64:da:a3:83:a0:
         42:11:f6:37:9c:e1:49:b3:44:b7:99:28:6f:60:f6:78:e1:ff:
         51:9a:e3:aa:f9:50:cd:33:4f:ca:29:6a:90:f1:0d:83:f1:59:
         6c:d5:18:45:8d:bd:80:62:2d:95:2e:12:f2:0a:62:73:a0:43:
         f0:07:b8:75:2d:40:59:1e:b3:44:12:e5:08:86:0f:a6:40:a3:
         bf:cd:8f:c3:30:cf:ed:b3:47:ec:34:9b:22:06:75:f0:e6:0b:
         68:a0:b0:a8:91:fd:1a:d5:2d:33:06:8e:51:5a:4c:4b:e3:ad:
         f8:41:6d:17:f1:09:e9:71:89:9a:aa:67:36:09:7d:a9:c0:77:
         04:ee:fe:46:91:21:c1:f3:e0:b5:9d:fd:e9:46:29:71:fe:23:
         29:2b:76:23:99:1d:82:d7:c2:78:4d:64:1a:04:2b:bc:19:e8:
         a8:44:1b:f4:78:20:8c:c7:40:7b:56:1d:a7:fd:01:ad:7a:bf:
         84:1f:1c:7a:d4:db:58:5a:ad:8c:15:f1:a9:ec:03:60:5c:a8:
         cd:48:0f:db:2b:bb:ba:1d:06:a4:cd:e5:3f:1a:61:95:f4:3d:
         c0:18:be:23:80:e8:2e:a0:eb:08:89:08:54:05:b2:c4:4c:0a:
         c0:92:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:30 2025 by rpki-client