Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          frw+MDmgsuXd6JWQKZNekE75d2Hziz4ravb3A/UADco=
Subject key identifier:   0B:6C:49:F7:75:57:4F:CF:A1:53:78:00:78:26:80:5D:68:D0:12:59
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       0194BC3C48F09C71CD7E6E586682B9A1E69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          09D3
Signing time:             Fri 31 Jan 2025 12:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:54 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: ZG8lfq37iJxpDt8Ck8sGKNadhdIaFxdDdS1emKVsiEQ=)
                          3: dansMIWsXXpDaSAy_aJZzzQS8h0.roa (hash: iHe7NlIYDFrPBEBVHgOcNEN5f7UZr+p1lUL5elNQd68=)
                          4: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:48:f0:9c:71:cd:7e:6e:58:66:82:b9:a1:e6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Jan 31 12:00:54 2025 GMT
            Not After : Feb  1 12:00:54 2025 GMT
        Subject: CN=0b6c49f775574fcfa15378007826805d68d01259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:b2:1a:8e:85:34:4b:22:d2:2d:4f:c5:3f:
                    63:4f:aa:87:cd:f6:4e:28:e0:ee:9b:75:5b:de:19:
                    58:ad:17:47:86:16:1b:80:58:19:bb:97:cc:39:af:
                    25:24:e0:01:d7:89:76:5d:05:fb:8c:f1:d0:4d:fd:
                    22:c6:37:12:e8:23:0c:28:fb:aa:cb:b7:09:d3:ff:
                    5d:60:32:08:63:37:17:70:5a:0e:a4:b4:18:e0:0c:
                    7a:92:97:f2:48:2e:a0:8e:51:38:2f:18:3b:65:12:
                    65:89:8c:ab:94:c0:58:d2:de:d4:c9:72:06:a9:12:
                    ab:7b:81:7a:c9:17:4d:c4:2e:7c:5d:f3:8d:0f:fe:
                    9b:77:0a:ea:f2:b8:b5:99:61:ab:a3:f9:8f:db:0c:
                    db:d3:50:74:0c:d0:32:94:a6:f0:49:42:1c:0a:ed:
                    c6:2a:ca:95:b5:90:02:bf:6c:cc:ce:c4:73:14:13:
                    f4:f4:2c:ed:de:00:c1:68:de:09:74:a3:4a:1e:ac:
                    83:25:48:8d:e4:f5:41:4d:b7:39:84:e2:bc:a4:4d:
                    cd:9c:1f:6c:4b:a3:ba:db:99:36:7c:d2:6f:12:a6:
                    b0:dc:05:47:40:a7:60:fa:fe:b2:e5:8e:ef:b1:10:
                    cb:c8:cb:39:f0:14:39:8f:b6:1d:78:b1:f2:29:44:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6C:49:F7:75:57:4F:CF:A1:53:78:00:78:26:80:5D:68:D0:12:59
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:1d:a9:b6:00:61:16:dd:5f:68:5c:1b:80:40:ab:4c:dc:
         f6:16:bc:09:20:a8:f3:b3:88:a8:b1:56:b8:6c:87:4c:3d:45:
         fd:da:ca:10:d8:d7:0c:16:df:00:2d:53:4f:2a:f0:b8:7c:c6:
         54:3e:0e:cb:a5:2e:04:6c:7a:cc:74:91:d7:b6:5e:44:c2:88:
         5c:52:b6:29:95:0d:87:66:b5:d6:82:3b:1d:e5:32:20:6b:e6:
         3a:8a:56:6b:ab:4f:ba:ce:38:35:b1:6c:dc:b8:8b:84:0b:16:
         18:83:76:9b:8f:99:ff:39:3b:9b:48:9e:e8:49:2f:c2:56:2e:
         53:78:bd:34:a4:ff:51:7f:40:6e:be:41:1a:91:03:54:a4:c4:
         98:48:e0:50:49:22:f1:59:5b:0e:99:fd:65:74:db:3b:a4:24:
         5c:d9:ef:e5:c8:fc:4d:2b:d8:2b:32:94:c7:28:3f:98:b3:55:
         07:ea:f7:a7:ac:09:07:3f:89:d3:4a:0e:f7:45:be:ba:b4:ad:
         d5:5b:44:9f:ae:bd:d9:ca:a2:86:83:20:1c:3b:84:c2:b9:eb:
         c0:25:4b:39:c1:ee:cf:d5:00:42:a2:78:2e:da:dc:46:96:a5:
         c6:b1:1b:60:27:78:a1:48:96:66:d9:24:ac:e1:aa:40:37:3f:
         84:c2:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:21 2025 by rpki-client