Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
File:                     HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft (raw, json)
Hash identifier:          C9xE9OwOuJOcVDduFlpFwUBppeLySzV1iJ82/l/Xuz0=
Subject key identifier:   95:80:90:21:B3:82:6C:74:44:DF:BD:1F:7B:F1:AF:4D:0F:45:89:44
Authority key identifier: 1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6
Certificate issuer:       /CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
Certificate serial:       0194BC72A597C017CCD387D79BAC54D2B062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
Manifest number:          01CB
Signing time:             Fri 31 Jan 2025 13:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:17 +0000
Files and hashes:         1: HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl (hash: 46MCmkzUcON11wUdniftbRgOV7ukMVimhm7aE6hCixg=)
                          2: XiutpK5IFGvWb0JW8fGUzsQHR84.roa (hash: LnLSfYNTkXNsPaxH5mVhc1aUjmJ/QEWl9VYA4pHoDLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a5:97:c0:17:cc:d3:87:d7:9b:ac:54:d2:b0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
        Validity
            Not Before: Jan 31 13:00:17 2025 GMT
            Not After : Feb  1 13:00:17 2025 GMT
        Subject: CN=95809021b3826c7444dfbd1f7bf1af4d0f458944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:a3:bb:86:27:0f:8b:33:7c:db:1a:aa:50:
                    4c:dc:2d:1c:c9:e9:0e:7e:45:49:bd:9d:26:be:6a:
                    ca:cc:51:1b:7c:ae:2c:11:04:bc:79:c8:1f:66:a8:
                    89:4c:48:04:0e:77:c5:9a:bd:c7:58:0b:3e:85:62:
                    ae:b9:4c:2a:19:ea:5f:23:0e:a2:14:97:b9:2e:ef:
                    c5:30:5f:25:1c:6a:03:30:62:0a:f0:8c:8f:d2:b4:
                    a7:ff:11:49:9d:7d:48:2a:40:99:87:16:cc:f9:fb:
                    74:7b:7c:0d:09:52:0b:36:b3:b7:13:52:17:35:23:
                    b3:60:6c:e1:71:0d:50:b6:b3:54:6b:aa:ca:6c:32:
                    f8:b5:9a:c3:20:da:99:4c:e0:dd:1e:88:60:4d:34:
                    73:7c:56:59:51:33:63:b9:f8:73:16:7c:f7:b6:0d:
                    1e:d7:36:11:05:b5:c0:15:39:90:86:92:c0:b2:56:
                    88:33:91:d5:fd:87:0f:b6:b2:85:06:b3:32:eb:8b:
                    ff:d4:c7:57:f4:7d:93:d1:c3:dd:86:5e:89:2b:03:
                    c4:85:92:56:86:ec:de:03:2b:85:3c:a0:78:2f:2e:
                    53:96:e2:b4:4e:38:eb:7f:65:3d:12:fe:24:4c:13:
                    ab:65:fb:10:4b:6d:06:8b:97:f9:94:51:dd:f8:ff:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:80:90:21:B3:82:6C:74:44:DF:BD:1F:7B:F1:AF:4D:0F:45:89:44
            X509v3 Authority Key Identifier:
                keyid:1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:36:85:95:57:10:3a:b2:bc:fa:da:11:47:fa:66:2a:13:5d:
         1c:d4:7b:44:91:78:ac:08:ce:5c:dc:79:25:ed:31:cd:2d:65:
         3c:4d:15:e2:2c:86:0e:bf:32:a9:54:dc:c0:d4:00:4a:96:3b:
         cc:39:19:26:0f:07:6a:ba:ab:d8:b9:7a:b1:3a:c6:67:ff:39:
         8a:a3:f9:31:f2:16:57:a2:62:ed:28:96:6f:c8:89:31:a5:04:
         8b:bc:47:24:e7:87:b8:33:3f:7b:75:01:32:08:39:e2:5a:ae:
         f4:07:6b:38:03:e5:e9:b1:15:3f:02:4c:a0:56:00:5a:47:d9:
         ab:3c:aa:fe:93:ba:93:99:04:48:27:1a:76:50:e3:6c:0d:1e:
         80:e9:87:f3:ae:9e:bc:c3:5d:48:f1:7b:e1:e7:74:f4:a0:78:
         f6:71:94:66:b4:97:11:ab:fa:ce:fc:10:fb:fb:2b:17:12:cc:
         f4:dd:25:88:5c:c7:24:ad:f5:d0:05:2c:3a:82:7b:e9:03:db:
         2f:0f:bf:64:b6:29:f1:a1:2a:b8:37:7a:58:bb:78:ae:98:88:
         0d:e6:bf:64:66:cd:a6:54:89:2b:70:17:60:4d:e8:9c:4d:1b:
         19:b4:c1:fe:02:ca:ef:3e:a6:0e:fe:02:21:27:4f:d7:95:4d:
         b6:07:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:09 2025 by rpki-client