Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File:                     HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier:          1qxn7+Qy7NfUz6ibUEXbvT+lEwTdNpJMUGhSasD4C4g=
Subject key identifier:   46:59:5A:2E:21:F1:4F:6F:AE:8D:0E:8C:BA:F7:F4:C5:C2:1E:71:FE
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer:       /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial:       0194BBCE760C5C6782D7E3266EE648E64F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:57 +0000
Files and hashes:         1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: TkyhrBAwQQUiKAO/7OlkvLuwLk2d2u+13znA6PqNkUM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:76:0c:5c:67:82:d7:e3:26:6e:e6:48:e6:4f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
        Validity
            Not Before: Jan 31 10:00:57 2025 GMT
            Not After : Feb  1 10:00:57 2025 GMT
        Subject: CN=46595a2e21f14f6fae8d0e8cbaf7f4c5c21e71fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:ea:34:14:d9:24:59:40:5c:9e:8f:86:75:
                    6c:f5:ef:5c:63:6b:aa:ad:37:9c:d5:be:cf:b6:4d:
                    ff:e7:7f:b4:e2:c2:c5:0a:f1:d4:98:f3:25:e4:3c:
                    c1:5b:9a:0d:fc:76:30:27:bc:75:3d:2c:4b:d3:da:
                    2c:1a:5e:42:bd:aa:3a:d0:e8:d8:a4:66:28:50:77:
                    5c:7e:e2:33:56:47:0a:df:87:fb:13:5d:b8:94:3c:
                    ba:a9:61:a7:3e:d1:d2:80:1e:c6:cf:98:7d:41:4d:
                    33:cc:cf:6a:ab:05:13:04:f8:ee:d2:48:3f:f3:db:
                    a4:98:f5:f0:f3:bb:40:02:3a:4f:93:27:75:85:9a:
                    99:b3:93:06:1b:28:19:d6:79:a0:27:f8:9a:bd:1c:
                    91:eb:12:70:52:ae:f7:fb:bb:7c:df:a6:e9:70:fd:
                    23:2d:1f:62:62:32:5e:0d:c3:89:bf:16:75:83:a6:
                    8a:a4:80:8b:d0:c5:49:59:03:15:bb:4a:6b:92:26:
                    f8:fb:5e:9e:c8:ff:20:ac:98:1a:36:e0:61:47:bf:
                    95:e5:c4:23:4b:40:cb:58:c6:f4:24:6b:39:f5:64:
                    34:ea:a3:f9:7f:db:3b:c6:8b:92:6b:25:6b:37:13:
                    38:e0:fd:e6:79:f2:23:50:b7:44:c6:37:1b:b3:eb:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:59:5A:2E:21:F1:4F:6F:AE:8D:0E:8C:BA:F7:F4:C5:C2:1E:71:FE
            X509v3 Authority Key Identifier:
                keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:23:10:84:72:7e:f0:35:d6:06:ca:08:fe:55:9c:c2:1a:
         f0:a6:e0:2c:5d:63:e6:7f:e8:2d:0d:75:4a:38:96:1a:0f:da:
         14:aa:d0:90:52:2c:d9:68:6b:4a:a6:54:4a:53:7f:02:29:60:
         3e:d3:9b:0d:d8:d2:82:e2:8f:cd:82:04:bc:07:ba:fb:81:d0:
         de:56:66:94:87:96:d6:09:1c:49:e0:56:d7:a5:85:50:fd:e7:
         68:04:22:8e:42:94:ba:37:d2:61:37:b1:74:73:0b:f8:83:76:
         bb:70:1c:f9:99:04:b7:26:5b:3a:54:21:30:2f:61:27:f9:ee:
         76:cf:c6:15:db:23:69:04:91:8d:9f:b1:45:dc:62:06:73:f4:
         fb:e6:d8:d2:47:9d:ef:c6:98:61:ae:f6:3f:a4:02:99:f3:f8:
         63:b2:b5:eb:98:b8:19:18:2e:1d:46:94:75:b8:a9:aa:f1:8f:
         da:64:cb:e4:f8:cb:09:e7:2b:8b:c3:23:54:52:6f:4f:50:fa:
         5a:94:20:9d:23:86:a9:4e:81:d1:c6:72:c5:21:4d:37:a1:12:
         1a:d5:63:42:e1:e4:b2:05:3d:f6:7f:94:c6:83:b9:2d:36:ed:
         0c:3e:d5:54:54:26:0e:61:43:d9:56:d2:fc:48:58:f6:ae:57:
         81:59:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:34 2025 by rpki-client