Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
File:                     Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft (raw, json)
Hash identifier:          R6cU2FnToZxSAk3iOZzmGWnER3s61t9vfUzkNXHQNaI=
Subject key identifier:   EB:13:79:14:51:16:C3:C7:99:BC:EE:48:32:E8:DE:D1:C7:DC:09:35
Authority key identifier: 1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE
Certificate issuer:       /CN=1dad3753e28794e1f8831ae710060b11a63376ee
Certificate serial:       0194699FC470F5BCF629FE79944C3B702459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
Manifest number:          0C9A
Signing time:             Wed 15 Jan 2025 11:01:05 +0000
Manifest this update:     Wed 15 Jan 2025 11:01:05 +0000
Manifest next update:     Thu 16 Jan 2025 11:01:05 +0000
Files and hashes:         1: Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl (hash: cO7yqqd2t+gKsTntMIqaKwyaHxVmCacOnnG9TpPqgps=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:69:9f:c4:70:f5:bc:f6:29:fe:79:94:4c:3b:70:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad3753e28794e1f8831ae710060b11a63376ee
        Validity
            Not Before: Jan 15 11:01:05 2025 GMT
            Not After : Jan 16 11:01:05 2025 GMT
        Subject: CN=eb1379145116c3c799bcee4832e8ded1c7dc0935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:92:be:59:a5:31:ec:de:42:76:c8:2e:84:
                    2f:02:ad:1a:09:f7:f1:36:3f:52:f2:d3:9c:1f:1c:
                    63:9d:5d:fe:35:2b:52:e9:05:a8:23:f8:64:4d:4c:
                    53:4f:82:cd:76:d5:30:60:a4:77:04:6a:7b:03:56:
                    fc:09:f2:52:a0:e8:31:3c:39:50:cd:27:3c:53:9d:
                    84:aa:40:f9:7c:8c:76:ee:6b:09:42:f0:cd:90:e1:
                    25:44:b4:2b:8f:cb:c7:62:64:c9:04:87:43:24:20:
                    86:79:06:4d:0a:41:bd:b8:14:c6:87:3d:79:ba:36:
                    80:9b:69:7e:8d:bc:cd:f2:b4:c9:41:69:f3:a9:34:
                    26:3e:7c:01:2e:19:41:bf:7c:0b:d5:4a:d7:b2:23:
                    45:69:33:6a:69:01:f8:78:c8:c1:56:28:04:b8:b4:
                    81:ba:57:6a:b1:07:55:b5:46:4a:e3:bd:82:40:3a:
                    fb:80:f7:0c:f9:5f:07:a2:24:9b:26:b7:b6:c9:b9:
                    00:89:1f:e1:5d:55:f9:64:61:60:21:66:95:33:ef:
                    ab:47:60:79:b8:dd:52:3c:eb:c2:41:f8:29:90:42:
                    d8:6b:69:7b:15:62:30:29:7f:0d:54:01:ee:80:5d:
                    a7:db:64:d3:07:ee:ec:ec:dd:2a:ee:33:b3:29:b3:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:79:14:51:16:C3:C7:99:BC:EE:48:32:E8:DE:D1:C7:DC:09:35
            X509v3 Authority Key Identifier:
                keyid:1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:65:5c:8f:c4:76:1d:80:d9:83:50:21:12:04:91:28:87:
         ae:a6:bd:14:48:65:15:0f:73:4c:8a:e7:5a:81:ae:43:1a:08:
         41:5d:23:26:12:93:e5:92:3e:6f:04:6e:91:f7:b6:f3:0e:c6:
         61:38:c4:ff:a0:27:36:b3:12:07:cd:ef:8a:ae:d1:f2:a1:67:
         b5:ff:9b:f1:3f:31:e0:4e:08:18:90:be:fd:07:98:15:d2:ad:
         22:5a:8c:45:92:17:0a:1a:ed:3a:9f:3c:3c:77:eb:99:13:e8:
         3d:7a:af:36:01:27:fd:ab:73:43:f9:2f:a5:87:a7:35:6d:9f:
         19:c1:94:ef:ba:15:4e:38:42:d5:ca:52:10:3d:3c:4e:31:79:
         ac:5f:b9:68:e3:e2:76:10:fb:49:69:82:d1:fe:0a:e7:17:1a:
         f3:5b:8b:c6:50:51:9e:cb:60:1c:84:e0:a2:db:d8:65:72:59:
         8f:56:63:e7:4a:9f:c5:a3:4e:35:c0:fd:c9:2b:1d:ee:61:7e:
         91:19:57:da:59:3c:d1:67:cc:c0:ee:b1:7e:0c:e9:ac:7f:7a:
         48:1b:15:ac:1b:d3:db:6b:d1:ad:c1:2b:03:07:8c:d7:f8:cb:
         88:35:55:d8:8e:df:20:2b:1a:00:60:bd:7a:84:75:7e:13:fa:
         38:7e:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:51 2025 by rpki-client