Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/HeT_D33WDJ1QTVbHtKys1HNOjb4.mft
File:                     HeT_D33WDJ1QTVbHtKys1HNOjb4.mft (raw, json)
Hash identifier:          hLuUVwLUA7ONi+lsUbBIIBI1TL4g2RMJJMr4iixdeGU=
Subject key identifier:   1A:6A:9B:B6:45:91:C3:0C:E7:34:BF:E1:D4:76:DE:5B:74:E0:E1:7E
Authority key identifier: 1D:E4:FF:0F:7D:D6:0C:9D:50:4D:56:C7:B4:AC:AC:D4:73:4E:8D:BE
Certificate issuer:       /CN=1de4ff0f7dd60c9d504d56c7b4acacd4734e8dbe
Certificate serial:       018C19E12874FF6F63D2AFE7C49256D6EED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HeT_D33WDJ1QTVbHtKys1HNOjb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/HeT_D33WDJ1QTVbHtKys1HNOjb4.mft
Manifest number:          0FAE
Signing time:             Wed 29 Nov 2023 07:00:35 +0000
Manifest this update:     Wed 29 Nov 2023 07:00:35 +0000
Manifest next update:     Thu 30 Nov 2023 07:00:35 +0000
Files and hashes:         1: HeT_D33WDJ1QTVbHtKys1HNOjb4.crl (hash: qeSEn76OaDNzSoaZRaVqcBx47pU0lQaXMVwEuePNvfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:19:e1:28:74:ff:6f:63:d2:af:e7:c4:92:56:d6:ee:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de4ff0f7dd60c9d504d56c7b4acacd4734e8dbe
        Validity
            Not Before: Nov 29 07:00:35 2023 GMT
            Not After : Nov 30 07:00:35 2023 GMT
        Subject: CN=1a6a9bb64591c30ce734bfe1d476de5b74e0e17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:b2:2c:66:5f:7e:10:bd:4d:c5:6e:25:9a:
                    23:7c:3a:b7:3e:36:bf:55:3a:b0:ef:a3:f0:a5:f8:
                    d9:de:1a:06:29:bb:64:8e:f0:9b:80:2e:68:e1:1a:
                    8c:b3:6b:28:35:20:9f:80:80:0c:f7:f8:6c:32:eb:
                    49:7b:b2:35:b7:40:59:70:54:35:cc:5c:0a:1a:71:
                    d2:0f:3c:57:84:ce:90:76:c2:74:40:49:99:fa:f1:
                    8a:a6:82:7f:c3:b6:ac:64:d6:46:62:09:eb:eb:ca:
                    c6:83:80:fb:3f:a4:c4:c4:75:e7:95:48:96:d2:18:
                    8c:54:9b:b3:3a:e5:0a:61:e7:53:36:f8:ce:47:9d:
                    ec:7d:81:e9:44:c6:ee:c7:a8:69:9c:b0:a4:fa:fb:
                    f6:8b:26:ab:f0:38:be:0d:f8:e3:59:f3:8a:9c:53:
                    79:23:d5:46:2d:35:13:ac:8d:ec:d1:ce:12:26:2e:
                    d3:01:a9:43:d1:b6:79:fe:6c:ae:9a:bd:18:64:b6:
                    cb:ab:95:c7:86:c5:13:5f:e6:e1:14:87:d8:07:ce:
                    59:84:92:04:69:50:41:9c:bf:10:77:d0:7e:38:8f:
                    27:8c:03:3f:7e:bf:c4:29:1f:67:5e:6f:7e:24:27:
                    71:2a:b5:50:e3:a5:7e:4b:1e:ac:b2:6e:e4:78:21:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:9B:B6:45:91:C3:0C:E7:34:BF:E1:D4:76:DE:5B:74:E0:E1:7E
            X509v3 Authority Key Identifier:
                keyid:1D:E4:FF:0F:7D:D6:0C:9D:50:4D:56:C7:B4:AC:AC:D4:73:4E:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeT_D33WDJ1QTVbHtKys1HNOjb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/HeT_D33WDJ1QTVbHtKys1HNOjb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/HeT_D33WDJ1QTVbHtKys1HNOjb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:52:86:70:e8:f3:17:f9:51:6a:91:34:c8:86:09:a7:1e:4e:
         b9:db:20:59:51:5d:d7:6c:cc:5a:57:ad:5b:42:d8:7c:39:7f:
         a5:4d:2c:c7:c1:85:3a:be:3e:de:78:e6:1c:d1:2d:ae:73:ba:
         db:00:5d:4c:ca:77:df:51:db:c3:d4:85:42:20:25:2e:b9:9f:
         e0:6d:80:93:68:d6:4b:93:a9:ac:dc:7d:ed:c0:3f:86:67:0c:
         0e:7e:96:4b:fb:6f:33:97:71:db:d6:bd:88:ac:09:26:ea:7e:
         c7:67:b7:f0:4e:c8:ff:12:3f:d9:47:87:1b:b5:a2:cc:05:e5:
         e1:4a:ef:e7:e6:27:d9:7a:18:e8:01:6c:58:b9:f9:6f:f4:45:
         5d:af:47:7d:a9:53:e1:65:75:cc:68:fc:0e:44:1c:4a:cd:74:
         25:0b:47:8e:ac:3b:a4:45:cd:2b:f3:0d:2b:d2:5a:ed:48:8c:
         7d:fa:7f:b6:49:39:0e:6d:8a:b0:42:d2:cf:c8:9d:70:c0:7d:
         b3:d7:4f:16:81:42:88:c1:7c:4a:b4:67:46:37:4d:78:e2:c4:
         24:0b:5c:89:da:d0:2e:3d:e3:18:43:93:6f:d0:63:ed:5d:01:
         c5:2d:ab:55:b4:07:8b:93:97:e4:1b:e1:46:2e:6a:8b:59:2e:
         dd:75:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:01 2024 by rpki-client on console-fra.rpki-client.org