Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b97a20-d592-4aa0-9219-08e7c13b7730/1/HMDNZl6ZEA86cAv_9X0bKjc0uV8.mft
File:                     HMDNZl6ZEA86cAv_9X0bKjc0uV8.mft (raw, json)
Hash identifier:          xlesj85W1kJPQIHD+kuFeYzb+UowNiUfZj7KqLFrd9w=
Subject key identifier:   CE:C6:1A:EE:86:06:E0:3D:3F:D8:D0:06:86:60:42:9D:C7:A4:8E:30
Authority key identifier: 1C:C0:CD:66:5E:99:10:0F:3A:70:0B:FF:F5:7D:1B:2A:37:34:B9:5F
Certificate issuer:       /CN=1cc0cd665e99100f3a700bfff57d1b2a3734b95f
Certificate serial:       019173BE02C5C1C7531EA85BE669B9209260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMDNZl6ZEA86cAv_9X0bKjc0uV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b97a20-d592-4aa0-9219-08e7c13b7730/1/HMDNZl6ZEA86cAv_9X0bKjc0uV8.mft
Manifest number:          026B
Signing time:             Wed 21 Aug 2024 07:01:57 +0000
Manifest this update:     Wed 21 Aug 2024 07:01:57 +0000
Manifest next update:     Thu 22 Aug 2024 07:01:57 +0000
Files and hashes:         1: HMDNZl6ZEA86cAv_9X0bKjc0uV8.crl (hash: tDdHQbyBdpcJ7LabcazyHoFwxmco/1nmdYGhxgL4jZI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:73:be:02:c5:c1:c7:53:1e:a8:5b:e6:69:b9:20:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cc0cd665e99100f3a700bfff57d1b2a3734b95f
        Validity
            Not Before: Aug 21 07:01:57 2024 GMT
            Not After : Aug 22 07:01:57 2024 GMT
        Subject: CN=cec61aee8606e03d3fd8d0068660429dc7a48e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:5f:1c:62:0d:dd:4a:92:7f:d7:06:a2:3a:
                    f0:be:a2:34:ff:96:78:3c:5d:39:39:02:83:07:b2:
                    ea:2f:d4:7f:ed:a7:c8:c3:5d:81:11:dd:66:90:db:
                    d5:2f:94:d3:71:9a:26:3e:47:fd:70:b2:a1:e8:a3:
                    80:85:0f:e6:5d:fe:97:48:95:da:48:5b:0f:c1:9b:
                    12:e2:07:8b:0b:5d:74:1a:16:15:2a:9c:f3:ef:20:
                    d9:94:bc:b2:a6:17:59:4d:65:c2:ca:38:ff:86:8b:
                    48:32:20:e9:2d:5c:6c:2f:ca:0d:d6:38:8f:4b:6e:
                    c3:80:bd:0f:5e:1c:81:3b:d8:11:88:2f:94:14:19:
                    f0:ad:69:b1:71:13:bd:ed:bb:da:e2:ac:11:b0:b9:
                    8a:e0:fc:f5:5f:33:99:9d:0f:40:d6:a5:94:10:01:
                    0b:1f:03:83:bf:64:87:c4:7a:68:fd:b8:e7:63:0f:
                    90:9c:7d:bf:2b:21:55:0e:58:34:4c:96:0a:d3:b9:
                    68:89:56:0e:63:00:a4:ba:57:15:60:bd:6e:63:3b:
                    23:20:09:cc:9d:c4:ad:0d:fb:5f:3e:8a:b0:26:26:
                    6b:01:3a:c8:61:ba:d0:ec:62:df:c9:40:c7:1c:3c:
                    56:af:92:44:2f:5e:fc:44:fc:a6:d9:f4:69:e9:85:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:1A:EE:86:06:E0:3D:3F:D8:D0:06:86:60:42:9D:C7:A4:8E:30
            X509v3 Authority Key Identifier:
                keyid:1C:C0:CD:66:5E:99:10:0F:3A:70:0B:FF:F5:7D:1B:2A:37:34:B9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMDNZl6ZEA86cAv_9X0bKjc0uV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b97a20-d592-4aa0-9219-08e7c13b7730/1/HMDNZl6ZEA86cAv_9X0bKjc0uV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b97a20-d592-4aa0-9219-08e7c13b7730/1/HMDNZl6ZEA86cAv_9X0bKjc0uV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:39:09:e2:ec:0f:76:60:2f:85:ae:64:ee:23:36:34:28:91:
         cb:d9:78:17:3c:e6:a2:b7:38:05:7a:37:7d:e9:a2:7a:a2:95:
         46:3c:d9:d4:b6:de:b1:17:ae:36:f5:02:0f:80:7c:ed:7b:e4:
         24:de:3f:06:22:37:1d:7c:58:a2:84:4c:64:71:48:04:a5:38:
         dd:bd:c4:41:d9:14:8f:2a:2b:df:e3:a6:e7:00:26:cd:fc:4c:
         56:4c:15:fc:8f:d7:d5:76:d5:d5:15:ca:d2:28:89:08:8f:d6:
         dd:61:44:f6:74:ca:2e:1b:5c:7d:cf:e3:9e:35:96:6b:8f:93:
         a1:6e:67:b8:86:fc:4c:98:b9:9c:4e:de:59:3c:7a:40:b1:21:
         24:46:7f:2e:a7:da:35:9e:c5:c1:13:39:ed:52:2a:8e:2d:a1:
         db:14:49:64:51:90:92:34:28:31:8c:77:0d:93:ad:f6:d4:e9:
         5a:4d:12:26:8c:9d:53:b9:dc:9a:da:70:74:1b:d6:75:84:ff:
         1b:41:a1:79:a5:d0:f0:a9:3d:3b:ad:12:5a:13:60:96:db:4e:
         28:b2:ef:6e:a5:b9:f5:7c:c7:67:ca:db:16:09:af:2a:d9:eb:
         e0:fd:33:07:9f:29:1c:77:ee:e1:27:c2:b6:ee:51:dc:fb:77:
         c2:0a:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:48:34 2025 by rpki-client