Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
File:                     Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft (raw, json)
Hash identifier:          JMr7zoTC16IBsQPe4bsAHUjSVjErHgAiff5B7RPoz1E=
Subject key identifier:   37:48:A0:F6:AF:02:5C:77:E7:66:0C:1C:1C:6E:69:2C:B9:BF:FF:B4
Authority key identifier: 1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE
Certificate issuer:       /CN=1dad3753e28794e1f8831ae710060b11a63376ee
Certificate serial:       019467B15BB6F0F258C284FFA635BA462413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
Manifest number:          0C99
Signing time:             Wed 15 Jan 2025 02:01:04 +0000
Manifest this update:     Wed 15 Jan 2025 02:01:04 +0000
Manifest next update:     Thu 16 Jan 2025 02:01:04 +0000
Files and hashes:         1: Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl (hash: KGQ9pgMET3FbNKQz9ALeOXbNRw2WGVhiCuC2clCIlj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:67:b1:5b:b6:f0:f2:58:c2:84:ff:a6:35:ba:46:24:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad3753e28794e1f8831ae710060b11a63376ee
        Validity
            Not Before: Jan 15 02:01:04 2025 GMT
            Not After : Jan 16 02:01:04 2025 GMT
        Subject: CN=3748a0f6af025c77e7660c1c1c6e692cb9bfffb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:2f:e1:3a:76:13:dc:0d:5d:fa:c8:bf:3b:
                    98:b2:11:1d:3a:2a:c0:21:a7:ed:a4:cb:a1:a6:74:
                    3f:fd:36:59:49:03:e2:08:15:c2:6b:6c:66:96:3b:
                    37:9f:43:1c:92:12:96:42:61:d2:52:87:dd:54:9c:
                    48:d3:5a:cd:2a:f2:9c:47:3e:32:6f:84:a0:3f:f8:
                    77:7a:f9:de:8d:a3:c5:6f:69:66:61:d6:ce:a7:27:
                    0e:85:ad:ce:a4:c3:3b:a9:4f:c4:bf:80:a9:b9:93:
                    a2:16:1a:cd:23:6c:bb:83:43:52:39:3c:fc:8c:8d:
                    ca:c7:ea:f9:44:13:7e:79:7a:61:f7:4e:82:91:31:
                    e1:a1:b5:63:4c:63:41:84:a3:1b:ee:d2:18:59:18:
                    5f:f5:76:39:ca:b8:76:35:20:f7:a1:d7:47:35:c9:
                    11:90:21:15:02:22:ea:33:4a:c6:36:10:e2:82:56:
                    c8:f7:99:bf:fb:4d:06:ba:4b:96:32:de:7b:69:b7:
                    8c:f4:6b:20:22:84:6f:5b:75:4c:54:58:64:b7:2e:
                    fd:38:13:68:6d:8d:2a:f7:b6:25:e4:8c:bf:9b:a1:
                    e6:3e:56:2a:df:10:3c:29:65:ad:68:16:ff:fa:cd:
                    8f:3b:b9:23:f6:b6:48:a2:fa:a8:c3:c7:3a:9c:cd:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:A0:F6:AF:02:5C:77:E7:66:0C:1C:1C:6E:69:2C:B9:BF:FF:B4
            X509v3 Authority Key Identifier:
                keyid:1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:e0:30:8f:bb:a8:a9:de:bf:67:5b:3d:ce:a8:cf:40:43:
         b7:0f:db:b1:27:bc:ea:49:cb:62:e6:11:7c:80:10:ca:ea:07:
         af:c3:e2:21:22:94:4a:2a:a5:ba:d4:7c:61:e1:71:c3:5d:52:
         2f:6a:86:c4:22:83:63:ba:08:1e:13:9f:fc:ed:63:e7:76:07:
         a8:ea:eb:be:fb:5a:2d:43:b4:a0:90:64:4f:ff:a8:6d:f5:11:
         64:fb:25:77:55:34:78:64:80:d2:cd:d4:6e:13:a6:fa:7a:db:
         4c:4c:1a:2d:4f:fe:b9:c0:4c:eb:2c:47:ce:6f:cc:08:6c:02:
         ab:b5:3d:19:29:31:c8:e4:67:30:3e:a8:6a:6d:ac:d7:4f:47:
         cd:31:b6:2e:9d:e5:2b:2e:2a:24:39:e4:19:d2:0e:0c:15:ee:
         16:5e:85:d9:bf:5a:b3:88:1b:33:5b:95:fd:00:f9:e6:b3:fb:
         ed:14:cc:a0:3c:0d:03:30:8d:79:2a:95:00:38:78:81:17:6b:
         f8:d3:16:c5:52:76:46:41:c2:7e:49:0c:cd:85:e4:ad:9d:2a:
         2d:f4:64:9d:be:3b:97:ee:3f:10:5b:c7:9b:b8:06:e9:28:eb:
         44:fc:6b:06:f9:75:56:c6:2e:30:69:a6:35:11:2e:4e:79:ff:
         44:59:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:30:40 2025 by rpki-client