Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
File:                     HJglkTOVXy7mNvuB8MDqYExmM1g.mft (raw, json)
Hash identifier:          vlfJtZriuvD9SyX7uqxGlPEkUcAquhMaPFKKtxervik=
Subject key identifier:   48:03:52:67:8C:4B:74:0B:18:63:3C:E9:0C:9A:93:B8:A1:59:B0:27
Authority key identifier: 1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
Certificate issuer:       /CN=1c98259133955f2ee636fb81f0c0ea604c663358
Certificate serial:       01965C4C7FB20120EF27F2BF80F38AF6ACFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
Manifest number:          01E1
Signing time:             Tue 22 Apr 2025 07:00:39 +0000
Manifest this update:     Tue 22 Apr 2025 07:00:39 +0000
Manifest next update:     Wed 23 Apr 2025 07:00:39 +0000
Files and hashes:         1: HJglkTOVXy7mNvuB8MDqYExmM1g.crl (hash: T8aO08CTKjeQDs/0uv1GniGzEr4GaQtVoYfFFRUks6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:4c:7f:b2:01:20:ef:27:f2:bf:80:f3:8a:f6:ac:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98259133955f2ee636fb81f0c0ea604c663358
        Validity
            Not Before: Apr 22 07:00:39 2025 GMT
            Not After : Apr 23 07:00:39 2025 GMT
        Subject: CN=480352678c4b740b18633ce90c9a93b8a159b027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:58:4e:f8:e7:e4:81:21:7d:4f:1c:03:38:
                    05:0b:dc:ff:c7:4d:d7:c7:4a:ec:a2:0d:b4:81:cf:
                    4e:51:2c:d9:52:dc:ed:7d:65:e9:aa:74:83:2d:30:
                    d6:42:54:e2:f0:93:76:50:21:c7:08:1b:77:7c:c2:
                    2d:0d:cd:6c:4d:59:05:c1:fa:19:93:48:fb:c9:98:
                    11:46:a8:b0:9c:03:2a:1c:d0:b8:71:79:a3:26:ab:
                    e2:8f:85:b7:c2:12:2d:f7:0a:25:2a:0b:6a:03:db:
                    de:8e:03:49:9d:3f:3d:a4:b7:0f:e2:b9:cf:72:3e:
                    7d:26:27:48:1b:35:18:d5:65:30:58:6d:0c:7e:43:
                    b3:54:75:38:62:de:c1:0e:55:04:45:82:fb:d7:28:
                    f9:60:fd:ea:ee:c9:9e:33:60:81:bd:07:f3:a5:7a:
                    ab:04:0a:cf:c0:e3:43:a4:3e:b5:7c:b0:ae:e3:79:
                    cc:e0:7d:77:1e:ab:8f:9d:a3:9d:6d:8b:82:8b:9a:
                    46:27:38:d3:53:91:4b:c2:9b:ff:a3:4f:ad:1a:df:
                    ae:ad:98:1c:38:85:c5:77:6c:13:d7:d0:f3:90:c9:
                    3e:9b:6e:a3:f4:66:d4:e9:bc:7d:16:7c:e2:b4:77:
                    aa:b1:e3:34:08:2b:73:8a:3d:ff:08:e3:2c:fa:f5:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:52:67:8C:4B:74:0B:18:63:3C:E9:0C:9A:93:B8:A1:59:B0:27
            X509v3 Authority Key Identifier:
                keyid:1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:53:79:a4:7a:61:fc:e1:a8:46:c6:ba:f8:ba:f5:94:81:59:
         f6:3b:6c:da:c0:9e:31:01:fc:df:d8:dd:89:18:ef:cd:a9:98:
         af:2b:7c:30:55:f4:63:ec:6e:da:d0:af:bb:b1:0c:93:96:bd:
         a7:ca:a8:94:c3:63:c8:13:bf:e3:54:a2:e6:1b:5d:78:b7:8e:
         86:28:47:6e:7e:de:db:fe:52:b5:d1:0c:0b:d8:0d:b4:f4:7c:
         75:8c:ea:f2:5e:9a:2b:89:e8:97:a4:c7:1b:0b:79:a1:42:9d:
         f5:06:77:b8:07:c2:6c:c2:9f:ce:5f:8c:e4:cf:c1:4a:66:72:
         4c:d1:32:f7:90:56:ea:a3:22:e7:6a:e4:2f:af:c9:95:c0:0b:
         89:4b:29:4e:47:de:96:e4:c8:25:74:c9:aa:8b:c7:88:fe:72:
         11:f8:bd:12:13:85:24:5d:cc:f8:cd:92:f8:d6:cc:0e:2f:20:
         c3:f9:b1:c4:d9:da:5b:2f:d6:01:43:7a:59:9a:72:2f:8a:66:
         57:75:57:b1:c7:4f:26:16:fb:83:a8:a7:b5:b6:6d:5e:23:43:
         35:41:88:87:35:c3:75:52:d0:4d:16:8f:1b:bb:d0:fa:ef:11:
         6f:9c:9f:55:c9:e2:02:3a:82:32:f3:a2:cb:b5:6e:b2:78:5d:
         2b:47:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:35:48 2025 by rpki-client