Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File:                     dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier:          tDajRLCmPfJ4AXs40F5BXA8cYL1eiw6JygBfFN3lcbM=
Subject key identifier:   D6:76:1A:38:4F:B8:E9:66:A4:78:E0:33:42:9D:39:66:DE:AF:78:F7
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer:       /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial:       0194BC3BDC073F233DBC37FBE0AD8BD662A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number:          0240
Signing time:             Fri 31 Jan 2025 12:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:26 +0000
Files and hashes:         1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
                          2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: VgeqrmvvDi0UJjqTRGErRc+1+hLFk+qlRiB+50FS8SY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:dc:07:3f:23:3d:bc:37:fb:e0:ad:8b:d6:62:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
        Validity
            Not Before: Jan 31 12:00:26 2025 GMT
            Not After : Feb  1 12:00:26 2025 GMT
        Subject: CN=d6761a384fb8e966a478e033429d3966deaf78f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8d:bf:5b:b3:6a:14:c3:36:26:88:da:99:6f:
                    b8:82:a9:15:a1:e4:f9:37:70:e7:48:08:7d:a4:e9:
                    55:6a:e3:32:e5:52:91:2a:dd:da:40:5f:8f:37:a9:
                    1e:10:d2:c6:cb:1c:ca:c2:b1:95:16:e4:7b:79:50:
                    28:b4:4c:d2:fd:85:94:ca:10:ce:89:40:93:ea:00:
                    ed:95:ce:37:d6:1e:df:27:a5:6b:d2:c1:5a:7f:a5:
                    29:6e:0c:2b:1b:6e:a0:43:39:5b:79:4a:0b:61:74:
                    19:cf:0a:7f:50:7b:09:1d:40:fb:64:65:79:88:5f:
                    ea:0d:60:b9:6e:ac:34:c5:97:d0:12:14:03:d7:d4:
                    f2:7b:a2:26:91:d0:b2:ad:53:19:01:3d:93:ba:2e:
                    0e:06:82:17:d7:2b:ff:68:17:d7:db:e3:85:1d:cc:
                    4b:8e:95:2a:52:fe:f7:1c:80:b4:67:02:87:36:69:
                    ef:26:f3:e6:72:c6:91:29:97:78:3f:f5:42:d2:29:
                    78:b4:58:16:ae:ac:73:d1:85:cb:f3:9a:07:aa:88:
                    af:7c:15:1b:b4:29:d9:0c:c1:fa:68:83:7f:56:4d:
                    79:d9:ca:a3:4d:a2:5b:01:c7:7b:b1:0c:ad:95:54:
                    f0:c8:f4:89:7a:02:fd:f7:46:32:b6:65:18:bc:d0:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:76:1A:38:4F:B8:E9:66:A4:78:E0:33:42:9D:39:66:DE:AF:78:F7
            X509v3 Authority Key Identifier:
                keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:fe:e4:ab:69:d5:17:80:95:93:d2:6a:dd:e2:01:22:b3:
         09:64:87:de:51:cc:30:7f:e4:8b:15:6e:38:5f:e1:11:71:0b:
         75:9b:e6:14:ec:f7:73:b7:6b:1a:e1:9f:69:45:db:0a:6e:27:
         10:fe:bd:20:7f:30:d0:bb:14:72:02:3b:8a:0c:0d:73:45:17:
         f5:36:8a:01:27:c6:a4:e3:a1:38:ab:f3:5f:73:a1:bd:6c:29:
         72:33:cf:d7:21:56:29:16:77:d9:66:32:cd:4d:dd:20:41:a1:
         c0:23:12:08:18:60:3f:04:6b:3e:90:6e:e7:a2:7f:6a:ba:a2:
         06:18:87:94:a9:21:b0:ca:93:e0:7c:39:89:c1:89:1a:34:58:
         bb:3f:14:a6:d5:73:7f:03:d0:fb:31:10:36:2f:88:22:7a:a1:
         86:6e:a4:13:d6:47:46:4d:5f:8d:8d:02:2b:83:c7:28:79:ab:
         68:47:5b:09:40:3a:77:16:33:6c:05:c3:e7:08:fd:10:67:67:
         db:fb:d8:93:53:85:94:0d:e2:5c:03:5a:c5:60:52:fe:61:ce:
         dc:1d:95:c2:3c:02:dc:89:75:be:17:d3:5e:73:69:49:31:6a:
         1d:c8:ac:2a:cd:70:b8:2f:16:b8:4a:c9:be:19:ba:e9:42:b5:
         db:5a:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:01 2025 by rpki-client