Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          Ax6tJf/ABVafygmZ7lenYHtnF9Jzvc395pj2PvjQ1QY=
Subject key identifier:   70:AB:32:45:87:54:5C:E9:0D:BC:67:8D:62:9B:DF:9C:9B:BA:50:00
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       0194BD1777459875E47AFD727D46D93C5875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          0E36
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
                          2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: nY22/MNLIhKdMCnwWGvFam0S3Nt+fznlBYnGXqwUyrQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:77:45:98:75:e4:7a:fd:72:7d:46:d9:3c:58:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=70ab324587545ce90dbc678d629bdf9c9bba5000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:fd:f8:d7:8a:54:2c:70:ed:ca:b6:96:23:
                    2d:c1:92:6b:3c:27:63:f7:9c:49:bd:15:23:3d:2a:
                    60:cd:cc:66:f1:6b:82:e9:ac:ef:1d:33:42:a7:38:
                    ff:35:09:5a:f0:e7:40:61:87:70:38:44:61:db:a7:
                    92:72:db:0d:ec:38:fd:c3:21:67:6b:25:ea:68:fc:
                    87:9b:57:f5:ef:e0:23:54:eb:3a:5f:4d:1e:c2:5f:
                    0d:41:6e:d2:2a:fb:58:79:00:90:b6:f0:75:38:80:
                    e8:c6:81:97:bc:5a:a3:89:68:37:ed:7e:40:94:0c:
                    98:56:66:6b:27:90:a2:4d:57:32:ac:4b:89:44:1c:
                    8e:7c:0f:a0:ba:f8:a3:cd:bd:89:31:01:6f:c6:bb:
                    f8:d0:e0:c3:88:b1:d3:50:12:24:ef:ea:f5:0c:5c:
                    57:dd:db:6a:94:cd:92:49:bc:94:4a:bf:24:36:2f:
                    07:4f:ec:7d:c7:ad:e9:2c:72:c0:4e:a1:51:1c:9f:
                    69:86:f1:95:c2:9c:57:78:3d:90:3d:24:85:c8:55:
                    29:82:d8:16:d8:a8:a5:07:4d:46:5b:e9:3a:2b:0e:
                    c0:1a:54:0e:66:fa:77:60:fe:20:c4:66:c9:40:0f:
                    9c:f2:2e:d7:6f:d5:b1:eb:c5:4d:9b:55:e3:7b:e9:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AB:32:45:87:54:5C:E9:0D:BC:67:8D:62:9B:DF:9C:9B:BA:50:00
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:95:05:78:49:47:07:ec:7a:5a:58:1c:92:aa:58:cb:9c:
         92:3d:b7:9b:17:42:b6:c5:81:c3:be:93:da:fd:f6:f2:bf:bc:
         fe:d3:bc:27:8b:fa:a4:56:ba:3e:d3:22:0a:4a:1c:2b:ff:5b:
         a8:0c:70:4f:e3:b9:8d:40:8b:01:fb:fc:c1:31:2b:89:54:13:
         cf:4e:e4:03:8b:14:25:f3:5c:27:38:2e:16:43:a8:73:46:c7:
         ce:9b:25:c6:9e:be:42:18:68:d5:5a:f5:7b:ee:e0:94:db:07:
         77:5d:cb:22:a6:ef:5d:1f:2f:41:5d:d3:8e:3b:af:35:3e:b8:
         67:fa:e3:07:e6:6f:ef:cd:8c:a9:6d:fd:8b:ea:d9:2c:0b:57:
         57:b6:c8:88:b9:7a:e0:f4:5f:85:90:54:fd:42:39:55:c6:af:
         7c:98:68:eb:39:cf:af:07:d6:d3:0d:09:a2:d7:16:e2:c2:5a:
         d0:2e:7a:0b:c0:76:72:1c:8d:6e:40:1e:d6:73:94:51:5c:58:
         c5:ec:ae:1c:91:4a:d0:3b:2d:76:22:b2:1e:0e:35:65:ae:78:
         cd:ef:bc:a7:bc:f0:39:f0:94:ea:d4:b4:a1:e5:b2:75:87:32:
         b7:00:99:53:6d:2e:88:41:7c:b9:c2:70:c5:b7:24:17:f0:26:
         49:a4:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:16 2025 by rpki-client