Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File:                     LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier:          WqVHI6tC2yXS/JX0ezFdpW0FRzWrsq/2d6zSgRcwn9Y=
Subject key identifier:   34:95:C2:02:D8:0F:59:D9:A9:99:80:40:2C:CC:8F:FA:65:86:A0:F7
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer:       /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial:       0194BBCECB86B0099FF883ED4370BB458AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:19 +0000
Files and hashes:         1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
                          2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
                          3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: f8+qo3To8Mm2uwxJ5Q4+mksMVTwQcLOjKPgJHlVzNKA=)
                          4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:cb:86:b0:09:9f:f8:83:ed:43:70:bb:45:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
        Validity
            Not Before: Jan 31 10:01:19 2025 GMT
            Not After : Feb  1 10:01:19 2025 GMT
        Subject: CN=3495c202d80f59d9a99980402ccc8ffa6586a0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:a4:4d:66:4a:a1:a1:38:ec:ce:2a:c6:a4:
                    b2:bb:63:6a:93:85:38:1a:4c:3b:b1:60:29:21:85:
                    e1:eb:6d:a2:a4:00:30:23:ef:2a:ad:fb:09:e3:f7:
                    c9:1b:ba:aa:7e:1f:3b:03:a3:3a:e9:ee:a5:c9:af:
                    61:1d:8b:72:58:f7:24:7e:0f:2c:a0:8d:0a:a5:76:
                    f9:ae:bf:2c:32:11:71:36:68:87:c9:ad:70:01:c4:
                    af:e7:c1:f5:62:80:26:4c:3b:60:e5:1b:af:c3:28:
                    a4:45:c2:50:4c:30:84:7d:4f:9b:f4:21:e1:04:ba:
                    0f:cd:69:8f:b0:fc:cf:cf:c4:e8:e2:11:c9:1f:f7:
                    cb:55:fe:4e:23:7d:7c:3f:05:77:f7:81:69:3b:4d:
                    f8:38:a6:2c:46:a8:75:cc:09:97:86:f0:f4:b4:44:
                    b9:a9:05:c3:8c:22:2d:b4:78:37:1e:88:41:f8:1b:
                    a8:86:8b:81:83:20:d1:14:13:bf:58:ca:17:44:2c:
                    5d:ce:8b:94:8f:46:6f:51:8e:d9:9c:04:b9:37:77:
                    d0:9c:35:78:4c:43:6f:62:39:93:78:8c:71:64:d4:
                    e7:32:4c:28:da:ee:12:50:61:0a:57:03:47:66:e8:
                    69:4f:b9:12:cd:7e:fb:2d:14:d0:39:02:29:4c:97:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:95:C2:02:D8:0F:59:D9:A9:99:80:40:2C:CC:8F:FA:65:86:A0:F7
            X509v3 Authority Key Identifier:
                keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:36:f0:5d:1d:a3:59:e1:b0:a1:f8:fe:82:23:40:85:da:30:
         72:d6:4b:9b:63:2a:99:8f:f7:7c:cc:a1:3d:44:4e:cc:78:a3:
         bf:0e:d6:f1:92:98:43:76:7f:86:37:1b:91:6c:ee:fd:fe:c2:
         03:0e:25:3f:5e:a7:d6:1f:e2:5c:85:01:69:f1:08:87:5a:3d:
         78:15:e9:b3:65:6d:30:c2:65:4a:25:0d:27:bf:39:13:3c:b6:
         d8:e3:9e:85:7a:5d:92:0e:a3:a8:0f:52:4e:22:61:ef:2e:dc:
         4f:05:49:e4:cf:72:67:e9:ba:06:c8:82:af:37:73:25:9d:b6:
         a2:89:d8:7b:8a:e2:22:3f:80:f7:95:e9:56:2d:5b:7b:60:c3:
         54:e4:fb:d7:9c:e6:3a:44:11:94:93:4a:57:40:91:03:d1:f9:
         44:e2:9e:07:a0:36:bd:e4:be:3d:58:13:37:13:ca:eb:62:6b:
         58:8a:ed:cd:cf:f7:5a:2c:c7:8d:a9:9f:17:c7:c3:05:ff:ff:
         11:31:c8:50:82:41:78:ab:14:31:dc:dc:22:ea:ed:9b:25:9d:
         13:9a:47:40:76:f2:81:45:df:e6:ab:6b:ce:89:83:fc:14:69:
         06:68:ae:5d:92:7e:8b:52:68:10:6d:24:db:21:18:8e:ba:6c:
         95:2d:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:36:17 2025 by rpki-client