Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          rZvt2v9Tqb/KOIF7KyV5eu9Pj6qUnKa42ZVx7Dnl07Y=
Subject key identifier:   7C:CF:75:9D:74:B6:6E:E0:8F:BD:BF:D3:43:F8:39:C5:A3:41:12:50
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       0194BC3BD3AC2935D5BFD442D756E9758DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 12:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:24 +0000
Files and hashes:         1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=)
                          2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: aOZ1F49QVRuMI2FlXvdIR1/9KF0XBZ+I9L2CJpPvpHU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d3:ac:29:35:d5:bf:d4:42:d7:56:e9:75:8d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Jan 31 12:00:24 2025 GMT
            Not After : Feb  1 12:00:24 2025 GMT
        Subject: CN=7ccf759d74b66ee08fbdbfd343f839c5a3411250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:8b:73:62:ec:a8:a6:24:dc:d5:fb:ce:11:
                    80:6d:90:78:b0:bd:ca:32:e7:91:7b:6e:c5:46:c1:
                    c2:a1:41:e2:0b:c2:ec:df:0f:53:86:00:27:a9:96:
                    f0:f4:bc:e5:09:5c:c6:40:58:e9:3b:92:78:66:d5:
                    9b:79:46:a5:a4:4e:c5:d3:54:12:9d:30:d4:f0:ea:
                    b4:98:fc:50:03:01:cf:bd:b7:e8:b5:bf:dc:d1:23:
                    03:4a:35:8b:83:80:13:b7:09:14:a1:d1:57:68:f1:
                    af:bb:bb:fc:10:8d:e2:e1:47:c4:79:92:5b:ea:f4:
                    bb:a5:55:8b:61:85:11:73:d2:1a:b3:6e:27:2f:19:
                    d8:0e:a6:a1:42:51:6c:41:d2:ca:7a:12:18:61:f7:
                    2e:2c:fc:78:d0:9f:4f:21:57:22:29:7a:9a:5f:eb:
                    44:71:08:63:75:21:70:9b:fb:d8:f7:42:b6:9c:cf:
                    23:2f:cd:05:52:da:eb:a6:14:22:2a:01:5e:b8:c3:
                    08:4b:69:2c:6d:c7:3d:36:90:96:f7:a1:2f:ae:40:
                    3d:38:4e:e0:46:20:82:22:29:c4:a1:d9:79:d7:23:
                    80:46:fd:89:74:cf:52:c9:1d:c6:1e:78:3c:a3:8c:
                    cc:11:96:d3:17:bd:9a:1b:e5:72:e9:ff:f1:7e:8e:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:75:9D:74:B6:6E:E0:8F:BD:BF:D3:43:F8:39:C5:A3:41:12:50
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:c7:d5:68:cd:13:5b:47:43:84:13:78:e1:8a:3c:5e:c4:
         ad:a6:77:be:17:77:b2:22:d9:8e:e7:be:9b:e4:33:6f:9d:4c:
         c5:c3:20:b1:88:fd:45:75:bd:99:d8:c4:9e:6d:ab:4a:dc:bc:
         f6:91:af:07:cb:33:86:c6:a0:33:51:75:a1:30:dd:0e:45:b2:
         46:7b:1b:25:e0:a6:4b:1b:72:e7:08:a6:e8:92:bb:d9:1a:59:
         44:da:22:63:92:24:7f:42:1c:df:65:20:ff:39:56:51:1d:15:
         ca:3c:39:d8:5d:d6:63:cf:70:21:5a:91:4b:f0:01:ed:3b:6f:
         6a:db:d0:d6:58:42:93:32:e7:ed:df:26:ae:86:3a:54:c5:44:
         16:b4:7d:b2:5d:30:03:03:16:a7:a7:6d:25:1a:c3:a7:85:07:
         d6:11:81:98:38:4d:68:98:f2:e8:bf:ef:a3:d7:bf:26:ae:90:
         1d:ae:a5:24:df:19:d1:82:f9:2c:cc:5a:8e:a0:d5:b2:d7:6f:
         65:d8:6d:3f:46:e5:a1:04:d7:93:8a:74:19:a7:bf:e4:85:b8:
         4a:c8:d7:0e:3e:a4:83:f0:a5:12:ea:f2:ed:34:27:45:32:c2:
         e1:bd:c3:a9:c1:9c:58:37:79:16:69:60:af:c2:d3:cd:b5:9a:
         3e:18:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:56 2025 by rpki-client