Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File:                     DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier:          Wir9hNAh7NBDuD2d6Iuc8XblO2n4kEAsmUIZhLXl1zg=
Subject key identifier:   70:10:3E:45:5C:1F:EA:82:92:17:93:13:67:60:A6:A2:E8:49:29:99
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer:       /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial:       0194BCA9853C342636C2A9643B39304EB4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number:          06D1
Signing time:             Fri 31 Jan 2025 14:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:13 +0000
Files and hashes:         1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: iyhdGMZm4xQ2Oy6oUOwCv3iEzDjkocXy83zHdcKpvmo=)
                          2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
                          3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:85:3c:34:26:36:c2:a9:64:3b:39:30:4e:b4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
        Validity
            Not Before: Jan 31 14:00:13 2025 GMT
            Not After : Feb  1 14:00:13 2025 GMT
        Subject: CN=70103e455c1fea82921793136760a6a2e8492999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:77:80:d6:76:31:39:3e:d8:cf:0d:78:38:
                    91:3b:c1:92:c0:ed:c4:d2:0c:ff:e7:ec:89:23:6f:
                    21:ec:9c:27:1a:eb:c7:73:a5:7d:59:19:c5:1a:3b:
                    c9:17:cf:88:1e:a5:23:f2:db:3b:ec:36:8f:41:e0:
                    b6:97:ae:20:c1:12:bf:ab:54:23:67:32:34:af:d0:
                    2f:b1:ac:e8:20:c3:47:6f:14:7a:dd:4e:8d:b5:c5:
                    09:10:87:1c:ad:7d:ee:7b:46:f9:a8:02:c5:55:e7:
                    cb:27:33:06:6b:f1:4a:af:cd:ac:df:71:76:b7:54:
                    d3:1f:58:ab:6b:29:4c:33:45:93:bb:9b:01:20:a1:
                    42:df:a5:f8:70:66:3e:90:d7:9b:46:8e:ad:17:ca:
                    c6:73:dd:88:3b:97:6c:cd:45:41:db:a8:73:9b:d0:
                    4b:a7:8e:6e:9d:84:19:88:16:b0:4f:4d:b3:45:0a:
                    51:f5:d2:ae:ae:44:0e:00:0d:4e:bb:75:3d:d5:0e:
                    27:8f:b7:60:99:ca:b5:ca:b1:be:30:9e:c5:51:2a:
                    c8:a7:c0:5e:1b:48:53:88:0b:b5:52:7a:ee:72:e1:
                    02:d3:ab:a5:49:2c:c1:60:89:f8:de:fd:68:68:e1:
                    10:e1:05:69:15:21:6a:23:7b:ac:26:c5:c9:31:fe:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:3E:45:5C:1F:EA:82:92:17:93:13:67:60:A6:A2:E8:49:29:99
            X509v3 Authority Key Identifier:
                keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:11:8c:9a:40:4f:bb:e8:31:2a:61:e9:05:0f:1f:2b:e9:
         11:c9:85:9f:8c:03:33:b5:ac:c7:d4:21:cf:e8:72:ab:a5:de:
         1e:31:8f:75:71:fc:87:c5:f5:b8:15:d7:cf:e0:7b:a3:09:5f:
         5e:af:bb:9a:42:56:23:ef:cc:72:7f:48:38:60:fe:2e:87:77:
         b1:23:b1:e8:3c:14:0a:2a:99:d2:1a:6b:44:f4:4b:b4:a7:c6:
         b4:03:90:3a:58:9f:ec:90:3b:f2:4d:31:cc:65:a4:d6:6b:78:
         e0:2a:14:9a:28:98:e3:fb:a7:49:d7:a8:fb:c6:24:27:2d:50:
         94:3a:84:42:99:84:07:52:85:87:05:ce:f2:22:db:ac:4c:6e:
         56:e0:95:88:09:50:51:50:6b:f1:a4:0d:79:d0:dc:ef:06:0c:
         00:d1:7c:e4:a2:ab:28:16:0c:c6:af:d0:02:3d:55:5c:4f:a1:
         d5:82:0b:41:ab:f2:47:42:e0:ef:33:4a:1f:ed:33:12:fa:2b:
         0e:e9:5d:54:66:4b:d3:7e:bf:e8:cf:2c:12:97:05:9e:d1:7f:
         3f:f3:54:74:35:04:58:8e:5a:00:22:35:a2:b3:49:03:60:e4:
         05:dc:59:a5:21:88:7a:ba:e4:da:5a:23:70:60:ca:ef:58:18:
         9a:18:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:09 2025 by rpki-client