Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File:                     lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier:          U/WQ+BHoC15D01z9MP8R/Rgqt30UJ+sXy3s1cpAh9g4=
Subject key identifier:   8D:90:F7:50:73:3A:A2:78:0E:DA:8A:25:21:27:8F:21:3A:C8:4E:89
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer:       /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial:       0194BC0504943ECF5FDC48808FFBDB3F991D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number:          02AC
Signing time:             Fri 31 Jan 2025 11:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:32 +0000
Files and hashes:         1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: H9Fw5vYHnMonBmjlEjWZVztkOQAev9HFd3Df50/fYeQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:04:94:3e:cf:5f:dc:48:80:8f:fb:db:3f:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
        Validity
            Not Before: Jan 31 11:00:32 2025 GMT
            Not After : Feb  1 11:00:32 2025 GMT
        Subject: CN=8d90f750733aa2780eda8a2521278f213ac84e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:87:73:32:b6:69:58:c0:5a:7f:a5:1a:76:
                    8f:fa:20:e9:0e:ad:3e:64:ab:7c:e9:92:03:15:aa:
                    63:a2:2d:00:57:37:cb:b4:cc:3c:25:d8:3c:6b:39:
                    de:d9:ea:96:f0:ed:16:7b:19:76:db:32:b4:aa:44:
                    99:64:62:95:bb:6d:22:53:27:2c:fc:cf:62:c1:d6:
                    e9:e8:93:26:20:91:ff:b4:50:02:73:89:8a:c9:ec:
                    57:bb:74:0c:e2:e5:9d:da:63:a0:b4:53:21:f6:51:
                    50:98:ad:95:d9:48:cb:38:a9:3e:8d:65:65:f5:cd:
                    da:de:48:a5:dc:fd:55:07:70:1c:ae:44:2e:20:86:
                    80:53:4b:3c:54:09:13:7e:d4:59:76:26:e7:ca:0d:
                    8c:01:05:c9:cd:3a:5b:66:9f:76:ed:4e:04:56:44:
                    ac:cb:77:e4:1c:4f:21:ec:37:6e:7b:2a:c7:60:dd:
                    6a:a7:d2:64:f6:6f:99:be:4d:52:f9:f7:2c:89:63:
                    a5:b6:3b:18:9a:df:d3:d9:0b:9e:f5:28:4f:a6:9b:
                    8f:9a:dd:d0:bb:2d:a3:d2:04:47:dd:7a:97:ef:85:
                    c8:30:c5:a0:db:6a:ce:e2:a0:be:4f:99:aa:5d:e5:
                    89:6d:ca:1c:79:25:ec:04:2e:04:78:3f:85:41:5f:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:90:F7:50:73:3A:A2:78:0E:DA:8A:25:21:27:8F:21:3A:C8:4E:89
            X509v3 Authority Key Identifier:
                keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:79:73:21:4a:0a:00:63:2a:4d:5f:bf:b1:3b:c5:bb:f8:
         d4:75:d5:48:b9:51:6d:3e:45:92:4a:6c:be:d0:4f:ef:50:fb:
         83:8f:cb:67:ed:23:e3:41:46:b6:a4:35:44:1d:3c:01:09:0f:
         ec:8f:13:01:61:31:46:58:68:5f:79:5b:90:6b:b4:f2:39:df:
         6a:27:c7:54:9e:7a:ea:0a:c6:de:32:81:f9:22:9a:fd:7c:3a:
         54:ec:e3:37:b4:93:da:ee:ae:6c:1e:12:d4:b8:f9:89:1b:a6:
         35:14:03:25:85:eb:e1:d9:7d:bd:14:84:ac:bc:a1:49:e3:f4:
         c6:61:d9:da:f8:d1:8c:0f:55:f4:a1:28:95:56:43:89:f6:c2:
         e9:a6:ce:06:fd:49:a4:0c:d2:97:89:61:5f:f6:98:1e:1b:2c:
         79:a4:62:cb:e5:2b:43:04:b7:ab:66:d8:dd:0c:aa:92:01:73:
         77:85:a4:8b:62:21:d1:13:79:8d:fd:d2:39:c6:c4:d0:3a:45:
         12:16:49:06:81:b7:a4:8f:88:70:c8:74:05:ae:97:43:9f:9b:
         47:87:07:f3:8f:01:68:f3:09:98:b9:99:39:27:74:6b:17:4c:
         d6:a1:29:3f:8a:40:79:5e:2b:67:80:06:c1:9f:3d:84:fb:7e:
         8f:2b:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:10 2025 by rpki-client