Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File:                     dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier:          eM2XI+BYguCL24NzRASYxBDqYn+RLrw/GhAByuDLTec=
Subject key identifier:   01:9B:F6:4D:1A:AB:77:51:9D:3C:E8:D7:DE:52:AD:B3:16:D4:66:B4
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer:       /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial:       0194BC727BC2D7F5F4CA86BB1581793B82EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number:          074E
Signing time:             Fri 31 Jan 2025 13:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:06 +0000
Files and hashes:         1: 8whQoCNJkcO8xIN4te953BPSKIE.roa (hash: Hi+Lg2/SC23FTXEW5HEq9SyVqw0M6I1sge9enc2fYd4=)
                          2: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: 0tE4Y9Kj4iYFjQNShRmZS+fmCYGLHgiUK8AHcU4za1Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7b:c2:d7:f5:f4:ca:86:bb:15:81:79:3b:82:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
        Validity
            Not Before: Jan 31 13:00:06 2025 GMT
            Not After : Feb  1 13:00:06 2025 GMT
        Subject: CN=019bf64d1aab77519d3ce8d7de52adb316d466b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1c:68:d4:6c:5b:90:0e:fe:f6:bc:35:f6:2a:
                    ed:f8:c9:c6:db:27:1c:f8:84:7b:ba:59:b0:4a:eb:
                    7b:69:7e:8f:1d:a2:1a:eb:ef:e2:d2:92:dc:9b:7e:
                    d3:89:77:f0:6f:54:1e:9c:9c:72:84:7a:79:76:c3:
                    98:91:24:57:d7:93:bf:88:65:3e:88:ce:71:43:bc:
                    2f:f8:ef:09:1b:6c:3c:fc:ad:83:f1:29:a6:26:a1:
                    50:69:e7:23:15:cd:f4:2e:a6:60:c1:1e:66:a3:fa:
                    bc:58:9f:87:f7:85:77:cc:e7:1d:27:23:fc:6d:d4:
                    22:1a:27:02:ad:07:3b:f1:00:17:e5:78:d6:e1:fd:
                    d0:f8:60:d2:d8:bc:73:01:74:38:c0:eb:fb:c4:0e:
                    d8:fe:0a:2e:17:b3:a3:33:77:48:b0:2b:2e:fa:18:
                    0b:cc:50:c2:ef:87:bc:fc:aa:ff:b1:4e:e3:a1:04:
                    23:b5:5c:36:00:02:44:d7:65:7f:86:54:af:18:86:
                    24:b9:56:72:d8:ad:8c:6d:f1:2e:90:ac:6e:13:6e:
                    8b:d1:74:d5:07:28:d8:c2:2b:17:32:79:d6:d4:7f:
                    94:56:96:2d:4b:f9:a1:62:7e:45:85:5e:73:bb:6f:
                    b6:a1:d1:ce:80:ca:fd:bc:63:eb:81:16:14:50:d8:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9B:F6:4D:1A:AB:77:51:9D:3C:E8:D7:DE:52:AD:B3:16:D4:66:B4
            X509v3 Authority Key Identifier:
                keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:00:30:ae:5f:2a:e5:a2:54:e4:4c:fc:b2:7a:6f:47:1a:
         c5:99:32:12:8c:01:e4:e0:a2:55:5c:c4:36:36:1a:8a:7d:53:
         6d:44:42:be:75:5b:4a:56:f0:8a:db:89:06:2b:b9:ed:52:0c:
         ab:42:8c:65:72:35:27:e5:27:9d:b4:5e:52:7f:2d:ed:88:72:
         37:41:a3:da:cd:01:05:77:af:5f:40:d6:5d:50:d1:1e:a5:e8:
         ba:aa:43:04:c9:59:d1:2d:dc:a7:38:38:d2:c1:9e:34:87:13:
         0c:08:79:dd:b2:6b:89:68:ef:04:08:ae:31:30:65:e9:cc:06:
         7a:64:4c:2b:08:9a:12:7e:e7:04:1b:cb:00:94:5d:f4:15:50:
         fd:ff:81:c0:02:47:ea:0f:f3:d9:da:e5:42:c0:a9:ef:06:84:
         c3:b2:a8:78:9e:da:65:fe:b9:5c:fd:25:dc:e5:16:56:a7:7c:
         e9:cc:dd:3d:e1:eb:08:4d:d0:d9:7b:a7:e4:26:49:f7:d6:1e:
         45:e3:dd:41:68:df:58:c4:bd:32:a2:49:a6:57:a4:db:41:4d:
         ee:b5:ba:ad:40:f0:20:62:56:43:5a:df:af:b6:35:e1:64:f5:
         8c:79:3a:c0:13:b7:86:e1:64:5e:fc:64:34:60:c5:16:a2:68:
         44:0e:9f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cnvC1/X0yoa7FYF5O4LvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw
OWY3N2UwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
EygwMTliZjY0ZDFhYWI3NzUxOWQzY2U4ZDdkZTUyYWRiMzE2ZDQ2NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Bxo1GxbkA7+9rw19irt+MnG2ycc
+IR7ulmwSut7aX6PHaIa6+/i0pLcm37TiXfwb1QenJxyhHp5dsOYkSRX15O/iGU+
iM5xQ7wv+O8JG2w8/K2D8SmmJqFQaecjFc30LqZgwR5mo/q8WJ+H94V3zOcdJyP8
bdQiGicCrQc78QAX5XjW4f3Q+GDS2LxzAXQ4wOv7xA7Y/gouF7OjM3dIsCsu+hgL
zFDC74e8/Kr/sU7joQQjtVw2AAJE12V/hlSvGIYkuVZy2K2MbfEukKxuE26L0XTV
ByjYwisXMnnW1H+UVpYtS/mhYn5FhV5zu2+2odHOgMr9vGPrgRYUUNjNswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGb9k0aq3dRnTzo195SrbMW1Ga0MB8GA1UdIwQY
MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt
YzNjODBlNDcwNGU0LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0
LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgkAMK5f
KuWiVORM/LJ6b0caxZkyEowB5OCiVVzENjYain1TbURCvnVbSlbwituJBiu57VIM
q0KMZXI1J+UnnbReUn8t7YhyN0Gj2s0BBXevX0DWXVDRHqXouqpDBMlZ0S3cpzg4
0sGeNIcTDAh53bJriWjvBAiuMTBl6cwGemRMKwiaEn7nBBvLAJRd9BVQ/f+BwAJH
6g/z2drlQsCp7waEw7KoeJ7aZf65XP0l3OUWVqd86czdPeHrCE3Q2Xun5CZJ99Ye
RePdQWjfWMS9MqJJplek20FN7rW6rUDwIGJWQ1rfr7Y14WT1jHk6wBO3huFkXvxk
NGDFFqJoRA6fOA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:07 2025 by rpki-client