Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File:                     ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier:          hESRqYuYJ1CK4Zkw7PIt2RAEYpRyMdnLphJWWv/6HCU=
Subject key identifier:   13:2D:9F:FA:01:17:FA:AA:58:0A:69:25:91:3A:15:EF:C2:05:B4:CA
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer:       /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial:       0194BBCEE482495DE0750223AB4AA59C3E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number:          0A27
Signing time:             Fri 31 Jan 2025 10:01:25 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:25 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:25 +0000
Files and hashes:         1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=)
                          2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: J8By8ZD4K+CFDst4FsUO/wMvkATxS9y0N9+Ae8rCyys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e4:82:49:5d:e0:75:02:23:ab:4a:a5:9c:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
        Validity
            Not Before: Jan 31 10:01:25 2025 GMT
            Not After : Feb  1 10:01:25 2025 GMT
        Subject: CN=132d9ffa0117faaa580a6925913a15efc205b4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:b4:b7:c4:2e:29:3f:d1:d3:74:1a:a1:a1:
                    ad:bd:d7:12:d0:b3:65:44:bb:96:9f:3a:ce:5d:bc:
                    24:29:1d:a4:df:14:bb:88:63:dd:80:6b:62:58:c2:
                    5d:e2:df:fe:8e:4a:7d:eb:98:37:36:df:27:b3:d6:
                    0a:87:c0:aa:0e:1a:2b:2b:37:5e:cb:9d:74:bb:03:
                    cd:cb:9b:0f:0b:22:1a:32:8a:33:67:c0:c9:89:d6:
                    3b:d7:3e:24:a6:0f:c4:5b:83:74:96:8d:cc:11:1a:
                    e4:58:96:91:38:61:d9:ed:53:7e:74:fe:ae:93:06:
                    6f:70:df:62:20:5b:ba:13:f0:9f:4f:a6:99:83:3e:
                    17:cf:c4:6e:c2:4b:02:f1:31:b8:49:58:d7:a6:a7:
                    62:84:d5:bf:f2:b0:40:40:71:ca:ab:4e:d7:57:00:
                    a0:e9:9b:51:24:7d:a4:49:4e:93:2b:3b:64:ac:1d:
                    f9:c2:60:06:fc:58:d3:70:1a:08:4f:5f:1a:d3:a0:
                    7d:9d:fc:07:49:4f:d1:fe:90:16:a9:84:cf:44:87:
                    5a:c4:3e:8f:8b:d0:25:49:cf:fe:58:43:19:07:20:
                    6b:ba:1a:d2:41:f5:ed:a5:9d:3b:5c:0a:87:0c:22:
                    d2:7f:04:3c:57:a9:23:15:08:74:5d:4d:3d:a6:54:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:9F:FA:01:17:FA:AA:58:0A:69:25:91:3A:15:EF:C2:05:B4:CA
            X509v3 Authority Key Identifier:
                keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:62:b2:0a:4e:1e:68:f8:8c:28:82:bd:8c:7a:dc:a1:de:cd:
         19:12:ba:39:ef:76:f9:13:d5:9f:f1:69:e6:21:27:dd:70:c9:
         a4:fa:74:fb:c3:7e:7d:cb:18:a9:3d:67:bc:57:de:10:4e:50:
         cb:d2:95:dd:d6:60:86:ee:ce:87:74:68:25:03:54:7c:3d:7b:
         e7:4e:c5:6e:2c:48:5c:b8:63:39:12:b2:0e:35:e8:bc:c2:5b:
         a0:bc:b0:42:db:3a:ac:3d:de:61:91:8b:df:fd:83:4c:74:c4:
         07:7f:a9:6d:e8:10:79:dc:d8:7a:e5:04:cf:7a:15:16:72:42:
         93:85:cc:1b:88:90:8c:33:bc:cc:5b:b9:b4:21:13:2f:17:02:
         33:1b:7a:51:aa:fd:16:6e:15:41:14:17:35:cc:e7:eb:dc:a9:
         96:91:b8:68:23:b2:70:8c:61:92:4e:da:8d:17:68:65:07:de:
         a4:0f:b1:c0:42:8a:a2:c6:3b:56:5a:05:31:cd:ef:7b:bf:49:
         81:8a:5f:ef:87:59:a3:8d:c4:34:38:3a:49:a5:18:b4:ec:82:
         88:a7:7d:f0:ec:d3:1d:eb:d7:ec:7b:05:dd:1c:d0:5b:77:1f:
         e3:82:10:d6:79:96:41:74:5d:9d:f3:a8:ea:08:d6:9d:84:ee:
         b1:70:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:26 2025 by rpki-client