Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          iIXEBw9sWXxzodG943KgihbAQVSvZwFyWqehLnFR/CU=
Subject key identifier:   43:51:D4:21:38:39:60:F4:93:13:10:67:63:9F:64:71:69:E0:C7:C1
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       0194BD85A05BED57E5427A0805A443BCA016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          0F6C
Signing time:             Fri 31 Jan 2025 18:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:38 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: Pgmbk1/ydjjx0o6wMN4x/FpmJ34mNZAZbpXBg58dKaA=)
                          2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a0:5b:ed:57:e5:42:7a:08:05:a4:43:bc:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Jan 31 18:00:38 2025 GMT
            Not After : Feb  1 18:00:38 2025 GMT
        Subject: CN=4351d421383960f493131067639f647169e0c7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:e4:cb:db:31:2c:ce:bc:e0:53:0f:bb:10:
                    11:1e:14:f4:d1:03:3f:3d:95:3f:85:bf:0e:c8:80:
                    c3:c7:6b:9f:36:90:0a:b1:5c:74:de:91:80:37:24:
                    d0:b2:a5:d4:45:df:08:4e:f8:a7:49:b5:a6:41:4a:
                    59:a8:51:99:ab:0d:1b:20:8f:11:b1:b4:d8:66:ab:
                    c9:d6:cb:b7:a1:5a:db:29:36:bc:52:ac:8a:12:2b:
                    a4:49:af:2a:b1:59:5a:84:82:b0:72:dc:be:67:85:
                    07:37:74:01:94:16:bf:d6:15:17:57:b6:43:fd:a8:
                    f4:26:bd:6b:bb:18:fd:50:b6:9f:21:22:ce:dc:d5:
                    52:af:c9:0f:7e:b6:01:41:cd:a8:01:79:bb:7e:2f:
                    48:c0:38:3b:45:cd:40:0f:74:f1:d6:42:4e:8f:7f:
                    99:8b:21:ac:d3:7c:38:26:62:ab:39:d7:44:10:de:
                    8c:fa:5d:cd:c2:b0:22:07:62:7f:29:68:d8:fb:d2:
                    ba:12:d9:74:c8:6d:95:c2:4d:c0:10:a0:f8:19:9e:
                    06:06:1e:1b:e2:0f:c5:ac:94:f4:0b:ac:43:2d:0f:
                    27:93:1b:86:3d:ab:64:05:85:f2:53:32:b2:4f:21:
                    20:a3:b7:50:6f:f8:02:32:9d:dc:32:12:bf:b7:9b:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:D4:21:38:39:60:F4:93:13:10:67:63:9F:64:71:69:E0:C7:C1
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:a6:fd:cb:33:81:49:2a:7d:28:e6:52:81:32:9f:19:2e:
         3d:d0:4c:88:fd:28:4b:02:38:26:3a:68:0d:9e:28:ed:65:f5:
         d1:a8:7a:06:c5:de:31:82:81:dc:3e:63:c6:a7:c1:20:21:56:
         55:8c:ba:50:96:65:5f:ba:7c:5b:93:2c:85:de:99:90:ab:ec:
         c6:48:4e:bc:ee:04:f3:cd:82:4c:d0:8b:88:f6:af:e7:a9:c2:
         59:26:89:63:25:ba:85:42:c7:7e:e3:01:cc:17:06:e1:c9:37:
         c8:97:55:16:85:ed:5f:71:ae:78:7f:41:3d:bf:99:70:cf:15:
         4a:81:3a:b5:2f:8c:51:69:d3:fc:41:6e:c1:0b:49:75:d2:05:
         bc:c1:b1:95:66:d6:27:e0:95:e5:f9:f6:82:fe:d2:63:71:ae:
         10:f9:6c:bb:37:fe:15:b1:a8:1a:d1:2c:1d:f6:a7:2c:26:d9:
         d9:43:8a:67:03:9c:c8:71:62:c4:27:68:6a:4f:7d:86:bc:1a:
         6d:13:81:25:af:66:c7:b9:8a:ed:8a:bf:d5:05:9a:39:96:11:
         cc:88:d9:29:8a:cc:0b:3b:b7:16:46:d6:db:58:b4:af:78:d7:
         4a:99:eb:97:9b:3b:da:5b:b1:f7:ee:ee:f7:c9:7e:56:ce:32:
         17:89:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:01:59 2025 by rpki-client