Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File:                     LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier:          WWUwonqBph6LI+QTfaKZNvosh2LOfX2x+EEUDkBy9kU=
Subject key identifier:   22:B1:47:41:9F:BC:46:58:43:E9:20:05:87:B9:26:69:85:3A:2A:F2
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer:       /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial:       0194BD17C2FA20A6561FCF9C6B2A9343967B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number:          0340
Signing time:             Fri 31 Jan 2025 16:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:38 +0000
Files and hashes:         1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: GoY9NdvSlxr9XK2bpVdbUkQiTq81n2aBI7oikvTRSRI=)
                          2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:c2:fa:20:a6:56:1f:cf:9c:6b:2a:93:43:96:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
        Validity
            Not Before: Jan 31 16:00:38 2025 GMT
            Not After : Feb  1 16:00:38 2025 GMT
        Subject: CN=22b147419fbc465843e9200587b92669853a2af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:78:50:16:9a:b6:2b:10:69:7e:90:33:12:
                    2e:a8:b6:7a:95:d4:1d:7b:1b:e1:d6:64:6f:34:36:
                    b4:c8:0f:b4:09:4c:7e:2e:da:e1:3c:dc:90:e3:a3:
                    b0:30:d4:00:c6:44:3c:9f:24:6c:41:e7:27:69:9a:
                    0f:e8:c3:cf:33:57:37:4a:d4:65:65:0d:54:68:54:
                    d8:3a:43:11:c3:f7:b1:c2:de:30:34:fe:82:a4:db:
                    25:38:0b:d1:9b:41:b0:c8:11:5c:39:f5:ba:9b:62:
                    5b:30:92:62:6b:72:4f:e1:fa:e1:a7:03:a8:90:ae:
                    e1:78:d2:05:39:e7:4e:7e:e6:eb:46:32:d7:51:62:
                    6f:8f:be:ab:4e:24:ad:cb:06:88:f7:2c:5e:75:3a:
                    8c:70:fa:78:f2:e8:83:e4:c2:48:92:87:01:13:ad:
                    3f:a3:9b:9e:8d:ee:92:74:43:31:0a:7e:95:38:ef:
                    8f:25:48:86:78:35:fd:67:75:83:fd:78:bb:17:a9:
                    d5:32:31:c4:4d:65:00:7e:09:1d:bc:8e:85:4e:d5:
                    2a:8d:a4:ba:f0:6e:09:10:e2:3c:78:04:97:5b:12:
                    ff:15:6a:79:9f:4c:4b:6f:14:28:81:69:7e:8a:75:
                    a3:1e:1e:4a:40:3b:11:29:ce:12:39:bc:f6:76:73:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B1:47:41:9F:BC:46:58:43:E9:20:05:87:B9:26:69:85:3A:2A:F2
            X509v3 Authority Key Identifier:
                keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:18:92:58:11:d6:ac:84:25:03:56:34:33:59:1f:70:5a:d5:
         0d:b6:b4:1a:57:bf:55:34:86:a5:51:62:4b:fe:34:f7:4e:0a:
         19:9c:58:1c:9d:b8:8f:80:27:a5:fe:71:bc:7c:7d:3b:60:bc:
         33:d7:9a:00:ea:24:cb:e1:c5:28:44:36:30:ff:ee:23:76:b8:
         b9:4b:56:2c:41:fa:6f:f4:8d:00:83:67:51:c0:ba:a4:23:bd:
         7c:44:6a:02:a5:b8:2f:f2:d8:a3:5e:e5:8d:12:c3:19:b4:2e:
         5e:77:e0:62:20:38:12:08:b4:4f:9c:c1:b8:5e:60:d5:4d:61:
         43:97:ac:6a:b1:31:d8:7a:e2:77:47:d1:3c:c4:57:cd:e0:ce:
         ce:33:2b:6d:e7:5f:12:45:b6:6d:30:4a:15:c6:55:31:20:23:
         3a:2b:92:4e:53:b3:aa:0f:47:5d:78:1e:42:99:5d:1d:39:3c:
         20:d5:d5:bd:53:8b:4c:8c:51:74:d9:d8:71:04:45:52:be:ef:
         50:56:4d:87:b5:92:ff:60:2e:23:b8:ca:9d:cb:d4:4a:a1:26:
         ad:7d:74:7e:28:37:44:dc:8e:d0:da:51:de:1c:f0:40:b2:26:
         d6:ae:f6:6c:77:06:61:7f:3d:ed:11:c0:bc:b6:fb:6e:dd:55:
         10:e7:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:28 2025 by rpki-client