Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          ec0hjN99QfQ/KcC3AI6LOOzyJKIqvVJNQVofuhPLK1U=
Subject key identifier:   08:40:B4:FE:5B:B4:F5:B3:A4:9B:AD:31:D8:98:87:02:5D:8E:4C:92
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       0194BCA9F471E5421434F41082BED43C1327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          143A
Signing time:             Fri 31 Jan 2025 14:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:42 +0000
Files and hashes:         1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
                          2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
                          3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
                          4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
                          5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
                          6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: AxAdG88riCqBdQoQqfg2XmljZK1IXiivIqTnmGMnzeI=)
                          7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f4:71:e5:42:14:34:f4:10:82:be:d4:3c:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Jan 31 14:00:42 2025 GMT
            Not After : Feb  1 14:00:42 2025 GMT
        Subject: CN=0840b4fe5bb4f5b3a49bad31d89887025d8e4c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:46:2a:fd:5f:31:a7:3d:b0:ab:c4:c9:98:
                    47:0f:5c:80:82:32:5b:ae:5d:b7:f3:20:74:6e:16:
                    ab:c6:0f:4a:4b:35:21:36:a4:4f:87:60:ad:20:b3:
                    79:00:ea:e2:97:08:c1:4b:46:f9:60:54:f8:b4:f6:
                    7b:ef:f8:b2:52:60:c0:25:1d:cd:ef:51:03:82:43:
                    21:24:89:18:6d:7d:ce:6b:35:c6:ab:22:0a:60:e6:
                    8a:51:d4:d5:46:34:20:91:3b:f6:05:c9:ed:bf:3d:
                    e9:9f:2a:92:7a:c4:c4:03:4b:14:5b:9b:de:dd:a2:
                    34:c9:71:be:96:68:d1:27:eb:7d:3d:fb:1a:3b:b1:
                    d5:56:49:7b:ae:4d:d9:fb:b7:89:03:61:d3:2b:fb:
                    e1:dd:37:68:3e:9f:3d:d8:83:e0:ef:f0:1f:1d:79:
                    99:bf:69:0c:ee:ee:fe:22:95:08:95:00:47:c5:8b:
                    20:ae:25:38:83:90:34:78:05:f6:15:38:55:a5:96:
                    bd:fc:75:58:78:81:28:0c:87:73:90:52:8b:7b:7e:
                    63:1b:ba:55:af:8c:72:d8:19:ab:0b:93:e1:d4:fb:
                    07:20:fb:f7:23:2f:5e:8b:0b:0d:67:7a:95:60:42:
                    66:07:7f:b6:d4:3e:c1:b3:be:b6:c3:6b:26:cc:51:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:B4:FE:5B:B4:F5:B3:A4:9B:AD:31:D8:98:87:02:5D:8E:4C:92
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:18:c1:32:59:01:52:40:33:15:ed:2c:05:de:8f:ba:5c:
         79:7d:2a:aa:e6:e4:5e:4c:3a:01:d7:e8:ad:42:ff:55:36:9d:
         0f:27:d3:a2:2b:33:28:67:b7:e1:1c:13:84:1c:91:08:34:42:
         05:d7:b7:74:04:90:95:5a:69:c4:4a:df:7b:da:f8:e1:ec:fb:
         e0:f6:36:ee:c0:c1:fa:ae:12:33:64:62:80:08:1e:05:48:d7:
         ee:55:d0:5e:d6:26:84:18:1a:ee:4c:0e:a6:2c:4d:41:84:ff:
         a1:45:94:02:32:25:97:ae:98:5a:e9:63:09:89:87:75:49:d7:
         77:30:a1:f0:d5:3e:8e:12:3f:bd:4d:7e:1c:23:d8:2c:af:da:
         46:34:cd:52:23:88:44:4e:93:3d:cf:26:e2:c5:60:67:ef:ab:
         5e:c6:56:63:1a:5c:5b:24:7a:07:a8:16:09:bd:e3:b0:aa:51:
         98:ef:46:f5:25:0f:12:b2:b4:df:99:d8:d7:c8:0f:6c:09:62:
         88:27:3c:15:c8:f4:cc:53:cf:ce:ae:94:dd:58:1f:71:1c:77:
         7f:22:42:62:ca:c1:6c:7a:39:fd:8c:dc:cc:47:c8:2d:93:c1:
         77:1d:28:83:5c:56:83:34:c7:63:7a:a0:9f:bd:dc:eb:9c:63:
         fc:a9:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:31 2025 by rpki-client