Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File:                     LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier:          Mp3UQqzHG7YVQAauSMFryrYRgj6snCoERy3g585DYJY=
Subject key identifier:   5F:DC:46:74:8B:A8:C6:67:E7:B4:8D:C5:8D:F1:53:89:AD:0B:D3:99
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer:       /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial:       0194BC3C965AA56ABA9100216409CD1D9F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 12:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:14 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:14 +0000
Files and hashes:         1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: UwlAwpQgmKoxRRMGgmSC84gGm/jf3ro2lH/wAnim6QQ=)
                          2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:96:5a:a5:6a:ba:91:00:21:64:09:cd:1d:9f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
        Validity
            Not Before: Jan 31 12:01:14 2025 GMT
            Not After : Feb  1 12:01:14 2025 GMT
        Subject: CN=5fdc46748ba8c667e7b48dc58df15389ad0bd399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:db:a7:fd:1a:6b:73:91:41:b0:7a:01:ba:f5:
                    6a:c0:51:b5:a6:43:c9:af:77:56:e7:a0:dd:e1:9d:
                    eb:13:47:5b:db:49:70:47:da:3d:c8:e4:59:a6:e6:
                    6a:73:d3:32:5e:b6:ea:46:ba:37:df:b0:7f:c2:c0:
                    bc:72:b6:87:98:9a:c6:19:a0:d2:6b:cf:2d:bf:9c:
                    0b:d7:94:e1:d4:58:41:57:d0:56:7e:12:51:c1:c2:
                    9e:ac:d7:d1:b7:cb:77:3e:48:8a:99:2a:7d:88:15:
                    9d:ec:7a:53:8b:7e:ae:8d:c3:8c:c9:dc:ec:9f:7a:
                    01:f5:02:5c:8e:51:a6:3b:79:16:28:d7:d5:90:a3:
                    48:2b:0d:db:d7:0e:ef:22:9b:f3:14:73:4f:59:7a:
                    0e:4a:14:bf:14:aa:b7:e8:00:44:fa:e6:4d:cd:21:
                    b5:51:c4:a4:b5:67:1b:8a:c6:60:b4:65:de:6d:89:
                    91:ef:71:8d:59:f8:1c:1a:a8:b2:8e:be:a8:4a:c7:
                    ee:f6:ab:e7:46:3d:89:ad:ef:7d:5f:04:46:83:fb:
                    2a:4c:b6:f7:90:ca:3e:07:5d:b1:9c:9b:5d:1c:b1:
                    e0:2f:9f:ad:3d:52:a0:e3:7f:14:c2:69:d5:f8:a9:
                    ea:ec:b2:91:32:ab:8b:c0:f0:e1:e5:21:ed:71:f3:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DC:46:74:8B:A8:C6:67:E7:B4:8D:C5:8D:F1:53:89:AD:0B:D3:99
            X509v3 Authority Key Identifier:
                keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:37:55:74:4e:06:5e:83:e8:c2:46:5c:4d:9a:7d:d0:2e:19:
         18:9c:34:80:db:4e:ac:58:28:7d:7d:78:82:c9:7d:d7:97:08:
         64:2b:f2:4b:d9:cb:ec:cb:0b:51:e2:6a:86:d1:57:41:b4:c9:
         72:67:7a:36:34:f7:23:b9:e2:9a:e6:71:a8:91:95:44:6f:b7:
         9a:8d:fa:8e:8a:65:6b:67:83:06:c4:74:78:2a:ff:8a:c0:b5:
         d5:20:0e:d8:48:62:09:a7:43:96:74:17:a8:a1:8e:69:4a:38:
         74:b6:e6:14:b3:1a:4a:8f:14:6c:f7:74:7e:db:58:00:04:fc:
         03:f5:df:d3:3a:75:a5:15:cd:36:08:6b:08:79:f4:11:5c:31:
         ac:3b:d1:08:8a:ae:06:78:a7:e8:74:b5:12:e6:77:81:af:63:
         76:b6:62:35:23:3e:74:bd:74:a5:8b:23:c2:ec:04:af:2c:74:
         ec:85:71:c2:a4:eb:e9:bc:62:61:06:88:e8:b0:72:89:cf:ab:
         77:88:f1:31:6c:43:3a:87:e1:65:93:57:6e:79:30:97:4e:c6:
         c1:ca:ed:0e:8f:d2:3d:d8:24:5b:ac:f4:2c:80:ba:15:c4:63:
         b3:7c:7d:a2:1b:f2:2d:c6:99:d9:e6:e5:6e:c0:c9:d7:d1:24:
         57:82:70:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJZapWq6kQAhZAnNHZ8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNzQ3OWY0NTY0M2EyYjgyZTEwZGFiZjczZWZlZjc3MDNi
MWUyZDIwHhcNMjUwMTMxMTIwMTE0WhcNMjUwMjAxMTIwMTE0WjAzMTEwLwYDVQQD
Eyg1ZmRjNDY3NDhiYThjNjY3ZTdiNDhkYzU4ZGYxNTM4OWFkMGJkMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tun/Rprc5FBsHoBuvVqwFG1pkPJ
r3dW56Dd4Z3rE0db20lwR9o9yORZpuZqc9MyXrbqRro337B/wsC8craHmJrGGaDS
a88tv5wL15Th1FhBV9BWfhJRwcKerNfRt8t3PkiKmSp9iBWd7HpTi36ujcOMydzs
n3oB9QJcjlGmO3kWKNfVkKNIKw3b1w7vIpvzFHNPWXoOShS/FKq36ABE+uZNzSG1
UcSktWcbisZgtGXebYmR73GNWfgcGqiyjr6oSsfu9qvnRj2Jre99XwRGg/sqTLb3
kMo+B12xnJtdHLHgL5+tPVKg438UwmnV+Knq7LKRMquLwPDh5SHtcfM1LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/cRnSLqMZn57SNxY3xU4mtC9OZMB8GA1UdIwQY
MBaAFC10efRWQ6K4LhDav3Pv73cDseLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYt
MGZjM2ZkY2Y1OWFlLzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYtMGZjM2ZkY2Y1OWFl
LzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzdVdE4G
XoPowkZcTZp90C4ZGJw0gNtOrFgofX14gsl915cIZCvyS9nL7MsLUeJqhtFXQbTJ
cmd6NjT3I7nimuZxqJGVRG+3mo36jopla2eDBsR0eCr/isC11SAO2EhiCadDlnQX
qKGOaUo4dLbmFLMaSo8UbPd0fttYAAT8A/Xf0zp1pRXNNghrCHn0EVwxrDvRCIqu
Bnin6HS1EuZ3ga9jdrZiNSM+dL10pYsjwuwEryx07IVxwqTr6bxiYQaI6LByic+r
d4jxMWxDOofhZZNXbnkwl07GwcrtDo/SPdgkW6z0LIC6FcRjs3x9ohvyLcaZ2ebl
bsDJ19EkV4JwzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:28 2025 by rpki-client