Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          F60z1pGSCa37F/shrDBzQR4t6wST8hotc7Rd0kINep4=
Subject key identifier:   80:39:44:A3:12:0B:CA:A7:05:66:D6:96:D4:3A:61:39:13:14:E5:03
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       0194BD85702F5DC27C7C252CEF5EBB6922D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          10C9
Signing time:             Fri 31 Jan 2025 18:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:26 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: V3P2KoDVm59Ll/y94L0XJzWPaxJR1BRFguu8C2HwF8w=)
                          2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:70:2f:5d:c2:7c:7c:25:2c:ef:5e:bb:69:22:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Jan 31 18:00:26 2025 GMT
            Not After : Feb  1 18:00:26 2025 GMT
        Subject: CN=803944a3120bcaa70566d696d43a61391314e503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:5a:1b:84:3e:4d:a7:9b:da:b4:59:1f:de:
                    b2:f4:44:fb:de:47:3f:8c:82:6d:d5:95:6c:cf:71:
                    87:f8:10:56:85:81:75:d8:bf:e0:26:07:3c:f1:74:
                    5a:88:32:b9:69:89:82:01:95:df:6e:3f:8d:94:a6:
                    69:79:80:01:4a:9d:30:2a:6a:9f:04:a7:4a:d7:ea:
                    d9:29:5c:4a:df:3a:ea:43:00:a8:13:39:31:96:fa:
                    b3:16:46:3c:c8:25:ba:dd:11:a2:0a:28:dd:21:25:
                    16:bd:2b:3d:37:a7:4e:1d:f3:e9:12:13:bf:3a:eb:
                    20:8b:81:9c:ce:42:9c:c1:b3:bf:7a:23:72:e5:dc:
                    5a:12:e5:4b:55:41:18:af:c9:d3:d6:58:49:de:77:
                    f1:9a:5a:d0:57:a1:64:48:4a:ce:bb:75:e1:9d:e5:
                    a7:ee:a0:7d:4a:0f:87:f3:3d:7a:bc:74:e7:b0:f7:
                    32:1e:cc:57:12:d9:16:38:18:88:54:eb:54:96:0c:
                    13:a5:0b:87:e2:a4:4f:1e:69:4f:f0:67:43:00:c6:
                    f5:79:6d:01:22:a8:b6:f8:f3:ec:02:9a:eb:01:4c:
                    96:3f:f3:5e:e3:50:c2:d2:cb:87:9c:a1:5a:fd:f1:
                    6c:5f:d7:0b:31:d2:06:92:0e:5c:8b:f1:f7:94:db:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:39:44:A3:12:0B:CA:A7:05:66:D6:96:D4:3A:61:39:13:14:E5:03
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0b:9e:9d:d1:65:1e:3d:cb:1e:26:9e:51:41:05:0f:bc:11:
         86:57:fc:31:a8:97:d1:ef:be:76:6e:ff:5e:f2:7a:b8:e4:12:
         da:f5:40:7e:13:a4:00:dc:81:18:2e:7c:20:4b:30:b9:4e:87:
         f4:36:bf:38:25:a0:1b:17:27:d6:f7:9d:68:b2:71:8c:6f:16:
         94:7c:22:be:df:fe:7c:8b:35:15:f6:dd:c6:17:83:cc:b7:7a:
         5b:38:cd:95:7f:08:fd:94:07:47:14:e6:57:83:13:94:fa:f6:
         16:33:50:df:10:f4:47:d3:3a:eb:c3:8e:33:5f:90:90:92:72:
         f3:02:96:d5:e4:2a:39:01:94:d2:ff:9e:c0:a0:b4:03:6f:00:
         01:86:99:18:f0:ec:cc:d0:d1:d1:73:21:fc:62:38:49:0b:43:
         39:89:49:d3:70:40:c1:14:b8:5f:96:ef:63:b6:80:a1:fa:86:
         7e:41:9f:05:a7:15:40:3b:6f:28:71:55:82:a1:59:20:b9:09:
         7f:e6:df:37:6c:09:ca:bf:ba:89:47:e4:86:50:5d:b0:37:18:
         ca:d3:c7:6d:a1:7a:46:3e:d1:f5:96:e0:38:6d:92:5d:a7:3f:
         b6:19:f4:59:2b:1b:14:6c:88:8e:f4:f5:71:70:04:ac:6c:a1:
         07:1c:5e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXAvXcJ8fCUs7167aSLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh
MDI1ODEwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
Eyg4MDM5NDRhMzEyMGJjYWE3MDU2NmQ2OTZkNDNhNjEzOTEzMTRlNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmetaG4Q+Taeb2rRZH96y9ET73kc/
jIJt1ZVsz3GH+BBWhYF12L/gJgc88XRaiDK5aYmCAZXfbj+NlKZpeYABSp0wKmqf
BKdK1+rZKVxK3zrqQwCoEzkxlvqzFkY8yCW63RGiCijdISUWvSs9N6dOHfPpEhO/
Ousgi4GczkKcwbO/eiNy5dxaEuVLVUEYr8nT1lhJ3nfxmlrQV6FkSErOu3XhneWn
7qB9Sg+H8z16vHTnsPcyHsxXEtkWOBiIVOtUlgwTpQuH4qRPHmlP8GdDAMb1eW0B
Iqi2+PPsAprrAUyWP/Ne41DC0suHnKFa/fFsX9cLMdIGkg5ci/H3lNvahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA5RKMSC8qnBWbWltQ6YTkTFOUDMB8GA1UdIwQY
MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt
YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj
LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwuendFl
Hj3LHiaeUUEFD7wRhlf8MaiX0e++dm7/XvJ6uOQS2vVAfhOkANyBGC58IEswuU6H
9Da/OCWgGxcn1vedaLJxjG8WlHwivt/+fIs1FfbdxheDzLd6WzjNlX8I/ZQHRxTm
V4MTlPr2FjNQ3xD0R9M668OOM1+QkJJy8wKW1eQqOQGU0v+ewKC0A28AAYaZGPDs
zNDR0XMh/GI4SQtDOYlJ03BAwRS4X5bvY7aAofqGfkGfBacVQDtvKHFVgqFZILkJ
f+bfN2wJyr+6iUfkhlBdsDcYytPHbaF6Rj7R9ZbgOG2SXac/thn0WSsbFGyIjvT1
cXAErGyhBxxeGg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:01 2025 by rpki-client