Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File:                     LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier:          X9bVtkBZzLnN/Frviy3CIwx9zf7bkuSf1SkJkCAyw4k=
Subject key identifier:   6F:A1:59:B0:A3:CD:D0:C8:5D:B0:32:3F:2D:B5:FF:00:B4:44:C9:4F
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer:       /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial:       0194BD4E90207D944CAEA9BF328A112F8E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number:          0379
Signing time:             Fri 31 Jan 2025 17:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:29 +0000
Files and hashes:         1: 1-CqksZEngiad9GJ1laZb9kmUhDs.roa (hash: RFGoumzL1Ot9LozFC8/pBRuEEMi1Nkwj8cBdnCtnZ+Y=)
                          2: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: VblJFUDftxbUPCydwIAGDqqF03JCCMx1/aAscygXjMQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:90:20:7d:94:4c:ae:a9:bf:32:8a:11:2f:8e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
        Validity
            Not Before: Jan 31 17:00:29 2025 GMT
            Not After : Feb  1 17:00:29 2025 GMT
        Subject: CN=6fa159b0a3cdd0c85db0323f2db5ff00b444c94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:a2:52:ed:a3:5d:31:6c:8d:e8:55:86:ea:
                    e6:91:c6:fa:9d:30:d3:08:1a:d1:a5:90:d5:e5:c9:
                    0d:47:8f:2c:5c:57:21:13:7a:93:c7:69:48:79:70:
                    14:4e:b6:91:45:02:e5:16:2e:19:0d:9c:c9:98:51:
                    3f:52:a9:b3:f5:7a:c3:9c:b1:90:9b:4e:10:ff:e3:
                    ea:b5:40:e8:79:e3:31:6e:b3:e4:c8:64:d6:4c:ba:
                    5f:d4:99:e8:b7:61:4c:58:7b:bd:4b:d6:e5:f5:4a:
                    a2:bd:b4:93:78:6d:ee:66:2e:b2:40:ab:ca:24:75:
                    f6:3b:30:b0:29:7c:b9:2b:a2:af:29:c8:3f:a9:17:
                    57:6c:4b:6d:5c:05:68:9c:85:40:15:85:d5:25:bf:
                    37:55:be:54:cf:48:35:48:b2:08:b4:a5:f0:4e:05:
                    d1:f0:07:a4:f7:cb:23:05:c1:e2:ac:1c:07:bb:8f:
                    f3:77:1f:b9:85:52:cc:e8:18:5f:d6:7e:4e:ee:b7:
                    82:5e:d8:3c:91:51:7a:13:b7:90:17:6b:6f:f3:c6:
                    c5:1b:5c:4c:bf:e3:51:05:71:bb:f0:cb:e4:56:82:
                    98:9e:9c:c8:74:d4:bf:91:dc:b0:70:31:63:e9:fb:
                    12:38:e0:b5:aa:87:74:e0:11:0c:b9:e1:8c:5f:f8:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:59:B0:A3:CD:D0:C8:5D:B0:32:3F:2D:B5:FF:00:B4:44:C9:4F
            X509v3 Authority Key Identifier:
                keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:50:f3:0b:28:e2:85:5a:71:51:31:e3:a5:a3:a8:40:73:4d:
         78:30:68:a7:88:7b:a2:16:59:a5:55:6f:42:98:6e:2b:4f:03:
         d3:b2:18:ae:1d:a9:71:35:63:9c:db:6b:2c:6f:26:ea:7f:f8:
         32:ca:d0:96:84:4d:59:eb:36:f0:38:02:eb:79:9c:98:f6:1c:
         b9:81:07:c5:9f:92:e3:07:a0:a1:d9:c6:45:39:5e:7b:cf:e1:
         9a:03:a7:5d:9f:04:eb:2b:46:da:2f:01:f8:89:11:c4:06:4b:
         81:89:fd:f5:4d:92:b6:42:1d:e1:9a:44:ca:ef:4d:10:14:d6:
         71:e7:9e:94:02:20:3b:80:c4:d4:9a:9e:08:51:9f:8d:73:ba:
         ee:e6:4c:2c:14:3c:1e:6d:cd:c8:73:99:3d:2b:b7:03:3f:82:
         fb:5c:54:a0:cf:87:87:aa:19:b3:e1:24:9a:df:eb:ab:9e:67:
         4c:fb:ad:12:62:2c:c4:d1:2e:8a:62:ab:9e:f4:4d:fb:5f:ef:
         5a:16:c2:55:63:8d:98:40:fb:1a:89:36:8e:b9:dc:41:26:ef:
         a1:b3:27:51:a4:c4:97:9b:bb:14:49:36:6e:4a:c1:eb:94:9d:
         9f:6e:76:1c:d7:ac:9c:0f:76:10:f5:82:60:ab:e0:27:2c:fb:
         28:b4:29:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpAgfZRMrqm/MooRL44sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjUwMTMxMTcwMDI5WhcNMjUwMjAxMTcwMDI5WjAzMTEwLwYDVQQD
Eyg2ZmExNTliMGEzY2RkMGM4NWRiMDMyM2YyZGI1ZmYwMGI0NDRjOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbuiUu2jXTFsjehVhurmkcb6nTDT
CBrRpZDV5ckNR48sXFchE3qTx2lIeXAUTraRRQLlFi4ZDZzJmFE/Uqmz9XrDnLGQ
m04Q/+PqtUDoeeMxbrPkyGTWTLpf1Jnot2FMWHu9S9bl9UqivbSTeG3uZi6yQKvK
JHX2OzCwKXy5K6KvKcg/qRdXbEttXAVonIVAFYXVJb83Vb5Uz0g1SLIItKXwTgXR
8Aek98sjBcHirBwHu4/zdx+5hVLM6Bhf1n5O7reCXtg8kVF6E7eQF2tv88bFG1xM
v+NRBXG78MvkVoKYnpzIdNS/kdywcDFj6fsSOOC1qod04BEMueGMX/jDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+hWbCjzdDIXbAyPy21/wC0RMlPMB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlDzCyji
hVpxUTHjpaOoQHNNeDBop4h7ohZZpVVvQphuK08D07IYrh2pcTVjnNtrLG8m6n/4
MsrQloRNWes28DgC63mcmPYcuYEHxZ+S4wegodnGRTlee8/hmgOnXZ8E6ytG2i8B
+IkRxAZLgYn99U2StkId4ZpEyu9NEBTWceeelAIgO4DE1JqeCFGfjXO67uZMLBQ8
Hm3NyHOZPSu3Az+C+1xUoM+Hh6oZs+Ekmt/rq55nTPutEmIsxNEuimKrnvRN+1/v
WhbCVWONmED7Gok2jrncQSbvobMnUaTEl5u7FEk2bkrB65Sdn252HNesnA92EPWC
YKvgJyz7KLQpTg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client