Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File:                     DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier:          Ss64EDGxDUuaLoz4YhsUr99CYRoGyWLE9k8rziPPCUg=
Subject key identifier:   03:73:E4:28:94:CB:89:35:A1:08:57:B3:D9:32:2A:F1:E0:7F:84:75
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer:       /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial:       0194BC729E710B58CA40F591C19B69EA1C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 13:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:15 +0000
Files and hashes:         1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: N92qFKy5hpPkaROVTbo1vRuNcXdc0oMGRPVSJiel0nc=)
                          2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
                          3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:9e:71:0b:58:ca:40:f5:91:c1:9b:69:ea:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
        Validity
            Not Before: Jan 31 13:00:15 2025 GMT
            Not After : Feb  1 13:00:15 2025 GMT
        Subject: CN=0373e42894cb8935a10857b3d9322af1e07f8475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:a0:b2:c5:82:4a:84:7f:bc:45:dc:00:5c:
                    03:06:d2:3d:f0:dd:22:09:10:07:0b:f9:f1:56:8e:
                    91:ee:7a:fb:89:33:21:79:48:4f:6c:47:0a:70:a0:
                    3d:af:05:c3:ce:40:65:f0:90:30:83:f7:04:55:47:
                    f8:a5:6e:4a:5c:bf:e9:88:8c:d9:69:d2:31:89:79:
                    bd:50:a4:25:84:4d:d9:b7:cd:c5:d1:34:86:ef:64:
                    3a:d9:e5:f0:43:e2:68:28:1d:30:50:ae:77:b3:bf:
                    ba:bc:33:15:b7:c3:ff:e9:94:9d:8d:e5:ec:c6:cb:
                    cb:9b:5e:bd:17:05:32:a3:0e:ca:6f:56:ed:d1:cf:
                    e7:43:e8:1c:0c:e5:73:e9:1d:75:2e:db:ad:5c:2b:
                    2e:c7:ea:88:fa:b9:45:91:71:b5:8a:38:7a:58:c7:
                    06:d2:f6:8e:47:98:dc:4b:42:9d:90:2f:b9:33:d6:
                    0a:4d:a6:63:81:ed:02:0b:12:eb:6e:49:b7:0b:b2:
                    7d:bf:38:cc:1d:42:20:31:54:b4:da:fa:38:27:76:
                    8a:23:74:ea:99:f3:2c:3f:23:1e:c3:d7:61:3a:12:
                    ac:f2:08:0d:7c:ee:61:0f:92:a2:5e:92:b2:32:cf:
                    5b:41:a6:44:82:c2:01:ac:a5:00:1a:78:bb:48:26:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:73:E4:28:94:CB:89:35:A1:08:57:B3:D9:32:2A:F1:E0:7F:84:75
            X509v3 Authority Key Identifier:
                keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:c5:d2:6c:9a:12:ec:06:40:a4:41:08:63:65:fa:b5:c4:
         c4:d4:3e:61:a7:28:f5:12:0b:27:93:f2:19:3b:97:b4:3e:88:
         a7:62:de:75:3a:cf:8b:be:04:4d:63:0b:34:23:10:1d:a6:a5:
         b4:58:c7:1a:c0:df:ad:6b:48:03:13:a8:e8:9d:58:8b:35:92:
         1e:d6:99:c7:c4:70:a0:89:14:21:3a:19:2f:5a:13:8d:31:4d:
         54:09:65:06:1f:48:eb:16:66:05:1d:25:e9:e1:1d:bb:e8:24:
         ad:4b:89:4c:d7:35:05:41:bb:5c:4c:20:55:6a:ec:ed:b3:d7:
         f6:0b:cb:f1:71:53:cb:f2:bc:74:c6:66:9d:77:78:63:fd:02:
         f3:06:ed:97:9c:14:15:8b:c7:80:30:dc:61:b9:b3:46:9f:fb:
         8f:64:58:b9:da:f4:54:a8:80:02:20:26:34:72:1b:07:80:0b:
         b1:b7:47:9d:2a:11:a9:22:dc:54:8c:69:c2:3a:1c:fd:bb:64:
         85:d8:8f:9b:3b:47:11:33:76:9d:55:95:9d:c5:c9:a7:0a:31:
         ac:1a:46:13:5f:d9:54:12:d6:f6:09:c6:4c:9a:54:41:d1:35:
         f3:58:70:d1:69:c2:b1:d9:9c:0a:12:f0:97:f7:fd:90:7e:58:
         00:2b:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:52 2025 by rpki-client