Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File:                     LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier:          0uEAJ34gmy9AMlnMgxJftFQdckbGYVqiQcc7dRruEAo=
Subject key identifier:   EE:79:01:E8:6A:BD:C4:59:AC:E4:32:CC:69:A8:97:C4:1E:FE:1F:80
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       0194BCAA0C41E48BB22713175A4D5253BBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number:          0F72
Signing time:             Fri 31 Jan 2025 14:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:48 +0000
Files and hashes:         1: 2zzUP42PSDjYPPlHV41sNEGuQm8.roa (hash: 3WYS30ATIqzOFvG4XYkxeuJlriDYGMdvapCa66rATak=)
                          2: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: Vuy2RkKHf+uavYoBTPOatALI3NRtqy74WX6As6jfaV0=)
                          3: NXdlMjppFlDgpqvrpd1dUCT0Nd4.roa (hash: vFfItKSvE8cyKCuMsk2TF0b+TYLCK752KcmEvCAy640=)
                          4: a-yoqKKM2_VTyMIpYk7of2SsSkg.roa (hash: tkjvrZdB0sy56VknBMzLGgv8ID+xT8Z3KrJT0me2WLI=)
                          5: g-jIWTGusT1Pd0EzYCYJPlo_V10.roa (hash: rU4QB22UKJ/f6i1fM6bnIKFFo0DzgyOmLtH9gDvBjBM=)
                          6: ru2syxCTFSkcHXzvmaT8k_sSwdE.roa (hash: cb/4JPWzlbHrciybJdWfxGFnExQb99fweCf16u1aJnY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0c:41:e4:8b:b2:27:13:17:5a:4d:52:53:bb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jan 31 14:00:48 2025 GMT
            Not After : Feb  1 14:00:48 2025 GMT
        Subject: CN=ee7901e86abdc459ace432cc69a897c41efe1f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:c6:6d:1e:5f:2c:6f:cb:76:ce:15:59:da:
                    96:47:b8:a5:6d:34:05:ea:fe:b2:78:3e:00:a7:23:
                    a3:f9:4d:4b:b9:6e:54:49:e2:ca:93:45:93:a4:29:
                    6a:3c:c5:16:3e:25:ab:78:49:c0:21:3f:d7:2b:a5:
                    17:66:4c:e7:b4:e9:3e:c6:89:0e:89:77:a5:24:40:
                    90:31:9d:48:ce:86:e4:4a:97:db:a2:ce:56:6c:ec:
                    5b:24:f4:0a:94:5d:a3:71:a8:0f:04:21:32:d5:92:
                    16:07:ba:c4:12:3f:d1:52:ed:6e:9a:30:02:9c:f5:
                    ff:1c:68:9d:0b:9b:4e:11:fa:b7:68:fd:d2:2e:eb:
                    5f:8c:d0:12:de:d8:a6:9e:2b:2e:53:b9:98:66:3d:
                    62:43:1b:41:26:bc:e6:71:29:d2:c2:d2:84:1e:1c:
                    ce:28:93:bb:fe:28:ad:c6:ca:56:cf:b4:e4:f3:a6:
                    a8:76:8f:9d:bb:98:83:ed:45:07:4c:9f:c5:87:96:
                    12:ef:61:f6:40:81:ad:7a:92:b8:8a:aa:f0:8f:18:
                    b0:18:f8:3b:f3:99:3a:82:d8:d0:c4:d4:e4:a7:2b:
                    9d:8e:05:55:51:2e:20:1d:28:6a:0a:b4:41:b7:90:
                    f2:bc:c7:8b:7a:39:e3:47:ac:bc:bb:fe:b2:32:67:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:01:E8:6A:BD:C4:59:AC:E4:32:CC:69:A8:97:C4:1E:FE:1F:80
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:09:d5:43:c1:31:8e:60:2a:dc:4e:1b:23:54:89:a0:0a:e3:
         e8:d9:1b:ec:ff:f3:32:7b:eb:4e:3e:79:7e:76:16:0c:f9:ce:
         cf:3b:da:29:ef:a3:f2:be:8b:63:df:82:c7:ee:52:b3:8c:47:
         c7:76:3c:e0:fc:f9:0e:de:c7:fd:c2:46:6d:2f:99:00:f6:6f:
         e4:76:be:6b:20:6c:b5:8d:ca:78:95:a6:1c:f2:14:1e:c1:57:
         5e:86:f6:6e:e0:f2:8a:6e:07:a0:00:a9:8d:41:59:0a:83:8d:
         5b:be:06:94:c4:ac:20:5a:ad:64:4c:ab:73:ad:bd:01:5c:b3:
         ee:88:31:0b:93:3c:a5:9b:33:4b:55:03:69:3a:b9:d8:ae:b4:
         67:32:36:bd:c3:8a:b1:e5:87:f2:fe:11:b2:d7:1c:65:67:3b:
         4f:ba:0d:92:9e:85:e6:79:08:9d:ca:3f:ce:2e:33:00:df:3d:
         e0:54:cc:2b:d7:8f:10:95:04:2b:99:41:40:91:e4:cc:9a:e7:
         ec:65:b7:08:a7:5c:86:c0:2c:91:11:fd:69:62:b8:6e:9a:06:
         77:ca:ff:cc:ab:ae:a2:a8:36:ec:c6:3e:9e:2d:74:64:a6:47:
         5f:bf:d6:57:fc:91:fb:f3:fa:8f:05:d2:5e:ab:fb:62:13:c8:
         66:66:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----