Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          a+xitBdo5aGY2jGL8yUXf2lgCImHbHU5YI27poZsXXk=
Subject key identifier:   FA:D5:60:D5:7B:33:4D:74:7A:6F:FE:A4:86:D2:51:A2:82:49:60:44
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       0194BBCE5AF0D067E0652A0A4F6B9FBFDEC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          139C
Signing time:             Fri 31 Jan 2025 10:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:50 +0000
Files and hashes:         1: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=)
                          2: AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa (hash: e8L77a5kg61puuX03oiiqxMg/6Zhg3a40JEKuTihNS4=)
                          3: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=)
                          4: IcZyQzPjmcPatTCN_DFd1rTYdAc.roa (hash: AH7usQgOtkBiIGhG0/ats1OWBoHAGIhQ0eSjeuPELXY=)
                          5: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: JqJGYJU3fKCMHBrFp/GHDa2rtVMg839D2E6uGs08Cc4=)
                          6: LoGWdajWVkzXAomx3BiXVveHKPE.roa (hash: DQkDoapnHj0MLL/tsnzQzVTwMl16+a7poqF4DwlVKiA=)
                          7: UdsSncOANSg1BeaRzCCTUiFj31M.roa (hash: 1hXdlaEJsQTHFIINFbcTyRsSZqIHMOVYZQ75pnH/31Q=)
                          8: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=)
                          9: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=)
                          10: mVdexk3vKBH_4OglU9QY2xWXbFg.roa (hash: T7oxwImzAvvVd0FkOTxcioKajTx/j5GnmzdyER6QnyE=)
                          11: q9zx3y37CGvq7f_eoa_X5J6aUiQ.roa (hash: VDm3O0ZHhZ/8aSTirgiKWAby76xfZls/qzdOQO5HVw8=)
                          12: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5a:f0:d0:67:e0:65:2a:0a:4f:6b:9f:bf:de:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Jan 31 10:00:50 2025 GMT
            Not After : Feb  1 10:00:50 2025 GMT
        Subject: CN=fad560d57b334d747a6ffea486d251a282496044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:34:8a:b3:82:96:9d:50:47:d1:da:47:1a:
                    e3:2e:87:8b:74:6d:dd:f4:56:f2:1a:63:e0:82:e6:
                    a0:03:89:6c:44:52:42:b0:36:d2:16:c2:11:ae:94:
                    2c:24:de:fe:40:3d:50:31:e6:cc:79:66:e1:76:4a:
                    6a:c7:0b:80:99:2b:68:92:57:19:2b:16:41:f0:af:
                    e6:15:11:82:c8:45:e5:4a:94:68:18:0b:7b:9e:76:
                    c0:ba:bd:56:2a:ce:9b:30:6e:02:5f:47:d2:63:0e:
                    63:6d:d5:ce:60:aa:3c:94:f6:a1:a4:61:25:c0:04:
                    a2:f3:28:bf:17:b2:6d:1e:51:c1:10:e1:cf:bb:ba:
                    32:e6:55:6a:4b:d6:0a:c0:76:e0:c7:4c:c3:13:b2:
                    ba:0e:55:c3:27:cd:00:da:54:62:92:76:79:8a:7b:
                    7b:8a:f5:12:c4:15:1b:59:43:86:94:bc:2c:99:62:
                    61:98:1a:96:80:7f:49:12:d7:f4:55:e1:ae:ae:bf:
                    c1:dc:50:c7:5c:6d:51:c2:85:61:64:d1:bc:e6:ed:
                    30:fc:1b:ef:c4:fd:fd:20:b1:80:83:e6:df:7e:b7:
                    94:cb:ca:3b:78:93:9c:e2:1c:fa:ca:99:cb:b4:71:
                    a6:98:a9:38:b9:6e:fe:9a:ab:82:e0:1e:26:b9:54:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D5:60:D5:7B:33:4D:74:7A:6F:FE:A4:86:D2:51:A2:82:49:60:44
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:58:2f:c9:dd:8b:43:d2:54:d7:a4:14:f6:27:58:32:a6:c6:
         c7:4e:c0:b6:7a:66:f2:07:8b:30:b8:17:c2:c7:1f:78:7e:af:
         1d:9c:aa:f2:24:97:23:f4:5d:16:46:9a:96:63:0e:c5:96:e5:
         91:d3:5f:89:c5:35:66:a1:90:63:2a:7a:71:d4:e6:71:95:30:
         88:7e:8a:52:32:b7:37:47:d7:14:0e:29:6d:63:ab:4e:6c:53:
         56:48:42:58:db:a4:8e:4e:2b:7d:bf:9b:4e:36:f0:77:1a:33:
         9a:b7:e7:3f:f4:8b:eb:0c:b4:ea:93:da:3e:86:2d:a4:31:d5:
         3c:a5:a7:7f:69:63:8f:92:fd:4b:45:db:48:51:c0:99:5c:c9:
         fb:90:d4:20:1b:fe:2b:10:60:f8:2d:bc:0b:35:ed:f2:9f:4f:
         c7:63:a7:01:77:30:56:d3:c7:95:2d:95:c1:fe:ae:58:8f:86:
         f4:a0:45:bc:3f:1f:f6:e1:a7:c3:d3:bf:de:25:2a:be:64:df:
         c1:4f:83:c2:8b:9d:ac:83:5d:39:7e:f5:4d:16:b5:21:d5:cd:
         d0:f1:61:d3:8c:e6:00:e5:e3:a2:5f:97:d5:cb:5d:1f:f2:a0:
         15:0a:ea:6c:50:96:11:ce:c6:38:47:68:10:fb:92:3f:1e:92:
         7a:76:75:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlrw0GfgZSoKT2ufv97EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EyhmYWQ1NjBkNTdiMzM0ZDc0N2E2ZmZlYTQ4NmQyNTFhMjgyNDk2MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu80irOClp1QR9HaRxrjLoeLdG3d
9FbyGmPgguagA4lsRFJCsDbSFsIRrpQsJN7+QD1QMebMeWbhdkpqxwuAmStoklcZ
KxZB8K/mFRGCyEXlSpRoGAt7nnbAur1WKs6bMG4CX0fSYw5jbdXOYKo8lPahpGEl
wASi8yi/F7JtHlHBEOHPu7oy5lVqS9YKwHbgx0zDE7K6DlXDJ80A2lRiknZ5int7
ivUSxBUbWUOGlLwsmWJhmBqWgH9JEtf0VeGurr/B3FDHXG1RwoVhZNG85u0w/Bvv
xP39ILGAg+bffreUy8o7eJOc4hz6ypnLtHGmmKk4uW7+mquC4B4muVQ1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrVYNV7M010em/+pIbSUaKCSWBEMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFgvyd2L
Q9JU16QU9idYMqbGx07Atnpm8geLMLgXwscfeH6vHZyq8iSXI/RdFkaalmMOxZbl
kdNficU1ZqGQYyp6cdTmcZUwiH6KUjK3N0fXFA4pbWOrTmxTVkhCWNukjk4rfb+b
TjbwdxozmrfnP/SL6wy06pPaPoYtpDHVPKWnf2ljj5L9S0XbSFHAmVzJ+5DUIBv+
KxBg+C28CzXt8p9Px2OnAXcwVtPHlS2Vwf6uWI+G9KBFvD8f9uGnw9O/3iUqvmTf
wU+DwoudrINdOX71TRa1IdXN0PFh04zmAOXjol+X1ctdH/KgFQrqbFCWEc7GOEdo
EPuSPx6SenZ1Kg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:14 2025 by rpki-client