Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          cD9BeNRruzJ5plMC1aj3HRIkP/MliF6Uu/iytDfGKu0=
Subject key identifier:   FD:AD:0C:44:AB:21:63:00:D4:53:0D:D3:5D:A8:C2:A0:99:29:04:29
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       0194BCE09A3BC9F34ABDF79910693DF1512E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0C8E
Signing time:             Fri 31 Jan 2025 15:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:23 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: cyDYu7NXUi+Dc4OhDR9z/ipMX8ECPIbyIowHILf+U8M=)
                          2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
                          3: G2wclPtQ-NTyFu49JfeZRSYyyxY.roa (hash: X+HR6/7YVlIIqv7OyveCmM7668weB9c1FsbPbUXjZ6M=)
                          4: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
                          5: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:9a:3b:c9:f3:4a:bd:f7:99:10:69:3d:f1:51:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Jan 31 15:00:23 2025 GMT
            Not After : Feb  1 15:00:23 2025 GMT
        Subject: CN=fdad0c44ab216300d4530dd35da8c2a099290429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:69:fd:fc:4b:59:e9:02:3e:fc:25:93:35:
                    9d:9e:2d:04:16:99:dc:7c:06:a6:34:73:60:96:df:
                    3d:69:88:29:09:1f:65:17:8e:f9:9b:72:ce:40:9a:
                    d5:d5:83:6d:41:84:02:25:0d:6e:5f:5e:ae:21:f4:
                    b6:c4:1d:ab:6d:85:2b:52:9a:63:79:cd:0c:ae:b1:
                    53:1a:5b:18:f8:89:1f:72:ab:1c:ce:1f:3a:a0:e0:
                    5b:b2:21:e7:bd:6a:17:58:80:ec:73:f4:a9:91:a0:
                    8d:45:fe:c8:64:ef:b3:33:32:a5:c9:3f:7b:85:48:
                    4d:08:c0:1f:62:ee:90:55:f0:86:c2:b7:54:18:21:
                    f7:61:95:1b:c3:da:98:b1:da:76:80:cb:35:08:43:
                    b0:c6:39:1f:5b:b1:85:0e:4f:65:38:21:65:ab:36:
                    ef:bc:46:6e:c9:22:57:30:47:cc:a9:35:b7:eb:47:
                    5b:bb:b5:a0:7e:c5:a6:43:1b:83:6e:51:05:3d:5c:
                    44:d2:56:93:4d:8f:ce:84:c0:13:d2:09:bd:e2:93:
                    a3:45:e6:ad:72:03:65:8e:4a:d8:b8:1f:2a:31:d7:
                    6a:e9:f8:92:87:a6:a0:3f:2e:b4:1e:fd:80:83:25:
                    d7:1f:18:a2:49:d9:71:d8:4e:8f:ee:c0:aa:e0:5a:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AD:0C:44:AB:21:63:00:D4:53:0D:D3:5D:A8:C2:A0:99:29:04:29
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:15:c0:49:28:5f:33:bb:df:1d:64:ee:86:74:be:c1:e8:
         f5:de:bc:6a:07:23:89:37:6a:1a:32:70:34:77:98:d7:dd:40:
         07:2f:23:7f:cd:7d:81:f1:82:20:5b:5d:8d:24:e0:f4:26:bd:
         b2:7d:82:89:16:31:7b:d3:fd:73:d6:14:dd:d0:5f:72:b8:b8:
         07:76:14:f9:04:90:44:78:34:0b:59:83:b6:6f:59:ba:62:34:
         74:31:94:78:76:c3:29:14:1a:e9:63:74:f6:e7:fb:c2:89:2e:
         1f:c8:dc:b6:f9:80:fd:02:2c:f5:b9:41:8b:39:fd:08:7f:dd:
         fd:14:82:81:3d:b6:16:43:f1:73:24:30:19:3c:6b:46:99:ef:
         ec:8d:1c:bc:dc:a8:70:14:ff:91:f6:03:dd:41:f0:39:05:05:
         ab:f8:48:e5:ff:1c:cf:5f:10:fa:de:47:e9:b6:36:ee:69:bf:
         ac:67:26:c3:7f:96:9d:8e:02:0d:c1:9e:96:a3:ea:2b:ec:51:
         5d:4a:4e:b8:c4:88:52:83:9c:11:b0:b8:f1:4d:7f:13:8d:1f:
         8d:b8:66:8f:13:d4:eb:b8:1f:6f:5a:f6:e2:cf:fe:b6:1d:09:
         fe:06:69:ff:bd:9c:51:3c:b9:56:1e:8d:43:31:c7:87:42:43:
         9c:1a:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----