Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
File:                     lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft (raw, json)
Hash identifier:          +5ZKX7qR8I8j6/JaScDRKYvZsRpjC4wtBuQxiZ3Ax0A=
Subject key identifier:   3B:D3:16:31:B7:9E:19:C5:B2:2F:F4:94:1A:BA:67:05:45:04:FE:D6
Authority key identifier: 94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
Certificate issuer:       /CN=948956c1c6769f42d60403de1319bf463454a0d6
Certificate serial:       01946CA0F686D14F60E3CA90F1C3F0697529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
Manifest number:          05E7
Signing time:             Thu 16 Jan 2025 01:01:15 +0000
Manifest this update:     Thu 16 Jan 2025 01:01:15 +0000
Manifest next update:     Fri 17 Jan 2025 01:01:15 +0000
Files and hashes:         1: lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl (hash: 2XbCJepS7Oz4e0ejoRHAiYUVGCM5TfsGL19AB6RrvS4=)
                          2: r4jdXYm2Ym-VDAIsE4Qe7aCLBso.roa (hash: FwhdeGBOOJmeZuiaIxc0/kIcjQW+ndW3732g8uppShw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6c:a0:f6:86:d1:4f:60:e3:ca:90:f1:c3:f0:69:75:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948956c1c6769f42d60403de1319bf463454a0d6
        Validity
            Not Before: Jan 16 01:01:15 2025 GMT
            Not After : Jan 17 01:01:15 2025 GMT
        Subject: CN=3bd31631b79e19c5b22ff4941aba67054504fed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:c8:a9:ee:01:15:0d:63:11:6d:2a:6d:6e:
                    31:5c:50:79:e2:25:e7:bf:43:5a:32:2a:db:0e:bb:
                    78:10:24:d6:42:b6:71:8f:b1:38:b0:37:5e:48:43:
                    65:a7:ce:be:be:60:fc:d2:e7:c2:4a:09:a7:6a:43:
                    5e:5c:5d:f5:e6:45:57:82:8f:21:e0:9a:44:fd:c1:
                    b0:e2:78:a3:aa:dc:8b:88:71:87:26:10:77:ce:02:
                    47:c2:a2:b9:9e:02:76:c7:ac:51:44:ec:54:fb:9b:
                    68:d7:34:23:6e:ab:a6:4a:30:2e:8d:6f:b0:f5:d1:
                    ae:15:d2:3d:a2:e2:d7:a9:97:96:95:d5:01:7b:5d:
                    67:25:0e:26:64:ab:98:4d:ed:c4:0f:b4:fc:81:7b:
                    21:56:f9:f1:46:83:64:25:52:ed:a1:74:c3:1e:df:
                    5c:8c:41:01:10:49:7b:46:ee:63:77:b5:30:98:e2:
                    7f:41:6e:6d:30:36:99:3f:7c:aa:8e:3a:61:1d:2a:
                    7a:d8:70:e5:f9:18:00:d7:fc:dc:0d:de:3c:e7:58:
                    d1:3d:b5:55:d0:78:63:8c:5c:90:d7:0b:51:02:2e:
                    4d:7c:bf:31:ae:40:ab:31:30:7f:dd:36:54:b8:5e:
                    8e:ee:94:65:13:37:de:e8:62:f5:95:9e:80:50:39:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D3:16:31:B7:9E:19:C5:B2:2F:F4:94:1A:BA:67:05:45:04:FE:D6
            X509v3 Authority Key Identifier:
                keyid:94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:21:62:f3:04:7f:d3:b0:a3:a7:b6:24:3c:dd:72:89:95:1f:
         bd:56:7f:f8:81:73:02:6e:9b:87:77:ba:59:6e:d9:93:3f:a1:
         2f:7b:7d:b0:f7:46:51:a2:94:44:09:81:18:18:6e:8c:98:49:
         01:6d:e6:c0:3d:30:53:15:76:0b:a8:94:3f:e8:a6:25:28:61:
         f7:d6:59:82:c5:d5:9a:e2:a4:34:3d:7e:28:ba:4a:29:28:c9:
         58:51:60:f8:30:02:ad:74:e1:d4:a9:29:89:c0:bc:86:df:1c:
         29:fe:3a:bc:58:fe:fc:54:d3:1d:6c:82:c1:b0:b9:36:e8:b0:
         b9:05:32:79:a0:4b:2f:55:dd:1c:60:00:e4:8c:f1:27:bc:62:
         43:59:b1:29:d8:41:d0:fa:94:cc:43:21:6b:47:48:cc:78:71:
         ac:61:cb:f0:63:f7:81:f1:70:48:1d:3c:a6:62:59:1b:c8:e0:
         b9:ee:2f:ea:87:54:0a:f8:13:88:ed:e1:67:b0:88:f1:a1:9f:
         a1:0a:69:d6:bf:49:02:23:99:15:8e:27:b8:8b:61:81:42:c2:
         4f:99:0f:cb:18:11:92:31:4a:ad:1d:6b:2b:ea:40:82:4d:33:
         cb:6b:9d:2a:91:00:e0:4c:83:17:6d:57:51:de:b7:80:1f:95:
         ea:d3:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:38:54 2025 by rpki-client