Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/L2wJmRV-yjMC8SXGO-w7ghr4qgM.mft
File:                     L2wJmRV-yjMC8SXGO-w7ghr4qgM.mft (raw, json)
Hash identifier:          Y2g3evR2zM4bUsSZAnfKnp7i2FVcDWwXz05dGXHOJZU=
Subject key identifier:   38:5E:F0:D1:8D:EB:DB:C4:38:59:A4:05:69:67:06:C4:D5:7E:E0:F0
Authority key identifier: 2F:6C:09:99:15:7E:CA:33:02:F1:25:C6:3B:EC:3B:82:1A:F8:AA:03
Certificate issuer:       /CN=2f6c0999157eca3302f125c63bec3b821af8aa03
Certificate serial:       018BD191DCFC4D347CF9E5702FA59DF9D24B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2wJmRV-yjMC8SXGO-w7ghr4qgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/L2wJmRV-yjMC8SXGO-w7ghr4qgM.mft
Manifest number:          03CA
Signing time:             Wed 15 Nov 2023 06:01:19 +0000
Manifest this update:     Wed 15 Nov 2023 06:01:19 +0000
Manifest next update:     Thu 16 Nov 2023 06:01:19 +0000
Files and hashes:         1: 9r-5450_LPv0lfniAyvcdIDulFk.roa (hash: LaIAZzj5ZiWUPAQG4O86Dd32CwFPo3guOQtPSTPgugU=)
                          2: L2wJmRV-yjMC8SXGO-w7ghr4qgM.crl (hash: 3LIEJcsfugsGQesLxIZMkhidJmOYF9QLuIlyiWGUUw4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:91:dc:fc:4d:34:7c:f9:e5:70:2f:a5:9d:f9:d2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6c0999157eca3302f125c63bec3b821af8aa03
        Validity
            Not Before: Nov 15 06:01:19 2023 GMT
            Not After : Nov 16 06:01:19 2023 GMT
        Subject: CN=385ef0d18debdbc43859a405696706c4d57ee0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:cf:05:21:c7:82:4b:5c:c2:68:30:4b:9a:
                    f9:1b:cf:77:9c:e4:07:90:56:52:fb:c2:31:d6:75:
                    ce:a5:27:73:48:01:f3:63:f5:55:86:0c:78:7d:e0:
                    9e:bd:ad:6f:30:f3:d2:1c:bb:be:07:07:d5:fb:00:
                    ab:02:7f:72:ad:a2:f3:d1:25:de:3e:5a:74:8d:b9:
                    8b:ef:02:54:fb:e7:62:9f:2f:48:cf:f0:95:e1:cd:
                    c1:b4:91:0e:e9:f0:70:0a:2c:74:60:89:01:7d:c6:
                    9f:7a:f8:1a:07:a2:f5:9a:f9:b1:a5:22:3e:d2:27:
                    ae:91:26:8f:3a:02:9c:cf:59:f2:dd:4e:d1:60:04:
                    ac:b2:66:fe:21:f9:8b:80:e6:53:40:89:2e:e0:d3:
                    73:3a:9e:b9:69:2c:63:0b:8a:32:17:96:e4:4c:75:
                    a7:d6:47:72:97:9f:81:f1:b2:ef:69:ab:ee:16:00:
                    ea:ad:b8:43:c4:fb:86:3f:e4:6f:e2:e7:c2:4f:d7:
                    7f:04:3d:c7:c7:da:eb:8e:b8:21:c7:06:44:04:44:
                    9c:00:fb:d1:1e:36:74:d2:76:01:45:7e:54:04:67:
                    05:70:a2:bc:4b:c7:31:32:a9:39:f6:35:7a:46:94:
                    70:14:00:0d:48:f0:b3:9b:6c:22:e5:10:b8:3a:5f:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5E:F0:D1:8D:EB:DB:C4:38:59:A4:05:69:67:06:C4:D5:7E:E0:F0
            X509v3 Authority Key Identifier:
                keyid:2F:6C:09:99:15:7E:CA:33:02:F1:25:C6:3B:EC:3B:82:1A:F8:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2wJmRV-yjMC8SXGO-w7ghr4qgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/L2wJmRV-yjMC8SXGO-w7ghr4qgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/L2wJmRV-yjMC8SXGO-w7ghr4qgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:1c:a6:9e:33:d4:eb:2d:ef:a3:3c:50:c2:00:9f:ef:cf:
         e1:1d:85:d0:d7:be:dd:82:4a:8c:96:8f:cb:6e:52:d7:05:1c:
         66:03:de:a3:06:e9:93:5e:ab:8d:94:d2:3c:98:a3:4a:df:7c:
         9d:38:0f:10:c0:50:20:99:d1:ca:af:0b:1f:84:ec:59:3b:f7:
         a1:e9:93:ff:68:85:f3:3e:8a:71:35:6c:f2:79:e8:33:fb:9e:
         2d:06:80:8a:a4:ca:dd:80:a8:4c:5a:34:4c:b2:c1:8e:72:78:
         1a:c5:1d:3f:f0:44:90:97:9d:46:cf:b5:4c:f2:fb:28:69:01:
         34:fc:91:b3:f4:4b:f8:bf:f0:49:d3:53:73:58:37:06:27:34:
         5f:6a:bc:ba:d5:cc:ee:75:49:fc:c8:49:6e:88:17:3c:81:4b:
         d7:41:87:51:af:12:a8:fb:68:d3:a7:7e:04:25:23:48:3f:10:
         c4:56:09:73:91:b4:bf:78:3c:f8:da:db:37:94:bf:5b:6a:4f:
         f9:f3:b2:e6:2e:06:69:2b:9c:97:b8:19:e5:36:a9:ea:f2:85:
         38:23:8a:97:2f:28:75:88:dd:1d:1b:ba:d7:21:b5:81:5c:1f:
         98:91:b0:11:f9:71:b9:a3:bd:16:9b:5a:2d:b3:7b:4f:01:78:
         ac:3b:bc:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvRkdz8TTR8+eVwL6Wd+dJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmMwOTk5MTU3ZWNhMzMwMmYxMjVjNjNiZWMzYjgyMWFm
OGFhMDMwHhcNMjMxMTE1MDYwMTE5WhcNMjMxMTE2MDYwMTE5WjAzMTEwLwYDVQQD
EygzODVlZjBkMThkZWJkYmM0Mzg1OWE0MDU2OTY3MDZjNGQ1N2VlMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2rPBSHHgktcwmgwS5r5G893nOQH
kFZS+8Ix1nXOpSdzSAHzY/VVhgx4feCeva1vMPPSHLu+BwfV+wCrAn9yraLz0SXe
Plp0jbmL7wJU++diny9Iz/CV4c3BtJEO6fBwCix0YIkBfcafevgaB6L1mvmxpSI+
0ieukSaPOgKcz1ny3U7RYASssmb+IfmLgOZTQIku4NNzOp65aSxjC4oyF5bkTHWn
1kdyl5+B8bLvaavuFgDqrbhDxPuGP+Rv4ufCT9d/BD3Hx9rrjrghxwZEBEScAPvR
HjZ00nYBRX5UBGcFcKK8S8cxMqk59jV6RpRwFAANSPCzm2wi5RC4Ol+/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhe8NGN69vEOFmkBWlnBsTVfuDwMB8GA1UdIwQY
MBaAFC9sCZkVfsozAvElxjvsO4Ia+KoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJ3Sm1SVi15ak1DOFNYR08tdzdnaHI0cWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84OTA5N2EtMWQ3OC00Nzg3LWJmNGUt
ODNmYTBiMzUxMzRjLzEvTDJ3Sm1SVi15ak1DOFNYR08tdzdnaHI0cWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84OTA5N2EtMWQ3OC00Nzg3LWJmNGUtODNmYTBiMzUxMzRj
LzEvTDJ3Sm1SVi15ak1DOFNYR08tdzdnaHI0cWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqEcpp4z
1Ost76M8UMIAn+/P4R2F0Ne+3YJKjJaPy25S1wUcZgPeowbpk16rjZTSPJijSt98
nTgPEMBQIJnRyq8LH4TsWTv3oemT/2iF8z6KcTVs8nnoM/ueLQaAiqTK3YCoTFo0
TLLBjnJ4GsUdP/BEkJedRs+1TPL7KGkBNPyRs/RL+L/wSdNTc1g3Bic0X2q8utXM
7nVJ/MhJbogXPIFL10GHUa8SqPto06d+BCUjSD8QxFYJc5G0v3g8+NrbN5S/W2pP
+fOy5i4GaSucl7gZ5Tap6vKFOCOKly8odYjdHRu61yG1gVwfmJGwEflxuaO9Fpta
LbN7TwF4rDu8IA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:10 2025 by rpki-client