Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
File:                     L9lxonxvwsZi8GXdi_qLihMsHq4.mft (raw, json)
Hash identifier:          803tw7An7+hOjL5OCKfA8qHfyhZHT63uaGpBqVltKPY=
Subject key identifier:   20:0B:87:64:D1:9C:6B:97:BF:C3:5E:FB:09:F1:8E:B3:6A:17:09:22
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Certificate issuer:       /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial:       019514A46C86AF92DEDD063190E08E4B4470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
Manifest number:          0C4C
Signing time:             Mon 17 Feb 2025 16:01:14 +0000
Manifest this update:     Mon 17 Feb 2025 16:01:14 +0000
Manifest next update:     Tue 18 Feb 2025 16:01:14 +0000
Files and hashes:         1: 5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa (hash: VZnp6fYvw/+BPHQQcr7mdLl9tbfRb+FY6UHV9H/juh0=)
                          2: DW0TBajIRaJNjehdF_P6lFN1E-I.roa (hash: mI7ifTl+PSXtmyQehKoi7R5vAkxLOpMKlijli+a8Hsw=)
                          3: L9lxonxvwsZi8GXdi_qLihMsHq4.crl (hash: JwlJdZtRz1idpQLNxbQDz0lMYUFuuPZLV71cCvi9Ziw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:14:a4:6c:86:af:92:de:dd:06:31:90:e0:8e:4b:44:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
        Validity
            Not Before: Feb 17 16:01:14 2025 GMT
            Not After : Feb 18 16:01:14 2025 GMT
        Subject: CN=200b8764d19c6b97bfc35efb09f18eb36a170922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cb:7f:56:25:74:ee:98:b9:9e:a6:db:9b:f9:
                    ca:fc:dd:d9:5e:15:4b:6e:70:fa:3d:1e:a6:a5:10:
                    de:3d:68:57:45:b8:d9:78:4d:6a:16:6b:45:86:57:
                    a3:b9:27:87:23:89:33:21:a6:46:23:fd:f7:c9:a6:
                    93:04:05:ac:69:ef:81:05:04:e5:75:4f:e9:a7:22:
                    25:81:29:c4:16:43:ea:9f:a2:e1:08:25:cb:de:01:
                    08:ec:7b:6f:fb:dd:e1:37:67:eb:2e:1f:a4:14:96:
                    e4:34:5d:a4:8f:d0:06:60:28:a4:32:a0:31:e6:fc:
                    bf:b2:47:7f:d0:62:e8:1b:cc:00:39:0c:75:3d:32:
                    56:bd:ad:88:07:ff:30:85:96:ae:b1:0a:48:74:80:
                    6e:a0:26:0a:a8:39:0a:66:c4:59:83:ed:a4:6b:5c:
                    fc:ab:49:69:c5:4e:ea:3a:fa:4d:ae:fa:26:c0:0a:
                    e3:a7:27:01:09:0d:25:be:4e:5c:33:ea:b2:84:6d:
                    b9:6c:0f:37:97:c1:99:25:99:8c:2d:4a:c1:0d:08:
                    1b:af:81:9d:a2:b1:74:cd:24:f2:6d:87:ce:73:30:
                    0c:c3:13:ec:af:a4:25:05:26:fa:17:59:ed:f0:88:
                    00:53:9a:87:75:ce:fd:1e:c9:a8:cc:c0:bf:0c:ea:
                    b8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:87:64:D1:9C:6B:97:BF:C3:5E:FB:09:F1:8E:B3:6A:17:09:22
            X509v3 Authority Key Identifier:
                keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:82:5e:ec:c6:0b:10:79:33:59:c3:c0:97:61:22:17:fb:2f:
         6b:21:4f:73:b8:ab:29:5a:de:64:39:9d:16:9d:a2:27:b1:8b:
         97:ff:be:e5:e0:db:b3:7e:bd:fa:43:c2:fe:88:3d:3d:ae:99:
         58:78:c9:56:13:43:3a:07:41:68:96:08:0f:fc:cc:4b:0e:f4:
         31:21:ce:ce:c7:56:20:2c:15:cc:45:38:75:49:65:7e:e8:c6:
         b7:fd:a5:29:b0:20:5d:e4:e2:d9:76:4e:31:cd:62:a9:05:b8:
         c2:12:1c:fd:34:e8:79:fa:e5:c5:82:d3:47:e9:41:98:ae:c0:
         60:9a:ce:55:d5:5e:9b:dc:50:91:81:2e:6b:7e:e7:ac:f5:00:
         2d:08:1d:d8:d5:b9:e9:6d:55:8c:af:92:86:f9:70:e3:66:f3:
         f5:5a:bb:6e:a7:84:df:93:1c:95:ed:95:a4:1c:ea:26:6d:e4:
         b8:46:e7:bc:5e:61:52:67:b8:0f:91:72:71:06:9c:8e:c2:71:
         a5:0d:72:3c:ca:72:19:7d:ee:e9:73:9b:cd:85:dd:e0:df:9a:
         04:ed:ee:a2:13:9c:d8:82:76:aa:dc:82:f9:63:bd:e8:f7:97:
         8f:4a:58:92:c2:50:94:57:79:52:66:cc:1f:5d:50:91:ae:d2:
         40:f9:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----