Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/LifautL9KM9ni_eWEO-r-EZ1Qz0.mft
File:                     LifautL9KM9ni_eWEO-r-EZ1Qz0.mft (raw, json)
Hash identifier:          qxL5JfnH7LjZKBdLCKaVKjh15435dEb/tFoUoyiDfHI=
Subject key identifier:   51:9F:9C:89:7B:0A:64:0C:FB:FF:50:4C:6D:79:36:11:98:9D:DC:E6
Authority key identifier: 2E:27:DA:BA:D2:FD:28:CF:67:8B:F7:96:10:EF:AB:F8:46:75:43:3D
Certificate issuer:       /CN=2e27dabad2fd28cf678bf79610efabf84675433d
Certificate serial:       019439578667E43ACAC36092C665C381AFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LifautL9KM9ni_eWEO-r-EZ1Qz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/LifautL9KM9ni_eWEO-r-EZ1Qz0.mft
Manifest number:          0375
Signing time:             Mon 06 Jan 2025 02:00:24 +0000
Manifest this update:     Mon 06 Jan 2025 02:00:24 +0000
Manifest next update:     Tue 07 Jan 2025 02:00:24 +0000
Files and hashes:         1: LifautL9KM9ni_eWEO-r-EZ1Qz0.crl (hash: 8vj/anq3UVue6S/mBiU3TQNkc34TH1XijkB0IjhCpuY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:39:57:86:67:e4:3a:ca:c3:60:92:c6:65:c3:81:af:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e27dabad2fd28cf678bf79610efabf84675433d
        Validity
            Not Before: Jan  6 02:00:24 2025 GMT
            Not After : Jan  7 02:00:24 2025 GMT
        Subject: CN=519f9c897b0a640cfbff504c6d793611989ddce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:f2:fd:c9:18:16:88:49:88:77:a5:92:13:
                    a6:fa:67:13:2b:8e:b3:ff:35:bb:37:e5:4f:3e:38:
                    c8:fa:47:1e:1e:a5:d0:cf:3c:3d:50:e3:90:c5:dc:
                    77:31:94:30:30:70:87:cf:d0:45:47:25:15:dd:e8:
                    62:c2:ca:64:e2:3a:c1:84:6c:ac:62:9d:e7:c2:95:
                    19:37:c1:c2:a3:e8:dd:54:0d:40:ce:7d:bd:a2:8e:
                    88:aa:cc:93:43:cc:aa:2f:20:f8:00:b1:db:39:c6:
                    9b:a9:c9:56:07:e8:e2:39:6f:83:10:3d:e3:bd:f8:
                    4a:e4:04:46:75:52:70:91:b6:b3:c8:4a:39:a9:ce:
                    3e:1f:43:1b:e4:a2:42:48:55:3e:33:ad:cd:da:c0:
                    fe:9a:61:b6:d6:08:4b:36:9c:0d:2e:18:31:33:4e:
                    c9:c7:9d:f4:de:1b:9e:2e:ea:6f:d5:f8:15:cd:dc:
                    09:9a:a4:83:d9:e5:15:9b:3a:76:72:e6:2b:c1:f2:
                    36:6a:ed:4d:79:02:2d:50:8d:f2:ce:2f:29:c0:93:
                    7f:b7:e3:d8:cd:66:b5:34:0a:96:c7:3d:e1:e2:ae:
                    3f:e1:21:7c:cd:8e:13:03:3f:20:49:e9:65:44:eb:
                    41:d5:aa:9f:ab:0f:77:97:cc:07:62:c1:03:ab:38:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:9C:89:7B:0A:64:0C:FB:FF:50:4C:6D:79:36:11:98:9D:DC:E6
            X509v3 Authority Key Identifier:
                keyid:2E:27:DA:BA:D2:FD:28:CF:67:8B:F7:96:10:EF:AB:F8:46:75:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LifautL9KM9ni_eWEO-r-EZ1Qz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/LifautL9KM9ni_eWEO-r-EZ1Qz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/LifautL9KM9ni_eWEO-r-EZ1Qz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:a3:04:23:97:54:ea:20:3e:c8:47:f8:cf:98:84:40:18:
         60:dc:af:4a:2b:e4:86:bb:77:ab:f1:fe:2c:69:59:e3:f2:68:
         f5:28:3c:dc:98:0e:4f:44:f7:38:34:7c:94:6c:b8:4b:dd:0d:
         82:14:5c:a2:24:10:34:9b:a7:82:2e:f6:e1:11:dd:d1:b0:3b:
         0b:c7:44:7f:4e:9c:df:80:69:51:66:c3:8e:06:f3:39:d3:ca:
         74:f1:28:06:05:40:82:97:dc:03:9f:5e:64:5f:eb:93:53:a1:
         02:d2:0e:22:7a:ad:76:39:dd:41:f3:2c:77:e9:f3:24:55:82:
         6e:86:25:ec:be:f5:21:19:36:21:bf:6d:1d:73:9d:fb:50:b0:
         99:2b:42:fd:7c:18:c9:dd:d0:24:a0:50:9d:81:63:17:8b:ca:
         d5:01:51:04:9b:dd:24:5b:a3:1c:16:52:0a:a9:71:52:43:68:
         30:fd:bc:d2:b1:ef:c1:b4:b6:aa:66:2f:83:2f:29:64:19:c7:
         85:c0:76:49:b7:4a:44:1d:5b:eb:01:49:a1:d9:c6:e7:45:31:
         00:c2:71:65:a2:36:fb:31:9b:be:f9:17:6d:b2:a3:94:1e:90:
         6f:30:b1:45:97:1d:03:63:7a:f6:d8:84:c9:aa:d5:d6:1a:ca:
         5f:d2:43:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQ5V4Zn5DrKw2CSxmXDga/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjdkYWJhZDJmZDI4Y2Y2NzhiZjc5NjEwZWZhYmY4NDY3
NTQzM2QwHhcNMjUwMTA2MDIwMDI0WhcNMjUwMTA3MDIwMDI0WjAzMTEwLwYDVQQD
Eyg1MTlmOWM4OTdiMGE2NDBjZmJmZjUwNGM2ZDc5MzYxMTk4OWRkY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+3y/ckYFohJiHelkhOm+mcTK46z
/zW7N+VPPjjI+kceHqXQzzw9UOOQxdx3MZQwMHCHz9BFRyUV3ehiwspk4jrBhGys
Yp3nwpUZN8HCo+jdVA1Azn29oo6IqsyTQ8yqLyD4ALHbOcabqclWB+jiOW+DED3j
vfhK5ARGdVJwkbazyEo5qc4+H0Mb5KJCSFU+M63N2sD+mmG21ghLNpwNLhgxM07J
x5303hueLupv1fgVzdwJmqSD2eUVmzp2cuYrwfI2au1NeQItUI3yzi8pwJN/t+PY
zWa1NAqWxz3h4q4/4SF8zY4TAz8gSellROtB1aqfqw93l8wHYsEDqzjb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGfnIl7CmQM+/9QTG15NhGYndzmMB8GA1UdIwQY
MBaAFC4n2rrS/SjPZ4v3lhDvq/hGdUM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlmYXV0TDlLTTluaV9lV0VPLXItRVoxUXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMWVjZWEtNjk2OC00YjI2LWI5YmUt
MjkwMTBjMDI0NGNiLzEvTGlmYXV0TDlLTTluaV9lV0VPLXItRVoxUXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMWVjZWEtNjk2OC00YjI2LWI5YmUtMjkwMTBjMDI0NGNi
LzEvTGlmYXV0TDlLTTluaV9lV0VPLXItRVoxUXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj2jBCOX
VOogPshH+M+YhEAYYNyvSivkhrt3q/H+LGlZ4/Jo9Sg83JgOT0T3ODR8lGy4S90N
ghRcoiQQNJungi724RHd0bA7C8dEf06c34BpUWbDjgbzOdPKdPEoBgVAgpfcA59e
ZF/rk1OhAtIOInqtdjndQfMsd+nzJFWCboYl7L71IRk2Ib9tHXOd+1CwmStC/XwY
yd3QJKBQnYFjF4vK1QFRBJvdJFujHBZSCqlxUkNoMP280rHvwbS2qmYvgy8pZBnH
hcB2SbdKRB1b6wFJodnG50UxAMJxZaI2+zGbvvkXbbKjlB6QbzCxRZcdA2N69tiE
yarV1hrKX9JDng==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:15 2025 by rpki-client