Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          MX7/0E5QDUfB9w9JmTRjLrxEXHXU8YZg/P+L2VTLbsE=
Subject key identifier:   C3:C6:A1:3E:8C:8A:8D:AD:EA:FC:5E:E2:44:27:18:77:FD:CB:D9:F4
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       01962E98C98A568733F513E846AF36A65D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: 6TjGSjyQ0k0LYRcbgWRbdGhhZ7lgwEUnwpMgb0sc1wg=)
                          2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:8a:56:87:33:f5:13:e8:46:af:36:a6:5d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=c3c6a13e8c8a8dadeafc5ee244271877fdcbd9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:75:65:66:d8:8f:9e:40:12:a1:93:6d:28:
                    8f:0f:95:dd:c4:37:f2:42:09:b2:6d:bb:5a:39:63:
                    e8:cf:75:5b:a9:21:92:00:da:61:4a:9c:59:a3:3e:
                    39:53:59:21:3d:bf:b4:32:2e:6f:56:1d:d0:31:2b:
                    c3:5d:73:ac:91:e9:8b:c5:72:66:c8:bc:76:49:76:
                    92:23:a9:b1:ee:0a:08:40:41:6a:74:16:81:3c:fb:
                    d7:55:c0:44:34:9b:0d:de:47:6e:e1:de:47:c3:5f:
                    eb:6a:9d:ec:63:b1:a0:de:34:3d:c7:63:94:c1:f6:
                    89:e3:08:fb:3f:23:db:93:75:33:fc:dc:14:11:46:
                    79:7b:84:7c:b3:48:6d:66:56:28:12:63:1a:5e:0f:
                    f2:28:27:17:fb:aa:06:15:72:4e:80:71:01:be:9f:
                    ac:e5:68:70:47:f7:f0:5f:b5:2d:9d:91:09:75:6b:
                    5e:6e:37:5a:9b:df:a6:16:d4:49:b4:18:26:ea:b5:
                    6f:08:98:f7:3d:fc:96:88:24:57:21:8f:5d:cf:cf:
                    65:7e:9b:60:2f:d5:4e:43:86:9d:58:cf:7e:b2:49:
                    9c:a3:75:d3:5d:c2:e8:bc:b9:d0:35:41:cb:81:c5:
                    bd:a9:d2:99:5e:2d:98:54:a9:9c:74:4f:59:41:62:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C6:A1:3E:8C:8A:8D:AD:EA:FC:5E:E2:44:27:18:77:FD:CB:D9:F4
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:7c:62:28:3a:59:46:b3:40:8b:93:2d:b0:3f:92:58:1f:
         1c:59:98:f5:89:36:fd:f4:29:e6:83:fb:cb:e7:6b:e1:1a:03:
         b5:e6:91:c3:0d:16:3b:b1:a9:ce:e3:4a:51:a6:e6:32:3c:22:
         ee:bf:10:64:0b:f3:9c:87:93:c4:ae:8d:e6:60:76:42:fb:4c:
         98:4f:1e:ea:5e:58:33:3b:98:a1:b6:a3:04:99:27:2b:ce:72:
         a1:1b:f3:c9:58:5a:33:af:f7:13:d3:b0:3f:0a:9b:67:3b:66:
         78:b9:b3:f6:5c:d2:00:41:85:7a:b7:c2:12:c9:45:1f:9c:32:
         55:d1:a2:91:c3:6e:e0:f7:c4:a8:9d:71:4e:bf:5c:8a:85:9d:
         80:f0:68:39:39:83:c8:47:b4:f9:2f:4f:8a:4f:e0:f4:97:b4:
         1e:ac:e2:4b:ad:99:ed:b7:fb:7c:3c:ec:6e:c9:37:38:12:ea:
         47:d0:b2:eb:63:63:a5:7a:ca:3c:6c:0c:27:8a:60:d1:18:63:
         c8:f9:70:29:93:65:38:58:1b:1d:3c:7e:8a:36:68:ea:a2:fe:
         64:9f:c4:16:40:2d:e1:0e:ff:01:11:14:66:27:79:ae:02:d4:
         34:04:7a:19:84:57:cb:fe:1c:97:1c:b0:67:ce:c5:af:47:04:
         2e:f6:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----