Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File:                     LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier:          HUGdq6f9jvaVbRBl87Ic8nYtT5AhIu6igHPC7tcpBdQ=
Subject key identifier:   03:3C:E0:75:24:0D:27:23:1F:B1:77:26:05:DB:15:76:EE:1F:36:7A
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer:       /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial:       01962E2B4320E22FBD3898DD106BAA759DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number:          0EB1
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
                          2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: Y765gfrBc5NsOjyU5eVFHvY7pszg2uEux9/l4/uQXRE=)
                          3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
                          4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:43:20:e2:2f:bd:38:98:dd:10:6b:aa:75:9d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=033ce075240d27231fb1772605db1576ee1f367a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:dc:db:2e:98:69:c1:a3:03:2a:3d:0e:80:
                    b3:b5:96:3d:8d:9d:3f:a1:28:d0:9c:05:e6:eb:13:
                    cf:80:f1:cd:a6:14:b8:fc:27:1f:9d:7b:60:8a:3a:
                    a7:f1:1d:ba:54:cf:7b:33:48:5c:e9:9d:02:26:ff:
                    a5:0f:4f:63:1c:3e:90:f3:91:2a:a9:09:67:7a:1a:
                    b0:c2:17:1c:87:16:63:89:14:82:60:88:7e:d3:d0:
                    d1:d1:a6:fd:fc:fd:e0:ea:ca:21:19:8d:33:18:79:
                    86:4b:3b:d0:95:19:e2:86:2e:db:2d:d7:ad:4a:d5:
                    92:d7:12:76:db:ed:e9:56:b3:39:e7:c0:d1:54:d3:
                    a7:da:4e:4d:31:ff:1e:ad:9a:40:d8:3b:b2:47:01:
                    b3:78:0f:b3:5a:5a:68:b0:98:f9:af:aa:03:b9:91:
                    2c:56:e0:1c:48:b9:bc:92:d9:f7:0b:db:6c:a3:ea:
                    58:2d:37:99:9b:09:00:ab:3f:b9:41:a1:9b:35:43:
                    38:c5:b2:2e:b1:e1:ad:29:20:df:0b:a2:76:60:5c:
                    73:1c:6e:0b:09:db:07:23:cf:2b:ae:89:bd:ae:b5:
                    1c:74:b1:37:ed:4c:cc:73:70:0c:a6:7f:47:2e:ee:
                    17:89:81:56:66:6b:4f:30:0f:ee:9d:77:00:1d:7c:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3C:E0:75:24:0D:27:23:1F:B1:77:26:05:DB:15:76:EE:1F:36:7A
            X509v3 Authority Key Identifier:
                keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:04:1a:f4:05:4f:18:28:57:57:0b:33:42:81:bf:e3:3e:
         61:a6:01:c5:8c:8b:74:02:ed:76:71:ce:4c:a3:54:8b:11:b8:
         73:80:a1:5d:f7:ae:d5:d7:5b:f7:a6:b1:32:ff:39:88:f6:2a:
         9c:81:e0:78:02:41:b1:6f:2b:8a:11:1a:e2:67:08:84:9f:90:
         29:73:57:2e:f9:2d:3f:06:a4:77:94:68:bd:00:24:e6:26:77:
         1f:31:f0:f7:60:6c:c3:d7:42:01:c2:e2:ea:d1:48:e5:21:3d:
         df:9e:0d:3f:d6:bf:84:a6:3b:18:99:9c:f3:72:b8:1a:76:5b:
         e8:f1:c8:5f:d6:e6:d6:e2:36:69:5a:b6:68:4f:ce:a6:dc:e3:
         8b:6b:da:c0:67:2f:13:cb:10:dc:37:94:32:85:bf:52:b4:35:
         5a:1d:e8:06:2b:62:f2:4d:9b:9c:a6:c1:6b:6a:ac:48:48:9d:
         a0:84:df:9d:ce:ed:dc:6a:d3:65:c3:8f:cc:ee:ac:89:25:5f:
         97:d1:c8:96:e4:d2:72:93:3e:2e:1d:e1:dd:97:dc:e0:3b:ff:
         5d:11:39:92:31:46:e6:35:b7:0f:06:e5:df:5c:bd:f9:9f:83:
         2d:41:78:86:0b:fb:57:67:9a:58:be:cd:ad:07:f4:aa:cd:4f:
         fa:af:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----