Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File:                     lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier:          Kg7xVbzB65JZC0mLL/xVlgOlaLJifhVrkyUSCW/bewE=
Subject key identifier:   23:2A:99:05:39:C9:8E:53:63:34:F1:62:03:9A:2D:D9:09:0D:C0:73
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer:       /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial:       01962ECFB5CD2CC64B4E00B4E2680525A8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number:          0B96
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
                          2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: 5NBqi2VrGGmGZv1fFQMrWLOVr+bhQBWCagUvgxuH2TA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:cd:2c:c6:4b:4e:00:b4:e2:68:05:25:a8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=232a990539c98e536334f162039a2dd9090dc073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:b2:ee:39:bc:53:4a:1c:70:94:da:c2:af:
                    44:06:c1:4c:74:be:5c:5e:70:55:10:30:b9:7a:36:
                    2c:50:57:91:20:34:c3:f9:c2:69:b3:13:44:a0:fb:
                    0a:c0:7f:20:42:5f:c4:ef:e2:98:38:c8:ce:be:f7:
                    c5:98:8f:43:09:6c:4b:ee:b3:7c:e2:73:6f:e2:76:
                    6a:ab:0c:5a:7f:66:f0:f9:59:3a:8b:fc:e1:46:80:
                    a4:9c:f0:9c:be:1e:b6:38:7d:26:ff:f0:78:36:e4:
                    11:9b:24:48:89:f1:1b:ea:30:2f:36:82:25:cf:72:
                    1b:3e:8c:ff:a9:5c:12:7c:98:e8:81:61:95:1b:8a:
                    81:17:a3:a1:7e:ac:a5:80:90:b1:e9:50:34:ae:43:
                    f6:5b:20:48:76:56:3f:c3:2b:22:c9:77:a8:b9:b3:
                    f7:00:c9:73:ce:bb:c3:85:56:a2:ed:e4:67:85:6b:
                    8f:81:e6:87:de:16:c0:2b:ad:5e:54:d3:a0:7a:42:
                    7a:30:97:e1:34:91:38:15:17:8f:24:67:a7:c8:9e:
                    43:28:9f:e0:85:79:16:17:7e:89:5d:6c:65:cc:99:
                    14:d4:8e:ec:19:d5:b0:a2:ff:f9:88:b9:ac:a4:d8:
                    2d:9f:7c:ca:e6:c4:c8:41:1f:1a:b6:79:c0:8a:b9:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2A:99:05:39:C9:8E:53:63:34:F1:62:03:9A:2D:D9:09:0D:C0:73
            X509v3 Authority Key Identifier:
                keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:27:fa:ad:30:12:3b:5b:aa:bd:1c:11:6e:34:d6:01:13:
         4f:c3:8c:48:6b:9f:7f:cd:c4:e3:0e:24:42:64:e9:f1:ea:65:
         37:88:7f:13:65:8b:b4:b8:60:6c:9a:7e:6f:57:e7:48:ba:33:
         5d:30:fe:b0:fd:7c:10:61:ee:63:2c:66:d4:94:84:22:e4:91:
         08:ca:dc:40:7c:ba:7c:61:24:78:69:aa:f4:74:e9:36:02:54:
         42:a3:86:f1:44:9d:5c:2a:cb:69:4d:13:b4:3c:7a:74:61:9e:
         11:cb:61:17:f0:16:d0:11:ba:f4:6d:4c:b8:e2:ce:b4:fd:9d:
         45:aa:a4:e6:d3:dc:73:ce:80:24:4e:98:ca:45:4b:98:81:3f:
         73:d8:2f:ea:ba:ec:6f:f8:cd:96:f2:9d:b2:aa:f4:d3:19:d5:
         4d:2a:f2:f6:63:40:ca:28:36:f7:77:21:a3:5c:35:c9:db:28:
         1d:2c:3f:ed:fc:c8:18:71:c5:08:88:a7:e9:19:83:24:31:25:
         32:4d:57:28:59:69:64:9c:0f:6f:8d:c6:30:01:5f:eb:da:9c:
         7f:55:d6:d1:29:95:7d:9a:60:be:4b:53:7c:15:bd:93:b4:95:
         c9:ba:51:76:57:61:04:64:07:f9:fd:cf:91:7a:15:a8:1e:df:
         8f:f8:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----