Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File:                     LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier:          08ZrnRNjOLAV82VCdkgdwJH0DVIUfFjFAxRhrY7446Y=
Subject key identifier:   4C:ED:71:28:86:FF:05:54:BC:2B:84:E2:2F:DF:A6:BF:9A:2C:19:E3
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer:       /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial:       01962DF3A5C87F13B48039BC966C1035C33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number:          0967
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: 3CKhTAyD5sCOMVMUPf3k6XpwkIrQC0PRcdXajwpZrzQ=)
                          2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a5:c8:7f:13:b4:80:39:bc:96:6c:10:35:c3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=4ced712886ff0554bc2b84e22fdfa6bf9a2c19e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:14:51:f7:74:63:94:6c:d6:54:d8:17:5d:
                    f4:4b:05:e5:ee:8e:39:e2:4a:cc:3e:c1:dd:c1:b2:
                    bc:d7:cc:2c:17:c7:fb:cf:f3:18:f0:c0:57:d3:f0:
                    0f:ff:7a:51:e1:46:53:b0:62:a2:5b:8b:58:c0:28:
                    e1:36:65:87:80:ac:fa:96:ca:2d:70:6c:5e:d1:38:
                    2d:2e:78:53:f0:bd:62:34:55:3b:22:0b:57:1e:71:
                    95:bd:44:8b:5a:0e:dc:7b:23:6c:bf:51:68:d6:c7:
                    6c:66:e3:99:78:ca:ee:06:6c:55:7a:63:13:8d:7e:
                    0b:06:65:3a:e2:68:a8:4b:15:16:36:ef:6d:36:af:
                    00:48:9d:cf:e7:d9:00:19:c0:9f:e4:43:fc:9c:bd:
                    ba:50:51:3e:be:9a:da:24:56:0b:34:e2:7c:7c:0c:
                    e6:45:07:a1:2a:00:5a:ce:01:6c:bd:0f:51:46:21:
                    f3:f5:2b:8d:4d:f4:35:f0:ae:00:92:2c:4b:e7:5d:
                    6f:49:32:ef:d2:e5:e7:14:86:06:ea:07:0f:65:85:
                    0d:be:bd:fe:fe:0a:8f:c9:f9:66:ec:9a:2d:29:01:
                    b0:7a:61:61:7a:cd:89:98:67:5c:6a:e8:f0:a0:b4:
                    fd:da:cc:c3:00:06:50:fe:ce:f3:16:36:38:ea:74:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:71:28:86:FF:05:54:BC:2B:84:E2:2F:DF:A6:BF:9A:2C:19:E3
            X509v3 Authority Key Identifier:
                keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:45:bc:f3:7b:c7:fb:1f:9b:97:c2:9f:18:ee:0d:2c:b1:
         69:88:a7:7f:5c:3b:ef:47:12:db:df:11:ac:6f:24:a5:65:50:
         64:93:ac:92:60:cb:84:04:71:ab:2f:23:1d:65:92:90:a9:7c:
         15:1c:cb:4c:9f:39:19:53:3c:ac:cc:00:6a:ba:8d:a2:7c:c1:
         4d:2d:b6:b1:88:18:ac:04:49:0f:07:e5:10:89:cf:0d:bc:ab:
         3f:24:89:b3:6f:77:86:e5:df:df:ee:9d:dd:15:e0:cf:6b:fe:
         e8:30:bf:6d:ab:b8:db:39:d7:0f:82:c9:3f:4d:91:ab:35:dc:
         18:b3:0d:0f:64:28:7b:a3:4d:45:63:17:f0:e4:65:17:8d:e8:
         d6:e8:01:3a:1d:ef:2b:fb:0f:e3:21:44:25:11:8d:f4:93:3c:
         f9:5a:93:19:88:a6:9e:a8:21:fd:0b:b8:d2:76:0e:fe:45:d8:
         d4:67:c7:80:91:07:61:49:4f:fd:3c:17:28:e2:d9:fe:aa:18:
         3a:cb:6e:12:eb:ad:bd:94:0f:4e:8f:7f:f7:c7:d5:bb:57:0c:
         4b:d5:51:10:16:71:ee:29:52:85:ff:74:ef:dd:3d:ee:6c:d8:
         7b:3e:ff:cd:88:f0:dc:19:5a:44:19:92:dd:95:24:5f:b8:a6:
         f6:ee:f7:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86XIfxO0gDm8lmwQNcM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4
MmE4NjYwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
Eyg0Y2VkNzEyODg2ZmYwNTU0YmMyYjg0ZTIyZmRmYTZiZjlhMmMxOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnwUUfd0Y5Rs1lTYF130SwXl7o45
4krMPsHdwbK818wsF8f7z/MY8MBX0/AP/3pR4UZTsGKiW4tYwCjhNmWHgKz6lsot
cGxe0TgtLnhT8L1iNFU7IgtXHnGVvUSLWg7ceyNsv1Fo1sdsZuOZeMruBmxVemMT
jX4LBmU64mioSxUWNu9tNq8ASJ3P59kAGcCf5EP8nL26UFE+vpraJFYLNOJ8fAzm
RQehKgBazgFsvQ9RRiHz9SuNTfQ18K4AkixL511vSTLv0uXnFIYG6gcPZYUNvr3+
/gqPyflm7JotKQGwemFhes2JmGdcaujwoLT92szDAAZQ/s7zFjY46nSRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEztcSiG/wVUvCuE4i/fpr+aLBnjMB8GA1UdIwQY
MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt
NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj
LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz5FvPN7
x/sfm5fCnxjuDSyxaYinf1w770cS298RrG8kpWVQZJOskmDLhARxqy8jHWWSkKl8
FRzLTJ85GVM8rMwAarqNonzBTS22sYgYrARJDwflEInPDbyrPySJs293huXf3+6d
3RXgz2v+6DC/bau42znXD4LJP02RqzXcGLMND2Qoe6NNRWMX8ORlF43o1ugBOh3v
K/sP4yFEJRGN9JM8+VqTGYimnqgh/Qu40nYO/kXY1GfHgJEHYUlP/TwXKOLZ/qoY
OstuEuutvZQPTo9/98fVu1cMS9VREBZx7ilShf9079097mzYez7/zYjw3BlaRBmS
3ZUkX7im9u73fg==
-----END CERTIFICATE-----