Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
File:                     LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json)
Hash identifier:          ro6acfLRnt301fwZ6I0PtLXsa1mlVpK8yTESS1VHhsE=
Subject key identifier:   26:BF:A3:87:0E:B0:40:75:14:94:09:9F:4A:31:2D:D6:63:17:B8:A0
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Certificate issuer:       /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial:       01962E98FEC3108B5343FEA7CB1FD00DA3E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
Manifest number:          14CC
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: sclk/PNWLDgAKSifpZjTJHBxnQIudLaFPOyZJ91x8hA=)
                          2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fe:c3:10:8b:53:43:fe:a7:cb:1f:d0:0d:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=26bfa3870eb040751494099f4a312dd66317b8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:77:ac:81:7b:13:9d:c0:01:55:c4:a1:25:
                    7d:66:81:20:98:25:e4:48:78:e6:68:19:95:4e:59:
                    b4:47:ec:11:30:b6:62:24:5d:27:e9:97:3c:32:85:
                    f8:a1:45:58:1b:af:93:46:e8:42:33:36:92:87:00:
                    a8:5b:af:e2:41:48:de:cb:6e:4d:0c:78:f3:b6:25:
                    bc:9d:0b:1c:35:13:29:9b:57:3d:57:f2:9e:6e:52:
                    b6:02:34:0d:2b:1f:f6:f4:50:ed:6a:c0:ae:2a:2c:
                    8c:d6:9d:03:aa:56:8f:92:a9:bc:d6:6b:0b:2f:c9:
                    8f:91:f2:4a:08:cd:79:a4:f4:1a:2d:0d:21:4d:74:
                    33:ff:5d:a2:98:ef:9d:bf:2a:08:bc:0d:0b:f0:91:
                    b8:f1:df:a7:0c:73:dd:f2:df:fa:18:69:09:fe:82:
                    f5:42:8d:4d:ee:c7:74:57:54:32:27:ed:7b:05:10:
                    bd:a8:6e:d4:ae:36:19:16:97:2a:9b:79:d1:71:85:
                    68:29:7e:23:af:4f:10:33:fb:5e:b5:16:08:76:ad:
                    8c:79:45:47:db:3f:69:33:40:9c:8b:e9:52:bb:0d:
                    a8:c2:29:f7:ec:82:d2:8c:11:b3:60:d8:39:c6:81:
                    0c:72:56:d4:a1:ae:eb:a0:73:cc:81:81:6b:03:02:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BF:A3:87:0E:B0:40:75:14:94:09:9F:4A:31:2D:D6:63:17:B8:A0
            X509v3 Authority Key Identifier:
                keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e2:79:51:4f:d9:b0:23:ae:04:d4:cf:c3:f8:ce:16:67:01:
         04:82:99:13:aa:a5:ab:91:e6:fd:e3:d2:03:5e:7b:4e:9f:83:
         3d:76:77:12:b0:eb:b0:83:b9:8c:98:97:d8:b8:55:83:62:b3:
         c8:aa:53:0d:68:79:e1:17:77:f6:55:64:3b:81:1b:c3:05:61:
         e8:ea:0e:d1:e0:82:27:d5:dd:ba:af:ce:9b:79:a7:84:0c:0f:
         a9:73:6f:41:5e:87:cd:10:63:e9:aa:98:87:a8:a9:ba:7d:9b:
         6f:01:9c:c9:de:37:90:a9:42:b7:18:f2:96:62:22:af:c1:1d:
         5f:ff:97:97:a4:dc:0b:73:c6:27:e2:8c:e2:05:7e:1d:90:34:
         2c:5a:69:5f:1b:5f:4c:3d:f0:e6:22:2d:91:d0:20:1c:62:20:
         46:d7:a1:52:80:b1:3e:5d:da:81:05:f7:d0:bc:87:c6:de:d2:
         a0:7e:78:fa:39:80:8a:4f:e8:da:c3:03:88:f8:b6:b2:a1:99:
         07:15:59:cc:cb:99:0d:87:bb:9a:46:cb:6e:31:af:a2:de:d7:
         a0:ba:a3:73:03:b6:21:d4:be:a9:3c:98:86:a7:95:45:35:63:
         eb:05:9c:1c:0d:75:ef:ed:5a:7e:f7:89:e7:92:e1:41:80:32:
         ce:86:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----