Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File:                     LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier:          8SHh46HwNcu46EIEfksHW72hZzK1mk2/mErOyb9P5hk=
Subject key identifier:   4E:75:76:2B:05:DE:F0:8A:D5:F8:10:98:46:11:B5:C0:BA:BC:49:8A
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer:       /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial:       01962F0711EE6EB0780FF03B12AF84F28661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number:          02BC
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: AEEtHkm9gAMsl/DcL8o19ruQriK6X9K1xTQaSeek41k=)
                          2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
                          3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:ee:6e:b0:78:0f:f0:3b:12:af:84:f2:86:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=4e75762b05def08ad5f810984611b5c0babc498a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:dd:43:89:22:fc:2a:0e:cf:f6:3a:51:40:
                    c2:ea:4e:cd:e8:95:fb:6b:70:f3:8d:2d:fc:80:d7:
                    3e:73:41:58:17:72:44:43:f4:a5:b6:d9:5b:d3:c6:
                    ea:77:64:d6:81:e0:06:3d:8b:08:2d:89:09:34:df:
                    58:e3:d7:de:cc:6a:0b:cf:9b:13:2f:bc:e7:a2:1d:
                    8d:23:53:40:fa:ed:39:33:fa:b4:ed:6c:c4:e0:b6:
                    a5:2c:f9:e8:30:4e:36:3a:45:4a:2d:73:48:a3:f4:
                    5b:72:07:5f:ea:5d:be:b3:e3:b4:aa:3a:dc:e8:7b:
                    ed:2d:b7:72:df:10:21:47:44:23:41:a4:41:76:d4:
                    01:2a:71:72:a4:1b:a1:aa:b5:83:70:ed:92:26:24:
                    cf:56:3b:ec:c8:83:30:8f:13:92:7e:cc:aa:45:74:
                    30:57:7c:55:5a:80:40:4d:72:5a:c7:e2:d7:07:f8:
                    e3:85:a3:60:41:c5:6d:5c:61:28:44:1b:d3:26:85:
                    63:5d:5f:22:1d:15:3a:49:65:52:be:e8:a0:64:74:
                    8c:6c:d4:96:7f:86:cd:6e:1c:03:3c:42:fd:ed:37:
                    f5:3a:c8:ee:7d:3e:87:2f:1f:1e:e3:cc:cb:07:59:
                    8a:a0:fd:4f:72:3f:c5:52:5d:f8:cb:b7:df:e6:c4:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:75:76:2B:05:DE:F0:8A:D5:F8:10:98:46:11:B5:C0:BA:BC:49:8A
            X509v3 Authority Key Identifier:
                keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:8f:35:79:83:aa:c6:01:b7:b1:14:64:5d:da:69:02:1e:
         d8:3d:d3:1b:bf:7e:aa:1a:29:39:24:c2:6d:24:05:6d:f7:59:
         82:3b:ab:c2:47:26:5e:c1:52:3b:e6:35:5f:46:95:83:b4:9e:
         41:e7:ac:5b:2f:c9:a6:82:ef:1e:fe:90:ff:15:8b:3a:68:f2:
         c5:de:7d:fb:63:cb:b7:c8:f7:b1:fa:93:29:7d:f7:fa:c2:5a:
         a5:c8:ff:b9:dc:1b:b1:f3:a9:7a:ad:eb:5c:04:b8:c6:8f:d0:
         b7:3a:63:bc:7f:e7:98:c4:62:b5:5f:fc:e7:25:e0:0a:32:9f:
         3e:a8:ca:0f:08:4b:0b:18:dc:1a:76:4a:e2:1c:b9:58:48:3f:
         8e:57:a5:85:94:2b:66:e9:d1:f3:9f:b8:5f:20:c0:a9:09:95:
         12:37:c4:a8:9a:f3:0e:f4:82:83:0f:1d:15:f2:e9:79:1a:4c:
         52:75:84:fd:5e:5d:69:28:f2:ec:86:cf:66:b7:09:65:09:2d:
         5e:de:5a:c1:0c:ca:f3:12:91:be:0f:cc:f0:c1:c3:8d:5b:94:
         de:92:97:29:ef:19:1c:b4:cc:f9:9d:98:ca:02:a1:ad:fb:e8:
         49:9e:6f:43:a9:c5:21:e4:3c:d7:fb:38:8d:25:80:eb:2a:71:
         21:18:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----