Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File:                     LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier:          X4b9NJTfg7cFKYSiyJMMCK9UPaWNDDwPrs2olGaXz4A=
Subject key identifier:   72:3A:77:D0:2C:8F:F5:DA:64:49:4F:0F:3A:39:00:84:3D:01:E6:D1
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer:       /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial:       01962F072FEB7DFF4F8508DBD45E19F55013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
                          2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: ndjbdLmpsdtHklt41c3TgVBpYP1+2/d7/zYXMBiu46Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2f:eb:7d:ff:4f:85:08:db:d4:5e:19:f5:50:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=723a77d02c8ff5da64494f0f3a3900843d01e6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:8f:8f:83:5e:a7:dd:95:c0:40:e0:4e:d9:
                    1e:8e:ce:ed:ad:11:1c:94:4a:92:fa:ca:d6:72:11:
                    81:cb:c2:f3:d1:8c:2a:ea:c8:b4:3b:0b:58:d9:39:
                    a5:22:f3:d2:2f:87:36:00:b3:2f:b6:45:75:c1:40:
                    84:17:39:6f:8e:c2:00:4f:a1:c9:6e:ac:2a:17:7c:
                    94:1a:3d:0f:0d:2b:6f:cf:d0:d6:f3:55:01:53:83:
                    7d:41:81:d1:c4:76:d6:dc:83:59:41:52:e6:1c:fe:
                    02:a4:50:7e:f1:ce:10:ff:8c:71:59:73:d0:40:2d:
                    67:a0:b7:86:7d:8c:6b:25:46:9b:59:56:8d:df:92:
                    22:6a:a8:5a:18:80:40:09:ac:e5:7d:c0:07:84:c8:
                    94:af:20:7f:e2:60:05:1f:19:5e:d5:48:6d:e4:9f:
                    8e:8e:24:5d:54:4e:2a:89:1b:2c:d5:41:9b:3a:ed:
                    b9:ec:fd:58:29:2a:21:b8:c6:5d:e7:54:a1:e4:33:
                    16:83:22:b2:b8:55:60:12:97:f9:da:cf:47:d6:29:
                    00:8e:c5:fc:a0:f8:87:25:ec:71:d6:e4:8e:af:b8:
                    4e:28:0a:aa:51:dd:87:0d:00:78:09:8b:61:f1:9d:
                    c9:e0:34:7d:39:b9:8d:6a:b6:7f:83:cf:8f:9f:24:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:77:D0:2C:8F:F5:DA:64:49:4F:0F:3A:39:00:84:3D:01:E6:D1
            X509v3 Authority Key Identifier:
                keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:05:a3:06:6e:25:26:0d:b1:e0:81:78:54:7c:eb:42:07:6c:
         71:75:26:07:50:ec:7e:48:f6:c5:51:c1:dc:23:f6:90:17:4d:
         b3:1d:2e:b5:c2:e2:e9:85:a7:23:2f:ae:0d:03:d7:0a:80:d9:
         35:60:08:3a:cb:ea:f8:50:19:30:2c:d7:da:97:06:18:0f:60:
         2b:5d:8d:57:30:70:aa:2a:67:7b:be:b0:af:27:37:60:82:8f:
         9b:4a:7a:03:be:2d:4e:0a:e2:4b:83:95:36:dc:58:7c:37:22:
         0d:4d:73:61:29:86:7c:68:db:50:aa:15:00:7c:ee:ae:85:da:
         b0:86:5c:51:de:25:38:70:8e:7f:e0:87:54:74:95:01:2a:c2:
         b7:9d:c9:71:39:81:5a:99:f5:6e:2b:ec:72:13:bc:c4:8f:28:
         19:f4:b4:62:30:0f:8c:71:7b:92:ad:f0:74:cb:15:be:1b:26:
         f9:b0:98:f2:0b:c1:1e:94:d1:3a:7c:63:6b:07:92:7c:a6:ef:
         87:4c:e6:d9:76:3b:ad:73:7d:48:f6:aa:9b:e7:c9:fc:81:05:
         d2:11:c8:f9:9d:a0:5e:00:48:25:eb:54:6a:b3:f8:48:a7:47:
         8e:bf:41:2f:b3:7d:75:e9:ee:0a:de:5f:f5:e6:d3:3f:17:f9:
         a4:49:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----