Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File:                     LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier:          VgC85zjGwZGbk0ZT+YVSkASo26TjXDuTKFmL58CwYkg=
Subject key identifier:   A4:CB:70:1A:88:3D:E4:49:C2:1D:60:9B:F3:08:0C:9C:1B:28:30:CF
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer:       /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial:       01962E61E9256A20523F13502C5D3B98CCBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: /NodBBo96lKm9jmljB8Q91Ya8fBJSCxldZJQJTAgQo8=)
                          2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:25:6a:20:52:3f:13:50:2c:5d:3b:98:cc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=a4cb701a883de449c21d609bf3080c9c1b2830cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:ee:db:af:43:39:b4:b3:ae:7c:10:2b:30:
                    d8:ae:95:5d:1a:11:ea:88:ac:35:1d:36:01:5c:81:
                    39:ed:c4:82:fd:f7:04:7c:2d:e0:2a:8a:f3:e4:02:
                    f1:c1:c5:aa:95:d5:04:9e:f2:7a:f7:9f:b6:07:97:
                    10:b3:65:7b:b0:c3:f8:d5:7a:d9:3a:83:f7:27:52:
                    d2:de:f2:79:4b:f0:54:4a:a9:9a:f3:d2:44:91:6b:
                    bd:f3:1b:0a:07:b0:c9:98:a6:57:07:9f:67:de:ab:
                    0d:6b:b9:64:8f:c0:2a:f6:69:c0:d0:90:db:83:44:
                    c8:15:26:c4:ff:50:2e:1b:e6:b1:fe:b5:ee:de:22:
                    76:f1:6c:df:b0:de:91:9d:14:39:3e:fb:02:d8:ee:
                    b6:08:ee:39:5c:34:8a:23:07:be:c2:8d:c1:d9:be:
                    92:d1:25:46:88:46:55:02:16:cd:cd:07:c6:94:22:
                    84:d1:d0:ee:c3:68:17:d1:94:33:6b:86:18:8d:1d:
                    64:09:c0:2c:cb:91:94:8b:3e:55:a2:3e:3a:73:d5:
                    d5:09:ad:66:d6:c1:df:d1:85:ad:a0:39:90:be:09:
                    34:76:dd:56:29:59:c5:11:3d:07:d2:c4:ae:ac:d4:
                    11:f5:bb:6c:86:59:56:73:12:5d:0d:39:4a:3f:e1:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:70:1A:88:3D:E4:49:C2:1D:60:9B:F3:08:0C:9C:1B:28:30:CF
            X509v3 Authority Key Identifier:
                keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:66:4b:a8:12:b0:e7:58:57:4f:6c:7f:bf:30:74:6f:19:74:
         1e:5c:51:d0:72:d4:e9:8b:bc:00:23:bb:5b:b6:07:16:d6:4e:
         d7:e8:f7:10:fb:9f:b3:f4:fc:5d:e2:40:e2:e6:12:da:9e:f4:
         ce:75:43:a8:79:44:c5:ce:aa:86:16:8b:55:6d:a1:4d:20:8e:
         4b:15:71:48:b1:53:5e:8b:39:1a:7b:91:d7:c4:0b:b5:f8:e8:
         3f:76:8d:dd:7c:13:a0:d0:0f:4e:db:34:18:78:13:f7:28:6b:
         1e:f2:e4:c1:f9:b9:97:31:56:68:2b:aa:40:66:50:05:16:30:
         14:15:07:dd:f6:96:15:b5:7b:a9:3f:50:a4:73:0c:07:86:c5:
         b8:0e:97:c3:d4:5c:f7:5f:85:fb:49:ea:de:0d:23:b5:52:08:
         49:e2:0a:87:33:a4:68:36:3d:16:b4:ed:5b:55:1b:67:7b:b7:
         d2:de:b4:10:fc:62:ad:08:2e:be:23:f8:ce:01:ed:bf:07:36:
         8e:83:48:84:d9:3b:d6:9b:2c:4f:46:4e:1c:2b:fa:95:a5:5f:
         d1:38:3e:de:50:72:0a:b6:ac:f9:ff:a9:11:90:0e:07:ae:3f:
         5e:79:ab:40:86:fb:c5:fe:3d:80:a3:93:a3:4a:ab:12:be:67:
         61:35:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----