Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File:                     LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier:          d27Ck+2Q+bKkZHpBH/fsi5/OEWmqTr2UlVdqUyxCGZw=
Subject key identifier:   53:16:50:1F:30:2C:1C:5F:5C:0E:EE:21:72:04:E6:97:67:4F:90:FD
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer:       /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial:       01962F748F457A0B22124F5E488ABDDCACD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: OSqTp0gU0MS3Q5mCBCo2U1fXsxgPMUlH2DiPCuCXDsw=)
                          2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:45:7a:0b:22:12:4f:5e:48:8a:bd:dc:ac:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=5316501f302c1c5f5c0eee217204e697674f90fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:a4:d7:e4:57:38:6a:9d:bb:e7:61:53:c1:
                    0e:26:06:94:83:50:0f:3c:11:16:13:06:17:fe:6d:
                    f3:7c:a7:ac:e9:7b:8e:7b:54:50:b2:e0:de:df:35:
                    16:04:ce:91:be:80:05:68:9a:9e:26:be:d4:c5:e8:
                    89:0a:a3:be:f7:db:5c:18:16:8f:d5:3e:3b:b7:01:
                    33:c0:13:20:b8:71:96:0a:bd:39:99:47:b6:de:cf:
                    07:bb:77:9c:d3:0f:77:d0:9a:d6:92:c1:49:8f:b7:
                    e8:dc:28:1d:e9:2e:80:50:1c:ae:52:49:82:c9:cf:
                    c0:df:e7:19:72:bb:75:13:a0:dc:f4:60:6b:7b:0e:
                    b2:92:f5:0c:e4:fc:7b:ae:1e:51:73:16:6a:9a:9d:
                    ec:62:86:f3:6d:37:1a:fb:7b:89:b1:a2:52:a4:93:
                    bd:d8:97:53:c9:95:28:15:12:b1:a8:78:eb:2d:3f:
                    df:13:8c:7c:1e:68:b0:49:2a:2e:13:5f:fd:9c:e0:
                    f6:ca:22:5c:a4:57:ca:78:13:d3:44:c2:24:a4:d0:
                    af:62:4d:ad:53:f9:a0:dd:fb:24:f2:eb:da:94:3e:
                    d6:56:fc:b0:83:5f:93:de:54:fb:bd:2e:5e:1f:dd:
                    05:cb:96:60:52:04:0d:5e:81:7f:1a:2e:73:f5:70:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:50:1F:30:2C:1C:5F:5C:0E:EE:21:72:04:E6:97:67:4F:90:FD
            X509v3 Authority Key Identifier:
                keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:02:8f:12:c3:d4:f5:49:1d:19:14:95:58:f2:84:04:b0:
         5b:36:b3:aa:78:53:ee:63:e9:82:dc:13:f9:90:a5:2b:bb:df:
         92:ce:e5:30:cf:fe:1c:45:c6:94:d7:a5:4e:5e:d1:5b:14:57:
         59:06:5b:f7:7b:2b:67:09:25:9d:b5:f7:c4:a5:61:1f:ba:39:
         12:e4:cc:82:fb:32:0f:20:da:b9:2c:99:e1:32:62:ca:8c:9f:
         6d:60:cb:36:fb:98:f3:05:18:8c:d9:c8:4c:8f:85:38:ec:89:
         1b:f0:5f:6a:4d:86:34:5c:b8:82:4d:a2:e9:b9:ee:03:42:1c:
         7a:93:27:a0:e1:46:96:68:b7:aa:68:bd:86:5e:1a:0f:db:3d:
         d6:e8:bb:fa:cb:fc:89:0f:96:eb:90:77:10:91:dd:72:b4:71:
         52:48:a2:f1:86:b6:3f:0d:09:28:c8:d2:e2:7c:1c:70:18:d2:
         fa:90:3d:22:2b:5a:dd:88:19:69:53:39:11:09:84:24:49:c9:
         0d:91:74:5c:3d:97:f4:26:16:ca:9b:63:0d:65:6f:8c:ab:85:
         c5:8e:fc:77:24:14:0e:c9:0a:b1:26:f8:e4:67:3b:73:44:f4:
         7d:85:ed:f3:63:cf:9e:86:40:0f:15:14:00:fc:0d:a5:9b:0a:
         d8:69:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----