Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File:                     LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier:          09wzLTT6+eg1LxTrDtlKtz+dCWrdJo3GQqur6ntGLNo=
Subject key identifier:   4F:0A:CF:94:24:CC:D2:2E:8C:62:1C:CA:A9:B8:50:5E:47:FE:DE:E7
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer:       /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial:       01962F0741C89527F7EFEEEED7F4485B3C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number:          0AD5
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: yUZB49omFD2vkq7LPtiitO0YQ2bz0TF/KevRIpqKg0U=)
                          2: aj0WVl4e2z2ZBYCahhraDL8ORdI.roa (hash: F73B/tSwqY+Pedxj19hK+zjEl11bKyVtrVcIkgShsak=)
                          3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:41:c8:95:27:f7:ef:ee:ee:d7:f4:48:5b:3c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=4f0acf9424ccd22e8c621ccaa9b8505e47fedee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:30:b8:7c:ec:be:f1:7a:28:2f:9a:72:c5:
                    4a:34:4b:f0:e8:5a:fe:63:32:c4:6e:4f:75:9e:4c:
                    9c:59:8a:e7:33:db:bf:db:43:40:3c:e7:0d:4b:a7:
                    66:fd:c8:93:55:c4:b1:bc:63:53:0e:63:76:f6:8a:
                    b6:3d:49:33:a5:a8:d1:ec:08:72:b8:b1:6d:e5:22:
                    a7:7f:d4:cd:69:40:77:1f:59:e0:30:0b:a3:96:4d:
                    10:2f:3d:63:35:f2:22:d0:07:af:4f:a6:8c:46:fd:
                    7d:5e:09:e2:65:7b:98:13:ed:69:c9:8f:c4:5c:80:
                    db:40:ce:e3:46:17:19:c1:12:cd:61:29:8d:8c:f9:
                    33:b9:3c:06:18:86:80:ea:ca:d5:eb:64:1e:37:45:
                    7d:39:6a:30:20:0f:f5:14:43:da:1a:28:ad:40:3e:
                    c9:89:3b:b8:d9:fc:90:05:e9:6d:b7:6e:f6:83:37:
                    9a:54:8b:78:ac:08:1c:b1:93:4a:bf:d8:0d:09:43:
                    98:44:25:cd:59:63:01:02:ff:ad:bf:b6:33:b6:0b:
                    2d:28:9d:9b:f6:90:1d:d4:2a:ba:f3:09:24:fd:fe:
                    4a:e5:13:46:64:af:47:35:b0:ae:10:f6:91:4c:5a:
                    71:af:67:74:30:1c:29:1d:63:8c:82:e4:c7:a8:1f:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:CF:94:24:CC:D2:2E:8C:62:1C:CA:A9:B8:50:5E:47:FE:DE:E7
            X509v3 Authority Key Identifier:
                keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:29:dd:8c:cb:84:f5:8f:7f:63:c2:33:52:a2:02:6c:63:
         73:af:0f:4c:9c:a0:c5:e6:f2:d6:45:03:c8:f6:ea:a9:ea:5f:
         13:5e:98:5d:a2:d5:0b:7c:ad:3f:f0:16:f5:a4:59:cb:9b:7b:
         c9:c1:a4:0f:03:bc:6f:7c:32:a5:59:f7:87:29:71:29:3e:69:
         c0:54:59:00:ef:d6:4a:db:1d:19:72:5a:98:32:fe:5a:fe:09:
         af:ab:e0:9d:5f:2a:e3:4e:64:34:c4:cc:48:bd:c7:f4:6a:42:
         04:53:1d:c2:de:26:9c:46:bc:dc:dd:80:b9:37:11:9d:47:1e:
         f1:c7:73:c7:18:4d:3b:5d:4e:97:cd:59:9e:e2:84:80:de:cc:
         02:2a:96:80:23:a3:1f:56:32:fe:9f:d9:38:0d:0b:74:b0:12:
         d9:1c:8f:bb:7a:23:72:71:17:3b:45:a7:d7:9b:4a:3f:8d:c6:
         a1:a7:72:61:05:b6:7f:89:be:12:a0:72:02:0d:0b:49:b4:0d:
         f6:36:b8:4a:56:b3:f9:1d:6f:d2:24:65:17:eb:c3:89:27:56:
         71:a5:4c:9d:bf:90:01:d1:61:fa:73:8a:0e:91:2a:bf:23:4c:
         57:15:5b:99:b5:8a:e2:0a:83:09:e5:77:9a:cd:aa:06:9d:8d:
         e7:11:c9:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0HIlSf37+7u1/RIWzx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjUwNDEzMTIwMjA2WhcNMjUwNDE0MTIwMjA2WjAzMTEwLwYDVQQD
Eyg0ZjBhY2Y5NDI0Y2NkMjJlOGM2MjFjY2FhOWI4NTA1ZTQ3ZmVkZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwMwuHzsvvF6KC+acsVKNEvw6Fr+
YzLEbk91nkycWYrnM9u/20NAPOcNS6dm/ciTVcSxvGNTDmN29oq2PUkzpajR7Ahy
uLFt5SKnf9TNaUB3H1ngMAujlk0QLz1jNfIi0AevT6aMRv19XgniZXuYE+1pyY/E
XIDbQM7jRhcZwRLNYSmNjPkzuTwGGIaA6srV62QeN0V9OWowIA/1FEPaGiitQD7J
iTu42fyQBeltt272gzeaVIt4rAgcsZNKv9gNCUOYRCXNWWMBAv+tv7YztgstKJ2b
9pAd1Cq68wkk/f5K5RNGZK9HNbCuEPaRTFpxr2d0MBwpHWOMguTHqB96IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8Kz5QkzNIujGIcyqm4UF5H/t7nMB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTAp3YzL
hPWPf2PCM1KiAmxjc68PTJygxeby1kUDyPbqqepfE16YXaLVC3ytP/AW9aRZy5t7
ycGkDwO8b3wypVn3hylxKT5pwFRZAO/WStsdGXJamDL+Wv4Jr6vgnV8q405kNMTM
SL3H9GpCBFMdwt4mnEa83N2AuTcRnUce8cdzxxhNO11Ol81ZnuKEgN7MAiqWgCOj
H1Yy/p/ZOA0LdLAS2RyPu3ojcnEXO0Wn15tKP43GoadyYQW2f4m+EqByAg0LSbQN
9ja4Slaz+R1v0iRlF+vDiSdWcaVMnb+QAdFh+nOKDpEqvyNMVxVbmbWK4gqDCeV3
ms2qBp2N5xHJ9w==
-----END CERTIFICATE-----