Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File:                     lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier:          gUSnc9x8+sceiykSybxFKYyEIhz7cy0mROSkW2JGHt4=
Subject key identifier:   48:F9:B9:EA:5E:8F:91:DF:26:D2:D1:73:11:D9:8F:B0:6B:93:98:22
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer:       /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial:       01962F749A96492427892A787A22EA9B328B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number:          0462
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 3_aLlMCZrFNyrDqx_8nf23jx9U8.roa (hash: a8Ve5VVmClDkiSHwLRYAsujqRGwPwv/c9KSL3svTGpw=)
                          2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: cximH5TlxNYG7/2p4KJwutyUZn39Cf7Crky6w0QwB/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9a:96:49:24:27:89:2a:78:7a:22:ea:9b:32:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=48f9b9ea5e8f91df26d2d17311d98fb06b939822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:d2:64:b7:36:3c:ff:08:3b:f1:8c:16:c9:
                    51:b1:2d:4c:cf:7e:88:a4:79:48:c1:9b:dc:05:8a:
                    ec:d5:42:16:68:a8:8f:09:f0:dd:5f:16:f0:c6:71:
                    36:1f:c8:2e:a3:a8:01:cb:77:fb:48:2b:d9:de:9f:
                    bc:a5:7d:92:f2:9b:bf:56:e8:c3:5a:6b:22:74:60:
                    b7:30:3c:22:6e:83:56:b6:b5:a5:46:5f:83:b8:68:
                    ab:3d:d3:22:bd:39:9a:71:13:97:fd:59:9d:38:92:
                    9c:15:b3:85:ee:e9:34:0d:fa:ad:2c:5a:61:ff:be:
                    90:ee:80:d8:95:f6:b5:24:24:63:5d:65:3c:eb:2a:
                    23:b9:12:eb:73:12:2e:19:d0:80:36:3d:bc:f5:3b:
                    71:f7:17:a6:71:dc:95:18:6a:de:5b:0b:fb:f2:7d:
                    32:59:23:8b:a9:5d:cb:ad:53:43:7d:8e:f4:ef:f8:
                    b0:77:bf:71:d3:88:bf:8c:4f:42:40:0a:2c:c0:06:
                    49:ca:d0:36:a2:3c:6b:6e:67:42:b0:e1:2f:05:0f:
                    89:72:c0:ac:d7:3c:5e:77:37:69:3d:42:53:f9:62:
                    6f:c0:de:68:3c:5e:5d:cf:2f:92:43:98:f3:81:f4:
                    e6:30:c1:e5:3c:a4:9b:69:88:02:e8:c9:59:0c:53:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:B9:EA:5E:8F:91:DF:26:D2:D1:73:11:D9:8F:B0:6B:93:98:22
            X509v3 Authority Key Identifier:
                keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:8f:f6:4b:1c:0c:ee:39:12:a1:cf:68:c1:c2:a0:a7:c0:
         dc:d6:59:f4:94:8c:8b:02:c8:a2:ec:32:37:6c:a4:c5:5e:02:
         25:3e:ab:39:a9:65:59:52:c4:da:09:f3:eb:73:a4:2f:79:47:
         38:96:ea:61:a9:70:4c:19:4d:8d:f2:38:7b:46:48:31:77:8e:
         39:08:69:7b:bd:d4:fe:a3:b3:8c:e0:2b:8a:af:0a:66:52:6d:
         29:4a:77:99:f3:8c:e7:75:06:9a:92:f2:df:b9:d1:b8:12:81:
         64:22:1b:4f:02:2e:d2:f4:41:5e:6e:1f:7e:83:64:ac:42:7f:
         8c:34:24:69:db:44:8b:5b:7f:9e:5b:3f:77:f5:3d:97:46:82:
         75:5e:52:34:2e:42:bb:f4:80:05:4f:0c:ff:83:71:ec:87:f6:
         3d:68:d5:95:23:09:76:e2:34:23:73:0a:ab:8f:a3:f4:8a:b2:
         60:0e:1f:86:f3:7a:0c:45:4c:fa:8f:b3:2a:3d:bb:00:63:87:
         3b:e7:fd:b7:04:84:ef:07:64:a9:bb:02:64:f9:87:3c:3a:e5:
         35:e9:38:e5:e0:e6:b4:c6:39:76:37:ef:94:4e:5b:f5:ef:0e:
         be:fc:e1:06:d1:21:a4:a1:ff:7d:db:a3:f7:25:45:d7:8b:b3:
         c7:dd:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----