Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File:                     lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier:          3Dj/QwKvg6P7jgtPeBZBF7zPP8sUrpt7HNOfuJJj5f0=
Subject key identifier:   3F:4E:BB:AB:4D:80:EC:2F:D1:7D:E1:92:6F:1B:A4:69:61:A5:90:D0
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer:       /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial:       01962FAB5375ABD15EA633463CCDC48E49B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
                          2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: ysBYBB5M9CJGWuO8qpchgli6VGSHzQNhBQS1Z2SV2eg=)
                          3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:75:ab:d1:5e:a6:33:46:3c:cd:c4:8e:49:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=3f4ebbab4d80ec2fd17de1926f1ba46961a590d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:3c:64:d0:b4:e6:d6:aa:97:8b:96:fe:fa:
                    76:b2:c1:b4:c5:97:51:36:d7:75:38:d1:01:21:72:
                    42:46:87:e6:a8:4a:35:a0:55:02:ac:c2:cb:e5:36:
                    0e:4d:d9:f6:f1:c4:5f:b0:7f:c5:29:92:9d:b9:47:
                    55:e5:c5:39:f8:0e:8c:df:22:34:a8:9e:ce:ee:7c:
                    34:2e:3f:35:a2:3d:dd:42:6c:10:b1:e0:92:04:2c:
                    09:44:fd:06:3d:91:bc:f6:4c:b7:7c:21:f4:5d:49:
                    08:ee:da:8a:13:f7:ad:2c:1c:fa:b4:63:41:20:b1:
                    57:b7:ca:11:26:81:4c:33:1f:3c:42:74:40:c8:95:
                    60:cf:f6:f2:60:7e:21:95:de:f3:92:8a:13:ac:95:
                    fa:ed:48:fe:94:9d:25:bd:c4:56:29:cc:7d:ee:67:
                    c1:8b:8d:c2:c3:c1:dc:f7:f7:48:e6:85:0b:10:21:
                    b2:5b:3e:c0:1a:6c:01:fb:d6:f3:51:ed:a8:c0:12:
                    a1:8e:fd:75:42:72:09:59:08:37:b5:75:33:0d:45:
                    59:38:db:ff:4f:f4:2d:ff:59:f7:93:9c:08:ae:79:
                    ce:81:02:cc:f1:46:1f:4e:c5:1c:02:fd:63:61:01:
                    7f:08:13:ed:ca:ec:c1:d3:1b:4e:fa:37:88:42:d3:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:BB:AB:4D:80:EC:2F:D1:7D:E1:92:6F:1B:A4:69:61:A5:90:D0
            X509v3 Authority Key Identifier:
                keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:d2:17:2a:3d:1e:26:bc:83:84:c9:92:cf:9b:48:46:06:
         92:ae:95:d3:73:73:f3:79:08:0c:e4:9e:3e:22:4f:4e:a4:98:
         9a:f4:bb:07:6d:aa:fa:e1:83:82:91:73:5e:ea:ba:0e:83:10:
         55:14:cf:89:35:57:5e:12:38:5e:2c:ef:c0:df:fa:5c:fb:0a:
         c2:72:ed:5c:87:74:b0:e1:a9:cd:7d:3b:f1:83:ad:a9:08:a1:
         74:25:41:a7:ef:bb:37:c3:f6:95:21:ed:89:b0:79:b0:28:06:
         56:3e:27:2c:fa:7e:bc:1a:5f:37:d7:97:90:d4:4a:90:09:85:
         96:2c:bc:74:2e:66:0f:c5:f3:b8:90:5d:dd:b5:e0:ba:39:0e:
         f5:eb:23:c2:79:49:13:b7:9a:b3:ed:33:97:d3:b6:d1:1a:24:
         1b:14:f4:33:c7:21:64:c0:0a:6e:b4:4e:e5:fa:63:ff:f4:5f:
         d8:95:f6:3a:3b:7e:33:bf:70:d9:2f:50:3b:d9:5f:dd:c0:5e:
         ab:ee:a5:4d:28:da:17:91:2c:aa:43:e3:69:4a:68:da:67:82:
         ea:cf:66:ef:3b:25:28:4e:5f:d9:4b:bb:d3:35:d4:2a:4c:c1:
         4c:85:f1:b6:52:af:aa:b4:a6:e7:b7:98:fa:9a:2c:44:ef:6f:
         b4:f2:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----