Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File:                     L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier:          vb5/5H5CNb4ujGShNcp0N/mROysQ7SQoVIPix2VvUS8=
Subject key identifier:   2B:8F:E4:B3:8B:DE:FC:DB:5C:4A:CB:93:20:5A:6E:47:A6:63:9A:D1
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer:       /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial:       01962E9874C28595612185067DDD119A5162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
                          2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: eqQaphhetQ0kgWXKyTAeyEFcvRSGfE/okWeyL2M5ZK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:74:c2:85:95:61:21:85:06:7d:dd:11:9a:51:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=2b8fe4b38bdefcdb5c4acb93205a6e47a6639ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:fd:61:cd:f9:27:62:de:1c:96:2d:15:ad:
                    e2:e2:11:bc:43:f5:31:94:1d:bf:9a:9f:27:58:2a:
                    34:6f:7e:17:4b:f2:47:14:be:30:99:29:d7:eb:b4:
                    9c:00:b3:10:79:b3:35:72:7f:d5:9f:e1:c1:b0:63:
                    99:81:c3:33:5e:20:26:b1:b5:09:b7:c4:8a:c9:52:
                    f9:f4:03:c9:f0:9b:c8:38:b6:19:79:5e:f5:93:1b:
                    db:68:77:30:31:94:ba:60:d6:b8:26:d9:8b:b4:2c:
                    e0:dd:d8:7a:9d:cb:64:b0:00:a0:8a:9d:90:88:15:
                    67:bf:d1:ab:48:e9:d1:fd:02:a6:21:57:e4:47:bc:
                    ea:ed:14:f8:2b:92:0b:00:49:e0:c8:92:69:88:f4:
                    8b:ff:bc:4f:66:77:c3:64:52:07:ee:2b:ef:6a:e6:
                    ed:92:ff:99:3d:6b:ca:84:0a:03:fa:3d:5c:39:cd:
                    ee:50:28:ec:33:72:74:41:a6:9d:0f:64:79:c6:c8:
                    b8:1e:2f:55:70:0e:e6:9f:04:ff:73:a8:7f:dd:85:
                    b1:28:01:b1:77:93:18:c2:3d:23:2f:7e:9b:4b:05:
                    84:bc:e8:87:3e:28:35:d2:7d:fb:0d:27:57:32:10:
                    c8:cd:ee:42:9b:ff:2d:73:ad:24:45:89:33:65:47:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8F:E4:B3:8B:DE:FC:DB:5C:4A:CB:93:20:5A:6E:47:A6:63:9A:D1
            X509v3 Authority Key Identifier:
                keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:60:af:05:15:ef:af:92:32:d8:91:2e:a2:06:b9:76:dc:
         66:49:d0:0a:f8:16:ae:09:89:f4:e2:a7:4b:05:28:3f:d1:18:
         74:4e:61:dd:c0:9c:ad:22:4f:b1:01:5c:b7:e8:61:91:bf:59:
         40:4c:b7:81:5f:9e:5c:6b:37:b0:90:27:48:59:a7:8e:3e:a4:
         eb:72:4a:0b:c2:da:e6:e8:fe:c0:4b:f9:67:74:91:7b:f0:ad:
         cc:eb:6a:dd:56:df:0e:3e:9e:b6:ea:44:25:c0:6c:25:f1:06:
         11:92:24:28:a0:83:1f:63:60:7c:21:b2:d7:b5:2c:a4:eb:c6:
         d3:3d:fb:4f:aa:ea:1f:54:6b:d1:8d:16:7d:ab:81:80:0e:8b:
         b6:29:f6:23:7b:34:f1:e0:44:a9:01:b0:c4:3f:c2:7a:cc:1f:
         ed:7d:3a:1c:17:b2:04:04:a5:2e:0c:c8:f2:6e:1b:b4:58:e9:
         bf:70:2a:c0:00:42:07:57:1d:cc:f2:2a:1c:57:d7:01:72:68:
         d8:1d:3c:2b:29:e6:01:93:e4:1d:a2:f4:66:a3:7d:c6:9f:49:
         75:c8:bd:39:a1:67:67:c9:30:9c:46:56:b3:57:a6:68:55:53:
         7f:9a:50:bd:a0:2e:4c:53:df:56:bd:25:7f:69:7a:82:7b:73:
         a5:b2:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----