Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          A1HYQQuBOLw6zqyLzJA8/cISlPzJtfAebXPl4nAapOs=
Subject key identifier:   98:1E:D9:4D:09:F3:38:0F:28:E4:C1:1B:C4:1D:FB:1B:11:B3:7B:D6
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       01962E9959057419CB7B3A05C87D0B39FE01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: xruJtpFULuN/loPTfw5yQugpCxT0Av9ghuQdElcDm/U=)
                          2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:59:05:74:19:cb:7b:3a:05:c8:7d:0b:39:fe:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=981ed94d09f3380f28e4c11bc41dfb1b11b37bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:dd:a4:17:3c:96:57:ac:d7:42:9e:53:a7:
                    de:ff:d0:50:ab:46:54:1a:0c:57:68:84:fd:16:47:
                    bc:56:45:9d:77:70:7d:13:34:f0:6e:f2:e6:f7:8a:
                    be:a1:90:d7:68:42:81:d8:eb:ed:ba:84:c7:f0:ed:
                    68:ec:bf:1d:39:76:7a:0e:0d:f3:c0:e5:3c:b7:ef:
                    01:53:23:80:19:81:3c:a2:a7:7b:87:ea:9d:d5:f5:
                    24:f8:3b:39:fa:ee:3b:25:e1:39:a9:17:d0:70:46:
                    df:1e:7a:56:7f:f2:11:99:84:96:2a:d3:8d:be:21:
                    51:bc:6f:79:1d:64:4b:ce:22:27:3a:9f:d1:3c:96:
                    70:7b:91:d6:ad:a4:20:89:57:0d:45:dc:e4:bd:01:
                    9a:51:ae:f7:f0:3f:d4:9d:bd:36:70:d6:2d:d3:42:
                    68:43:8f:94:7c:a5:81:4e:11:6a:41:7a:88:10:72:
                    23:0c:29:a3:f7:4e:10:92:fd:e4:7d:ff:a6:12:64:
                    9f:3d:8c:d5:d6:e4:5b:72:97:8a:12:b7:bd:ab:2e:
                    61:c4:ae:e8:59:95:d9:58:af:63:dd:3a:55:9c:a6:
                    cf:58:c8:cf:17:2c:00:6d:ea:02:d7:4f:40:2b:aa:
                    ce:a6:c2:bc:1f:21:c6:a1:c8:40:f2:36:f6:24:87:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1E:D9:4D:09:F3:38:0F:28:E4:C1:1B:C4:1D:FB:1B:11:B3:7B:D6
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:89:29:a3:c5:a4:e1:08:34:8a:a5:4c:2c:55:1d:22:3a:
         3f:16:19:61:87:7a:4a:41:5a:53:a1:cd:7a:ff:0a:a3:32:78:
         65:79:40:7b:f9:4b:f0:b1:c7:fd:6f:94:c0:37:96:24:fc:8f:
         4c:a1:6c:89:59:25:9f:86:17:8c:2e:28:30:c8:a2:71:0a:d0:
         b6:db:19:45:b9:f7:c5:ec:1b:f1:3b:d4:f8:90:9f:50:ab:91:
         54:4c:fd:39:de:bc:ce:54:80:b2:b5:0c:c6:c2:08:32:d8:43:
         36:a0:39:6c:45:7f:33:76:86:db:0f:db:65:d3:7e:01:d8:01:
         e9:49:80:22:0d:64:35:61:cf:98:9b:f3:6a:b9:a2:71:4b:ac:
         df:f2:47:b1:1d:2f:13:3d:96:3d:c0:d0:c4:c6:83:7b:fe:55:
         39:80:f1:88:dd:a3:d7:64:6b:d6:98:7c:a8:9d:d3:98:00:4a:
         29:b5:44:ff:c8:fc:b0:43:31:eb:ea:af:c6:7f:0d:7b:7e:b5:
         6e:28:5a:f9:80:23:8a:d4:1f:0d:71:46:27:87:89:69:3a:75:
         b2:c2:fd:53:1a:1d:92:43:8a:49:6c:32:bb:36:f4:0e:3d:53:
         d9:81:be:c8:f2:6b:cc:30:54:9a:89:2f:2a:d0:0b:08:7f:04:
         35:9a:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----