Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File:                     LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier:          8FEEqq52tMcx45J030N616I76Upa82XmvNl+sFGCI78=
Subject key identifier:   72:EC:09:31:A6:BE:68:35:87:0E:06:3E:C7:4A:35:EE:BE:BB:1D:1C
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer:       /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial:       01962ECFC18892F0221556C72D148782FF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: ixBx8+B1xcymN2zwbUazeEZBeBivje67islHlxm820Y=)
                          2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c1:88:92:f0:22:15:56:c7:2d:14:87:82:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=72ec0931a6be6835870e063ec74a35eebebb1d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:65:e8:d6:c7:d0:33:be:5a:73:dd:4a:00:
                    3a:c9:cb:9d:0a:9a:3a:b0:c6:26:8a:e5:4a:45:8e:
                    02:ee:fd:3d:9f:84:a5:7f:1f:27:e4:da:bf:89:e0:
                    78:e1:e3:e5:43:e8:96:6f:87:02:3a:8e:32:a6:3a:
                    a3:df:2e:1d:63:7d:59:13:04:ae:51:36:33:f7:17:
                    ff:b9:80:57:7c:5c:26:b7:85:38:e5:6e:42:0d:80:
                    ec:c1:4b:54:31:ec:1e:db:5f:23:47:53:08:87:47:
                    0d:d7:30:04:a8:8a:fa:68:53:6f:f7:20:f4:d1:3a:
                    b2:7f:31:ab:85:c2:9d:8b:d8:00:fb:73:8c:07:16:
                    3d:8d:47:32:88:27:ec:96:8b:7d:a4:2d:00:67:8d:
                    f3:d7:17:0f:a8:3c:13:8d:6f:89:f5:1e:17:cb:e3:
                    ee:07:38:cf:d6:30:a5:d8:3d:29:ef:8b:16:91:60:
                    8b:a3:7d:e2:db:55:cc:78:25:7c:b1:79:0a:fd:fa:
                    44:6b:6f:5a:21:12:ef:f7:7f:a7:b9:10:cf:f7:68:
                    2f:e6:30:26:b1:3d:b8:0b:26:44:10:a2:74:18:c0:
                    fc:85:45:88:13:f1:a1:91:ae:96:ae:eb:dc:9a:0d:
                    e0:b1:a0:07:2b:2f:fb:c4:a7:d7:8c:00:73:e2:6b:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:09:31:A6:BE:68:35:87:0E:06:3E:C7:4A:35:EE:BE:BB:1D:1C
            X509v3 Authority Key Identifier:
                keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a5:14:e5:70:04:4b:ca:c5:da:9f:bd:f8:ad:02:3b:7a:36:
         94:86:dd:19:bb:89:2e:91:df:3b:1f:f0:e8:14:0a:4e:57:70:
         47:d2:70:c0:3a:c4:a6:cb:74:bf:91:d4:b6:8b:ed:9e:ac:97:
         87:07:a3:00:d4:22:27:af:28:f6:05:04:87:d8:79:b8:3e:5e:
         09:7b:96:52:86:77:de:ef:e0:ad:46:f6:05:e8:09:23:43:c3:
         23:28:6a:7f:f8:68:b8:a0:55:11:01:11:74:91:76:7e:29:6b:
         5e:d5:e6:3e:4c:5e:87:19:1f:15:13:8b:5f:0c:e9:bd:a7:8a:
         25:3e:a5:2c:34:cb:c9:17:c7:c8:fe:f0:4b:a3:70:2f:d6:a2:
         13:ea:d3:55:af:83:d7:bd:03:c9:61:99:d8:b9:d6:9b:4b:cd:
         48:3a:fa:fe:3e:ae:7e:3b:db:69:67:80:38:32:2d:33:50:ac:
         cc:a3:57:72:b2:f4:73:2c:a1:42:1c:2d:cc:2f:fd:c5:9a:01:
         2c:1e:71:a3:6a:b1:a3:67:a3:2d:96:fb:74:90:ed:e7:fb:dc:
         ad:16:c6:a9:d8:f9:c6:d0:07:4e:aa:66:29:3a:72:c7:af:f9:
         fe:e5:63:c2:50:34:2d:07:66:bd:42:cd:e7:8f:c6:77:40:f8:
         b0:ca:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----