Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File:                     LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier:          oFRDD1B63Nl5aX5t8hseUUupb7GI+P/gNtRPcFg2gqs=
Subject key identifier:   69:0E:20:A9:CE:E0:08:49:9D:30:31:CF:B3:FC:E4:D7:D1:27:0D:C7
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer:       /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial:       01962FAB80D2694702A2915A7373B7AF49B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number:          0420
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: oOFY6DBtfDjP1uikmFXWBJoN+Q4+XolVw0Y3JVsOJr8=)
                          2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
                          3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:80:d2:69:47:02:a2:91:5a:73:73:b7:af:49:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=690e20a9cee008499d3031cfb3fce4d7d1270dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:fa:37:be:88:14:fa:77:9e:a5:9d:c3:d5:
                    a0:ab:77:be:2b:95:68:57:8d:a8:c7:75:14:a0:a2:
                    14:26:34:b9:56:db:f5:08:a5:db:ce:b7:c9:98:f9:
                    cd:a3:a6:59:6e:53:e2:e1:37:11:bf:48:aa:a4:9a:
                    b0:ef:ad:3c:91:0c:53:48:78:f8:7c:fe:93:35:c0:
                    3f:f0:1f:48:d0:f3:b9:83:f1:a4:95:74:f7:76:34:
                    f8:07:bd:a1:d8:80:25:7c:03:b7:56:c1:d8:22:f8:
                    3f:f1:1a:89:a1:22:4b:fb:fb:e9:69:f4:c1:96:e0:
                    53:81:d9:c7:ec:27:4c:82:48:7b:fa:03:07:87:3b:
                    b8:b4:94:c0:1c:02:24:70:b5:d8:76:78:e0:76:b5:
                    29:65:01:e6:25:a5:0f:38:61:da:02:7b:fd:1f:df:
                    1d:29:bc:c3:9a:0f:38:6e:55:e5:18:f4:bd:84:e3:
                    10:33:47:0f:b5:13:51:31:35:6e:5a:30:9a:dd:31:
                    be:95:9f:b3:1e:6d:da:27:d4:e7:4c:ba:0b:08:ff:
                    41:a3:cc:ae:63:17:52:a3:2c:85:41:f7:11:69:84:
                    41:e1:20:54:c7:cb:30:3e:f7:c8:64:04:b9:31:7f:
                    ea:82:0c:44:7d:fa:84:7d:1b:3a:b2:f3:12:a2:33:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:20:A9:CE:E0:08:49:9D:30:31:CF:B3:FC:E4:D7:D1:27:0D:C7
            X509v3 Authority Key Identifier:
                keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:36:f8:6e:75:30:00:5c:97:6a:b9:b4:59:98:80:cc:d9:e6:
         9a:cb:78:d4:92:5b:01:87:8f:1a:98:0a:f7:57:2c:6f:9a:72:
         ac:b7:74:3c:10:de:14:0a:10:8d:bc:62:8f:28:19:7c:c0:9a:
         d9:f9:ee:f5:40:9e:f6:f6:87:16:68:1e:5c:f3:14:e0:0d:d7:
         e0:12:02:a6:02:f2:c2:28:e4:a0:0a:a6:bf:39:2b:6b:5f:2b:
         f6:c7:80:7f:be:21:1a:19:c9:6b:97:d6:b2:91:ea:4f:bc:f9:
         88:49:32:1b:f1:5f:71:e7:c7:d2:c2:5e:6e:78:5e:4f:ff:29:
         64:16:e6:c7:51:5a:99:94:ae:4c:64:94:47:12:ee:d2:3f:79:
         eb:ad:77:32:62:a0:54:f9:90:05:db:4f:d9:69:9a:e4:b9:0b:
         97:ad:87:2c:fa:6c:a8:4a:4b:81:22:03:fb:43:63:8c:e7:3a:
         9a:a0:b5:e9:eb:0f:ff:f2:f1:fb:63:b9:8e:38:d7:af:42:ad:
         54:14:60:80:24:9a:3e:c6:33:08:0f:b1:77:3e:e2:31:d9:e0:
         bd:54:67:4d:51:b1:fa:2f:2f:1c:d3:00:ee:37:c6:82:e2:a2:
         4c:4a:08:9b:a3:5a:86:6c:b5:8a:b2:02:96:0e:77:53:12:15:
         1d:13:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----