Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File:                     LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier:          XQu0iIcEgPic//bgXpKtz6umqt3sqwhzrhqwWYsNjOM=
Subject key identifier:   6D:BB:31:27:6A:A1:B9:AB:1F:95:E9:19:CC:97:9C:ED:FA:D6:16:E7
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer:       /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial:       01962F7418FD7649B651A12F25C39D242206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: ER+OTegtdjOKCQ/jjBb3mpnhGnccC+JEt3KqHVRk/08=)
                          2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:18:fd:76:49:b6:51:a1:2f:25:c3:9d:24:22:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=6dbb31276aa1b9ab1f95e919cc979cedfad616e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:8f:33:57:4f:4f:0f:17:23:6d:e4:07:07:
                    c6:b1:99:b4:75:97:42:b2:61:a9:38:e5:6e:71:e3:
                    eb:09:5b:9a:eb:7d:79:c8:86:e4:59:51:f0:fc:6a:
                    6c:5a:23:da:7c:3c:ce:ad:11:e0:53:83:0b:f9:48:
                    80:d7:68:df:fb:39:2d:3a:43:de:04:95:b6:fe:e4:
                    5d:49:76:1b:f0:09:db:47:70:9e:e4:7c:4d:da:32:
                    63:81:56:61:74:76:3e:cb:fa:22:49:74:d7:6c:81:
                    90:20:9a:00:6a:1c:fc:b1:22:a3:ec:e3:0e:7d:ce:
                    6e:3f:2b:42:7d:a4:f2:fb:3c:90:79:4a:7c:c4:47:
                    12:ab:bb:8c:5c:c1:d1:3c:e4:97:82:36:34:e4:74:
                    18:0b:30:c6:4c:f0:42:8a:03:c3:eb:ee:05:9b:85:
                    a4:0d:b1:68:38:4b:86:e0:53:56:df:c9:7b:4f:63:
                    5f:8a:cb:38:12:b9:54:28:27:69:44:c6:e8:a0:b9:
                    3d:c1:c0:87:f5:ac:08:78:f3:b0:d4:fb:b2:60:dd:
                    79:46:75:7e:26:c0:30:f3:ee:ad:33:b9:17:2b:61:
                    6b:f6:ef:f5:d6:73:0b:9a:16:f8:16:52:d3:a2:10:
                    0b:8a:c5:6e:c6:10:90:d6:a5:75:03:05:7d:1b:9f:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BB:31:27:6A:A1:B9:AB:1F:95:E9:19:CC:97:9C:ED:FA:D6:16:E7
            X509v3 Authority Key Identifier:
                keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:28:38:59:0b:3e:6c:53:11:33:ca:53:ea:47:31:08:f8:
         48:63:be:b3:f4:c6:1f:d9:1d:68:aa:0e:c7:76:c1:4b:d3:46:
         e3:77:77:70:e0:78:ff:33:b2:25:74:1d:10:60:7a:ae:15:71:
         3c:ff:3a:06:de:49:da:ff:c1:25:47:a5:1a:63:8e:40:62:08:
         b9:b2:21:c9:69:d0:58:e9:08:a5:45:6f:4a:29:5b:41:de:2c:
         d9:5c:bd:55:5d:68:d3:37:9d:e1:37:0e:be:42:0d:77:ee:2e:
         e4:d9:ed:2e:d4:81:eb:3c:1d:65:d0:d2:a0:a2:9d:51:c3:8a:
         a8:a1:c9:48:f5:82:88:bb:0f:0e:a0:80:5a:e3:88:42:2a:e9:
         89:60:6f:0a:43:70:51:0d:2a:fc:23:10:58:a6:63:23:18:84:
         60:09:09:a7:bc:5c:f5:d9:86:ee:8e:4e:45:a3:6f:ec:ab:d4:
         4d:fb:7d:0b:38:0c:57:e9:00:89:45:c5:0a:18:0f:f1:c4:8b:
         82:6a:97:e5:bd:70:70:72:13:29:37:ec:f6:17:22:b2:35:99:
         0b:ba:f6:d4:d7:0b:37:08:ee:09:db:df:c4:28:1a:e4:66:e1:
         5b:55:af:f5:9d:11:9e:bf:19:eb:8a:78:08:40:8c:a9:63:14:
         85:97:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----