Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File:                     LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier:          MXWhr0OBCTXqUlj3XuU5LNgzRQYbeGVCLi0fnSFvsIU=
Subject key identifier:   EF:AE:F1:86:35:DB:03:79:DC:5E:23:38:06:4C:48:10:A3:6B:20:5F
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer:       /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial:       01962E98BD2B57FEB698605223E23BEB0893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: CkeiD8ySf01rJhMhmvRU3uBFApPpNG1b+v0QTZ0hsGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:2b:57:fe:b6:98:60:52:23:e2:3b:eb:08:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=efaef18635db0379dc5e2338064c4810a36b205f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:79:75:3a:db:77:ac:9f:68:08:cc:26:78:
                    71:f3:57:51:98:d5:cd:d7:c9:0b:13:76:ae:64:f4:
                    01:b0:10:83:6e:ab:8f:c6:3b:ce:77:3d:69:df:93:
                    d7:0a:18:e9:3c:05:4a:22:95:cd:40:b1:91:9c:6d:
                    d3:ee:17:ca:09:ff:76:6e:6f:02:70:92:f8:c9:92:
                    90:fb:28:5a:12:62:10:02:ea:ab:e7:a2:6f:61:92:
                    85:67:ee:6c:88:e3:29:54:84:5f:fc:0d:c5:0c:c8:
                    14:1c:b9:b3:6c:21:04:b4:49:81:2c:fc:b4:8a:90:
                    89:bc:fd:5b:c1:4c:b8:0f:b9:cc:f3:a1:02:9c:c6:
                    b1:81:ae:97:40:45:e7:9b:8a:44:e1:68:14:29:28:
                    c9:cf:cc:f6:ce:56:e9:b3:7b:88:b1:df:f0:f7:e2:
                    3f:d0:80:a6:e6:46:38:04:d0:cc:86:5a:bb:e3:20:
                    ee:0b:b6:60:99:3a:19:0e:59:83:20:fc:b3:38:5c:
                    0a:55:74:14:b3:4b:9d:ef:ac:83:59:c9:8a:9f:f8:
                    52:6d:3a:71:2a:6d:f7:1d:fc:3a:47:7f:ed:90:b4:
                    ef:2d:25:4d:45:6b:be:95:5e:e0:39:cc:48:c7:8a:
                    cb:d1:e4:3a:8d:8f:dc:f2:19:ec:46:86:39:a8:60:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:F1:86:35:DB:03:79:DC:5E:23:38:06:4C:48:10:A3:6B:20:5F
            X509v3 Authority Key Identifier:
                keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:5e:b7:6f:8f:ef:55:11:71:eb:ce:29:5b:e2:0c:f4:03:
         8c:6a:c0:26:7a:e5:fb:d2:4d:b4:2d:08:d9:d7:6b:b4:a5:39:
         78:d1:bb:d9:e6:dc:90:92:12:4c:7f:d5:21:27:fe:7a:f5:ac:
         11:e5:30:ec:de:e9:77:71:2e:db:c2:7a:c9:51:e8:ef:28:89:
         e0:e7:7d:37:ab:7a:ec:77:80:8a:9f:79:f1:09:3d:71:e0:98:
         de:c5:33:5d:4c:ff:d8:ef:e5:fa:7e:09:df:85:f4:33:fd:5e:
         af:22:34:b3:6b:9d:cf:11:ab:55:80:c9:69:07:13:6d:50:71:
         7c:67:47:24:ec:23:dc:72:b7:44:f5:ce:18:64:8e:d2:ac:0c:
         b2:98:fe:29:e9:ce:4f:6a:27:79:26:cc:44:34:44:25:b6:fd:
         12:df:02:29:4b:fb:e9:d6:a1:8b:24:fc:7f:aa:85:c7:60:6e:
         02:dc:7f:cf:59:5a:67:b4:e7:34:f5:19:ae:b7:29:8e:79:71:
         b6:e2:9d:53:d2:d1:1c:2f:ab:27:87:58:27:8b:1c:a4:4c:56:
         3c:8d:cf:48:17:0e:1e:b3:87:64:5a:c9:97:04:cd:38:2e:a7:
         3d:71:d1:07:3a:d5:91:be:04:a3:1a:7d:e7:ee:9d:98:f2:a0:
         8f:66:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----