Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          QrSHR3pHP2Vtwmlp45c2KEZh59VfRwxEf+91y/6G9so=
Subject key identifier:   E8:1A:72:3B:8B:4C:5F:67:9F:9B:78:BE:DA:4A:8F:E2:87:F3:90:95
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       01962F066A02BEFEE21E60BB32C3B5276117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=)
                          2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: e7zDFNJxaAfa5Qc7bqDGDoXsEnScajMpsjw23RPBU8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6a:02:be:fe:e2:1e:60:bb:32:c3:b5:27:61:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=e81a723b8b4c5f679f9b78beda4a8fe287f39095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:3e:d0:76:b0:0f:87:fc:b0:bd:93:ef:40:
                    62:0d:0c:1a:f8:ae:84:95:3b:5e:d0:c0:39:f0:c3:
                    5b:c5:7e:83:6e:88:02:c1:0a:5a:10:e7:34:26:65:
                    87:fc:2f:83:4e:4e:cd:77:02:f4:a1:da:cd:2d:01:
                    18:32:77:1a:05:fc:27:26:64:69:a9:8d:f7:d0:a8:
                    c5:e5:be:4d:6d:52:c1:4d:de:0e:87:fe:55:3e:96:
                    10:99:92:ff:5b:06:97:45:16:99:ef:a5:7a:fa:32:
                    c0:1e:4e:dc:c5:12:2a:e3:22:fd:0b:af:d9:5f:09:
                    d8:a1:b4:1b:3c:49:59:92:37:68:d9:e7:da:99:57:
                    8e:36:c8:45:1f:25:97:dc:06:72:dc:64:56:12:bb:
                    86:69:74:28:9b:bb:23:73:22:02:63:1e:3b:df:a3:
                    b7:4a:11:38:cf:47:1e:f3:57:e4:05:1a:b1:2b:21:
                    d2:4b:6f:65:5f:b1:88:ef:71:c9:6c:55:b7:8a:79:
                    34:84:b0:cb:14:41:fc:ce:b1:83:6b:25:af:db:d7:
                    a2:39:59:50:bb:0b:31:29:85:44:02:3c:0e:59:f8:
                    0b:38:e2:24:88:ca:14:75:9b:82:2f:7f:f1:0f:fe:
                    8e:fb:25:8e:dc:97:ed:2d:cd:19:9c:cb:cf:08:a7:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:72:3B:8B:4C:5F:67:9F:9B:78:BE:DA:4A:8F:E2:87:F3:90:95
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:79:01:1a:1d:f4:86:61:ab:23:94:75:3c:ba:64:97:b4:
         a5:55:e6:ee:53:26:25:f2:48:93:8d:71:57:cc:28:2b:17:3d:
         33:54:10:26:de:3b:3a:c8:31:dd:ba:79:b8:13:96:ea:44:1d:
         6f:a7:46:4c:00:e5:7f:7a:cd:7a:71:e8:45:ff:2f:36:6e:ec:
         27:c3:9d:ce:cf:f3:e3:a9:25:67:1e:20:04:47:e8:d6:b2:f4:
         c6:d1:d3:3e:a9:99:07:13:94:2f:ee:59:37:69:61:4f:50:9e:
         bb:6d:7a:8d:2b:97:fb:97:ab:27:17:f1:3f:79:b1:b8:bb:a9:
         57:6c:5e:4b:3a:62:7c:e4:36:e7:ba:b4:e7:31:94:f7:f4:0d:
         a4:14:5f:f2:b7:49:1b:d3:fd:63:08:e3:52:7b:c1:27:53:02:
         d9:3c:cb:2b:b2:9d:0d:b1:a7:c2:fe:2a:08:a0:21:3d:8c:5b:
         e0:ae:47:68:f6:09:76:16:65:e0:7b:a7:09:19:d7:01:5e:f0:
         bc:ee:3d:f3:b2:9c:7e:cc:7f:95:64:7f:0a:22:1d:f9:9d:c8:
         ed:b1:cd:ce:d9:61:22:64:e7:28:17:83:74:ec:a8:8b:e9:b6:
         b5:16:cd:74:d9:d6:27:f4:37:e6:90:84:8c:d4:e6:64:0d:af:
         21:fd:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----