Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File:                     LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier:          uZpCSPwHEccPISq1kw401hRIU+MZiywDF7mZTcHh2Pk=
Subject key identifier:   F8:44:45:2C:A2:81:26:4E:71:2E:4B:27:72:0C:83:27:C3:0B:50:B8
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer:       /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial:       01962FAB25BE9F199ACABC6BBFD974B8BD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number:          04DC
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
                          2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: /qnEIj3GWk9evzv9pld5mmG/7fWfMvTnyvAbTvPEzzQ=)
                          3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:be:9f:19:9a:ca:bc:6b:bf:d9:74:b8:bd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=f844452ca281264e712e4b27720c8327c30b50b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:f8:a3:c4:a3:f0:08:7e:06:03:ad:41:56:
                    82:a6:92:5e:ef:e1:01:e9:c9:47:2e:43:b5:67:1e:
                    b9:1e:5b:92:b9:8c:25:0d:a0:55:61:c5:15:06:fb:
                    de:e4:cf:23:0e:c3:48:57:97:09:f5:e9:96:e4:0e:
                    e3:29:9d:91:ac:05:a2:d5:ed:97:84:eb:50:48:a1:
                    56:fa:d9:e3:6d:77:60:57:dc:e2:d2:34:c1:f3:12:
                    5e:3c:d3:23:ee:23:c5:df:4a:1c:38:71:c7:2c:08:
                    38:c0:69:0e:ac:e1:53:e1:2c:99:33:bc:1c:b4:04:
                    cc:78:81:27:e3:d1:24:fc:4f:72:40:ae:97:2f:25:
                    e3:1b:95:0d:6f:42:d6:eb:0d:24:e7:38:80:d1:5b:
                    a2:70:3e:67:b1:02:cb:5c:35:6c:0a:54:e5:c3:0a:
                    85:ac:91:f8:ab:2b:d8:4a:2d:94:c9:c9:c4:89:3f:
                    c5:ae:28:27:46:c9:76:65:a9:30:f1:12:78:17:55:
                    35:f2:46:60:80:b6:97:40:b2:37:bc:2b:4d:59:d4:
                    c3:b7:cc:d2:94:6a:03:47:a1:f1:96:22:a7:d2:d5:
                    95:a2:30:f4:bb:e0:e0:a6:1f:a6:db:37:b8:87:20:
                    19:63:b6:c1:b2:10:7b:45:eb:90:c1:eb:c3:96:ff:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:45:2C:A2:81:26:4E:71:2E:4B:27:72:0C:83:27:C3:0B:50:B8
            X509v3 Authority Key Identifier:
                keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:58:de:16:0d:71:7a:6a:1d:1e:bd:60:80:16:ef:0c:ef:e7:
         21:45:b3:bf:ef:56:2e:5b:68:00:e9:07:a3:29:c3:ef:03:7d:
         f1:25:ce:4f:85:e1:c4:e9:61:af:c0:05:c0:20:60:fc:36:6d:
         9c:15:fc:77:09:74:00:28:4f:ec:a2:24:09:36:1a:2d:4f:48:
         c0:49:0d:c9:32:07:01:d1:42:75:43:77:e3:dd:be:69:7b:c1:
         1d:77:60:f3:f7:b1:05:2a:8c:32:a1:ce:49:37:ec:0a:5c:4c:
         d1:29:b4:26:71:26:e8:b7:ab:04:29:fa:c7:c3:4c:fc:3f:82:
         85:ad:d6:6e:b1:79:41:64:9d:ba:28:90:22:42:6f:fe:c0:a6:
         2f:c7:cc:3e:10:5d:77:c5:a3:0d:f3:d7:2f:6d:f9:4f:0b:ea:
         7e:9b:f7:d6:74:74:5e:4f:ef:b9:c3:93:77:4b:69:8d:06:b6:
         2e:c9:13:5f:9b:b2:8e:9b:7e:c5:c0:de:ab:7b:6f:0b:d2:99:
         ff:23:4a:ef:d2:53:c2:f7:a7:e7:26:00:38:74:5e:b3:ea:1e:
         bb:8b:14:ae:dc:f8:1b:ba:09:73:28:9d:66:50:48:5d:18:bf:
         fd:76:7b:14:a6:c4:44:df:6f:58:3b:fa:71:e6:ae:3d:74:8b:
         63:e6:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----