Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File:                     lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier:          0QGff5oLw4GsbSxysx8fat2AhHxafjCEwW35lgNYEa0=
Subject key identifier:   BE:0E:0C:E9:DB:0A:87:58:8A:50:E3:61:C3:70:65:22:C5:22:B4:F6
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer:       /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial:       01962E99AA38300095DF2929A19513CCD41A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number:          1476
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: YPCYIi6CPZzj8aD2zDl0W4wTtoX5/FbTW3VwO2a/QGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:38:30:00:95:df:29:29:a1:95:13:cc:d4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=be0e0ce9db0a87588a50e361c3706522c522b4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:4b:ba:ba:88:a1:21:b2:8f:a5:b1:9f:7a:
                    73:cd:13:45:b0:a4:8a:6f:7e:b1:c8:75:fd:94:1c:
                    ef:c2:96:01:68:5e:19:bb:30:d5:67:be:cf:e5:3f:
                    2c:db:bd:16:9d:26:38:c1:fd:00:e0:82:d8:6a:42:
                    f9:b8:d3:cf:34:90:4b:6f:e5:d5:c4:2e:44:d8:a0:
                    96:d9:41:3d:56:eb:9c:0f:09:41:32:ad:af:2b:af:
                    47:bf:e1:d8:ca:df:e6:c6:46:c7:8f:6e:6b:0f:59:
                    54:0f:60:04:5e:45:25:2a:19:af:52:c8:0a:8a:2d:
                    d7:70:47:9f:72:00:63:63:95:83:87:e6:39:5b:d7:
                    e1:77:64:71:43:a9:6c:97:0d:c7:25:39:c4:5d:e8:
                    fb:72:86:cd:1d:fd:94:27:22:df:db:2d:c3:28:8c:
                    33:f9:55:62:96:5d:e7:00:fe:4e:ad:4f:3f:0a:83:
                    6c:12:f8:32:db:62:89:57:92:60:63:8a:23:7a:9f:
                    c7:3b:80:41:d2:e1:6a:1b:06:ff:25:de:82:6e:85:
                    82:b7:9c:f8:51:5c:92:d4:ee:de:58:f0:cc:7b:62:
                    cf:54:6e:8b:0f:66:3e:7e:fe:c5:24:8c:0a:f6:67:
                    da:18:f1:cf:b6:c6:b4:cd:9f:c4:81:04:80:17:82:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:0C:E9:DB:0A:87:58:8A:50:E3:61:C3:70:65:22:C5:22:B4:F6
            X509v3 Authority Key Identifier:
                keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ea:05:f6:15:a4:2b:c5:66:b2:5f:f8:88:c2:a1:d5:c7:76:
         e6:30:3d:ef:f3:10:bc:23:fe:60:34:4e:30:01:a2:91:5c:be:
         5f:65:7e:a0:95:71:8b:af:ed:f3:dd:3b:40:b9:d4:2e:0c:3b:
         83:35:11:92:9d:4b:e6:b2:9d:3a:ac:13:ac:d8:c1:84:8d:08:
         7f:34:c7:90:de:e8:1f:87:38:5b:e5:a1:cd:68:da:90:87:6f:
         28:dd:49:7f:5e:3f:3b:40:50:e3:4f:0b:1f:6d:50:ca:4f:13:
         af:cf:e9:f8:44:e0:14:ae:d7:38:8f:8a:e0:45:bc:94:c9:56:
         52:fe:dc:8b:80:b3:1d:4a:5a:84:da:4a:c3:9d:1e:98:54:85:
         48:3e:92:21:15:81:ba:f1:b0:c2:41:b6:cc:3a:7b:b9:55:69:
         cc:98:66:f0:4f:4b:d5:36:05:d3:11:21:91:1f:0d:89:83:7d:
         bd:9d:8d:ea:64:d1:32:ca:1f:52:11:e3:72:01:bc:ba:79:bc:
         0e:c0:a5:ba:31:63:d4:82:bf:8b:b1:da:70:f4:cc:37:53:e3:
         36:82:2c:71:b4:58:9d:95:2c:70:33:04:be:51:4c:d7:2a:7b:
         f8:3b:7b:59:2c:1c:57:99:8c:04:56:e4:55:59:8f:8d:68:30:
         7b:81:53:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumao4MACV3ykpoZUTzNQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTZlNTIyNGZlZjUxN2Y0ZGNjNjZjMTQxMDM1MmNjOGFi
ZmIyMmUwHhcNMjUwNDEzMTAwMjI0WhcNMjUwNDE0MTAwMjI0WjAzMTEwLwYDVQQD
EyhiZTBlMGNlOWRiMGE4NzU4OGE1MGUzNjFjMzcwNjUyMmM1MjJiNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5xLurqIoSGyj6Wxn3pzzRNFsKSK
b36xyHX9lBzvwpYBaF4ZuzDVZ77P5T8s270WnSY4wf0A4ILYakL5uNPPNJBLb+XV
xC5E2KCW2UE9VuucDwlBMq2vK69Hv+HYyt/mxkbHj25rD1lUD2AEXkUlKhmvUsgK
ii3XcEefcgBjY5WDh+Y5W9fhd2RxQ6lslw3HJTnEXej7cobNHf2UJyLf2y3DKIwz
+VVill3nAP5OrU8/CoNsEvgy22KJV5JgY4ojep/HO4BB0uFqGwb/Jd6CboWCt5z4
UVyS1O7eWPDMe2LPVG6LD2Y+fv7FJIwK9mfaGPHPtsa0zZ/EgQSAF4KRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4ODOnbCodYilDjYcNwZSLFIrT2MB8GA1UdIwQY
MBaAFJaW5SJP71F/TcxmwUEDUsyKv7IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUt
ZjQ5NzlkNTBlZTIyLzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUtZjQ5NzlkNTBlZTIy
LzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieoF9hWk
K8Vmsl/4iMKh1cd25jA97/MQvCP+YDROMAGikVy+X2V+oJVxi6/t8907QLnULgw7
gzURkp1L5rKdOqwTrNjBhI0IfzTHkN7oH4c4W+WhzWjakIdvKN1Jf14/O0BQ408L
H21Qyk8Tr8/p+ETgFK7XOI+K4EW8lMlWUv7ci4CzHUpahNpKw50emFSFSD6SIRWB
uvGwwkG2zDp7uVVpzJhm8E9L1TYF0xEhkR8NiYN9vZ2N6mTRMsofUhHjcgG8unm8
DsClujFj1IK/i7HacPTMN1PjNoIscbRYnZUscDMEvlFM1yp7+Dt7WSwcV5mMBFbk
VVmPjWgwe4FTuQ==
-----END CERTIFICATE-----