Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
File:                     LphQiZ2cq14AM9C-lyKn6zBdfGA.mft (raw, json)
Hash identifier:          r4OKE4Tv4W0P2xDca36WHOlIKwDamo07fUQCPIQ3rVE=
Subject key identifier:   4E:37:99:7B:30:A5:57:89:62:62:74:59:F7:F3:1A:88:3B:6C:F9:5E
Authority key identifier: 2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
Certificate issuer:       /CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Certificate serial:       01962E987956E040A405DA5D50EAA183A841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: LphQiZ2cq14AM9C-lyKn6zBdfGA.crl (hash: AVR518dnmxa/zEkA7Lrf7Pm6Ob9JfWo0WoSl+K6Myfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:56:e0:40:a4:05:da:5d:50:ea:a1:83:a8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=4e37997b30a5578962627459f7f31a883b6cf95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:3c:21:70:a7:c6:0d:d5:e3:20:6c:59:54:
                    e2:3c:9b:59:78:d0:df:e0:b3:cc:69:d2:86:df:4a:
                    43:8d:af:1f:08:3e:11:a7:e6:0b:e0:5c:22:c2:aa:
                    5f:57:e3:e9:76:dc:0a:1f:9b:5b:51:ae:75:6b:d3:
                    5f:38:3b:09:3f:74:e8:03:b5:da:27:03:1f:c3:55:
                    e1:87:b8:95:d9:e5:e9:22:d0:ee:ad:1a:11:9a:fa:
                    32:1f:61:0f:04:7d:61:27:7a:b4:10:f9:0f:b1:88:
                    7a:23:7a:1d:98:2d:21:5d:c0:09:8d:1d:3e:64:81:
                    5c:50:32:ad:20:44:81:6e:ec:dc:24:84:b5:1e:65:
                    42:64:91:02:16:bf:79:1e:42:0e:b4:cc:37:85:ae:
                    e3:2e:b2:b3:d8:af:26:20:fd:7f:db:69:0e:8e:1f:
                    f0:6b:ac:69:3b:a0:54:8b:bb:57:64:20:ac:6d:06:
                    00:6f:ba:a4:2f:83:bb:5b:e4:76:99:1d:eb:be:7c:
                    9c:53:d2:fc:4b:4b:ca:1a:85:db:48:f7:aa:f8:ed:
                    39:ad:c2:e2:50:42:94:ff:b5:49:71:05:6a:de:10:
                    42:56:94:08:9a:cc:1c:e2:2a:0b:33:54:e0:a4:b8:
                    20:15:fc:b9:b4:cc:90:4e:ad:c8:ff:ef:af:c1:b0:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:37:99:7B:30:A5:57:89:62:62:74:59:F7:F3:1A:88:3B:6C:F9:5E
            X509v3 Authority Key Identifier:
                keyid:2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:06:08:c4:cf:94:0e:11:27:41:14:a6:fb:ac:6a:68:9a:60:
         b0:e5:c0:e2:55:2a:2d:de:86:da:02:db:b1:56:5d:c0:72:84:
         d5:dc:d4:f3:55:8d:4b:66:b3:3b:8c:6d:dc:b5:55:d2:70:62:
         b1:1c:06:66:8f:26:e5:6f:8b:48:43:79:84:b0:e5:18:10:ae:
         df:7d:49:54:cc:22:e0:23:39:eb:34:28:8f:9f:3a:ec:25:5c:
         3a:e7:aa:02:80:b6:f5:70:c3:07:0c:f3:63:e1:74:14:be:d0:
         55:15:64:36:9d:93:48:f7:a3:da:52:41:a6:11:0a:81:32:a7:
         e5:27:53:e1:c5:81:1c:4a:0a:80:db:3b:06:d7:d6:d5:88:88:
         7e:9d:03:9a:e6:9c:b8:10:54:8a:6e:46:c0:cc:7b:4d:cf:91:
         3f:4e:07:28:e6:bf:f8:94:20:a3:72:32:06:4e:b2:b6:3e:88:
         a3:79:20:9b:b1:64:21:f4:b7:0e:10:f7:c5:d8:61:ca:c0:b8:
         09:76:4e:2f:94:81:27:fb:5e:bf:e1:99:64:45:f0:44:8f:39:
         78:16:f6:c0:e2:f6:3e:50:01:ed:86:72:f6:b6:11:13:02:0e:
         5d:f9:6b:1a:3d:6a:30:a9:02:e8:fd:73:07:40:25:31:09:df:
         bf:87:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----