Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File:                     L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier:          0dfmUKHInrBn9MVOAgG8MCILmcfM3AVV8LQMM7ooKwQ=
Subject key identifier:   45:70:5F:F6:65:27:89:DE:65:BD:7F:23:B5:ED:55:F5:CD:40:78:5E
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       01962FABA29A794C806F8A13139289489419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number:          14FF
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: GpBrw+CIj1j1Q/o3SQcdq7qJdmX0xOVrWCA23MuWt40=)
                          2: _4mi6FMsb5MMS84cmGAj-vihP_s.roa (hash: QMaVG19Bmbd4Oawqm17YLsXLEzfjkNWzC2zxW2jHY/w=)
                          3: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a2:9a:79:4c:80:6f:8a:13:13:92:89:48:94:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=45705ff6652789de65bd7f23b5ed55f5cd40785e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c3:14:2a:d3:9c:05:79:d4:2b:9d:b3:53:b3:
                    b8:10:10:89:3d:d9:0a:71:15:7b:1e:f3:4d:ae:f8:
                    32:34:a8:a9:10:3b:c2:fc:ee:9f:8d:bf:56:5c:00:
                    53:a7:45:99:80:14:fc:1a:dd:e2:66:5f:c9:45:99:
                    eb:4c:0d:c0:c7:78:ab:97:a5:3c:9b:0f:ac:02:63:
                    48:7d:6d:10:7f:27:45:a9:ae:28:58:7a:b2:2e:e0:
                    5e:43:12:d4:97:72:34:a3:22:9a:b4:45:d9:5e:a2:
                    81:42:54:07:51:5f:65:9c:e3:b1:56:1e:eb:4d:a0:
                    ed:d4:d5:fb:99:38:7a:90:7e:c7:aa:c2:41:de:e8:
                    a2:5a:2a:e3:98:4c:4c:e6:c2:b0:0d:0b:1f:36:0e:
                    f7:2e:c9:30:d8:37:36:69:33:0f:70:85:78:dd:e1:
                    52:8a:ae:e5:23:ff:5b:a3:a6:11:ea:a0:d2:ba:1b:
                    ed:9b:63:6f:fd:8a:c3:9d:40:62:ef:80:4e:44:1f:
                    19:20:65:c9:be:97:ca:d1:d4:1f:9d:aa:a8:04:a4:
                    f1:87:34:9e:f7:4e:ad:40:31:2e:9f:fe:5c:44:38:
                    74:9e:f5:24:9a:d3:0a:a8:30:68:e0:14:a5:a2:6e:
                    c3:22:ce:5a:86:51:c8:7d:8e:34:09:bc:7d:60:1d:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:5F:F6:65:27:89:DE:65:BD:7F:23:B5:ED:55:F5:CD:40:78:5E
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:81:be:eb:5d:91:99:01:0c:bf:9e:93:f0:0e:5e:7a:2b:
         4a:97:5b:23:8b:09:39:2d:e5:01:b2:de:9e:ff:c9:0c:55:38:
         ad:55:e2:ef:66:6e:fa:1f:6d:d4:93:1b:60:53:0c:42:3d:22:
         35:5c:b8:5d:64:22:b2:c5:a8:41:67:c2:be:a4:52:92:16:80:
         c7:26:8d:95:77:85:40:f0:37:09:2b:5d:c4:d6:af:c5:6d:4d:
         be:30:42:da:36:53:53:84:19:fc:29:43:05:d5:96:b5:95:d8:
         c7:87:51:5c:2c:b9:cf:a7:82:43:61:28:4e:24:32:c9:c2:13:
         fc:94:52:6d:3b:0a:b8:61:f7:00:17:59:47:69:3a:01:28:73:
         5e:a7:78:8b:8d:fc:fe:a8:d1:36:f2:b4:6c:e0:b4:03:8c:6e:
         c6:4d:82:bb:25:eb:5a:88:11:a6:07:71:fb:e8:93:25:47:ee:
         c3:0c:7f:06:a5:94:15:19:46:a8:b7:93:ad:64:80:56:87:55:
         7b:d9:41:04:22:5c:e1:74:21:92:b3:bf:f6:16:62:96:76:75:
         c7:89:4c:88:1c:c8:24:d6:70:88:0c:ae:58:1e:f7:f7:85:c0:
         17:0f:b7:a3:28:a1:55:59:80:36:22:5f:0b:2d:b3:dd:ea:d1:
         39:78:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----