Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File:                     LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier:          R2xngb0fNcZj4ytYr6da0FrgDwZqxU6lWouX459gdaQ=
Subject key identifier:   42:FD:61:5F:0A:EC:38:55:C9:DB:A5:E6:64:15:86:AB:80:EA:8C:9E
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer:       /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial:       01962E99875B9C8247CB578BBDAF40D9D87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: sPB/AjcFf35KjpeV/Fwf7O1qeEuRPh3JY/ZkS1uWi44=)
                          2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
                          3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:87:5b:9c:82:47:cb:57:8b:bd:af:40:d9:d8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=42fd615f0aec3855c9dba5e6641586ab80ea8c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:86:7a:56:30:5f:a6:25:58:89:e1:af:67:
                    a7:b6:a4:ec:03:1c:3e:47:c5:47:92:e9:a2:82:93:
                    4a:f5:b0:de:56:62:23:4e:a6:61:7d:fd:2a:c4:80:
                    94:27:04:df:cc:2f:24:17:d3:5a:10:f3:34:be:c2:
                    03:e8:b9:89:5a:bf:fe:33:5c:8c:3f:5f:49:c9:35:
                    3a:4c:a3:e9:e2:e0:34:81:60:7e:53:28:2a:75:48:
                    9c:64:e4:8f:29:7c:ee:47:a1:39:a0:50:64:a7:e0:
                    3d:02:f0:91:ff:9b:71:b8:ae:1b:87:82:c0:c4:c6:
                    03:b4:fa:9e:fa:4a:d8:a7:31:b6:e4:5f:07:ec:33:
                    d0:22:82:13:62:86:14:47:8f:b1:2c:d9:50:ae:c0:
                    86:d5:50:7e:35:ec:d8:5d:29:fe:f4:47:37:60:05:
                    e9:83:b6:ec:18:a3:bd:44:ab:fb:42:65:f7:d0:79:
                    60:90:12:fd:e8:3a:d5:19:c7:bd:5b:53:5c:74:ad:
                    3d:23:88:dc:fe:35:79:47:91:23:fb:f7:ac:1f:e0:
                    b5:1d:b1:55:72:27:e9:97:53:9f:98:5f:d1:7c:ed:
                    20:8a:01:20:d2:5c:a3:42:06:1c:27:2b:d8:cc:f9:
                    9c:e9:17:83:f5:1d:8b:5d:56:b4:f3:a0:2a:8e:ea:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:61:5F:0A:EC:38:55:C9:DB:A5:E6:64:15:86:AB:80:EA:8C:9E
            X509v3 Authority Key Identifier:
                keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:d9:9d:e6:8f:f2:b5:cb:34:ab:64:91:3d:aa:d1:43:81:
         43:ee:9f:86:9f:a5:75:60:ed:83:34:65:3b:48:33:8b:94:d8:
         24:ae:ed:a3:12:c7:76:b4:55:70:d3:69:b6:d6:93:f4:d5:6a:
         94:8d:92:3b:af:c4:9c:59:bc:9d:c2:79:79:52:e6:7c:26:5b:
         32:86:1a:82:fb:1e:85:16:1a:2d:cc:15:26:30:b2:2c:07:6d:
         88:ce:85:5f:0f:f9:9e:00:7b:1d:ae:bf:cc:9a:f9:ae:6b:8d:
         d8:9b:7d:5d:92:9d:8e:ad:38:a4:51:e8:ae:3a:cc:f9:70:5d:
         f5:a0:3f:60:49:3f:37:67:a4:44:38:74:1b:d7:22:e5:85:dd:
         2f:0e:51:0a:fe:1f:6e:4f:2e:9a:54:bd:36:d1:25:eb:99:6b:
         8f:53:6b:45:e0:0b:1f:52:d2:d8:be:5d:13:e0:3e:ca:0e:e7:
         12:ba:24:29:fd:c1:96:51:f2:27:45:93:19:0a:69:8c:a0:da:
         c7:5e:e7:04:cf:41:c7:29:b9:96:78:79:0f:ad:9a:4e:33:f3:
         99:26:b6:61:ae:6b:0c:90:0e:62:94:55:4b:56:bd:dc:80:65:
         da:50:d6:03:b7:83:ec:2c:7b:0f:16:ed:5b:cd:ae:c3:97:f4:
         b4:98:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----