Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File:                     LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier:          AfEnJ4+rZ7jo89n0O9G1vX7868Z8kizKZI79NT7zmUU=
Subject key identifier:   45:B7:50:BE:95:8B:7F:E4:A2:5C:71:F2:78:FE:F9:51:45:85:F7:23
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer:       /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial:       01962DF402B5D13EB905BD2383E53B31A3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number:          0F42
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
                          2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: bRFKeBa+aFA0pganeyztwriNOJxQgGbs8yTlA9dPgCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:02:b5:d1:3e:b9:05:bd:23:83:e5:3b:31:a3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=45b750be958b7fe4a25c71f278fef9514585f723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:f0:e6:72:15:30:57:71:e5:62:b6:b0:a3:
                    77:c1:49:8d:53:ef:4b:ee:0b:b3:1a:41:9a:8e:0f:
                    be:3f:4f:8f:cd:8c:fb:7e:f9:23:e3:9d:f2:69:a9:
                    09:ae:f6:bf:6f:50:bd:91:04:3c:43:f0:9f:25:63:
                    d5:02:3a:3a:6b:b0:2e:16:2d:c2:52:21:31:8b:17:
                    c5:0e:4f:af:1a:c9:65:8c:7c:80:76:7b:e7:c9:8f:
                    09:18:1d:68:c6:b4:75:b3:b0:0f:6f:f1:fc:af:39:
                    d5:74:13:9d:a3:bb:40:b7:df:53:d2:07:3a:cb:e1:
                    0b:16:b7:fe:0f:d9:31:d4:53:50:99:2e:b8:72:cc:
                    e9:be:3a:07:e2:03:e3:f8:db:22:46:34:a0:44:2c:
                    c1:df:2f:c4:df:e0:c7:62:77:7b:27:f8:fd:2c:90:
                    74:38:38:cf:2a:c7:a2:86:05:ce:7c:e4:6a:bf:0c:
                    bc:9c:7b:21:b4:82:38:5c:20:2d:3f:08:b4:bf:78:
                    db:96:50:fd:67:25:d2:d3:45:b3:e2:fa:8b:0e:59:
                    e2:7e:82:d0:71:8a:43:89:d4:d3:10:92:ea:66:3b:
                    46:39:07:d9:11:be:89:af:c0:ef:b2:26:ca:f4:61:
                    89:6e:a9:18:b4:a6:cc:45:08:e9:ee:81:b1:ca:a6:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B7:50:BE:95:8B:7F:E4:A2:5C:71:F2:78:FE:F9:51:45:85:F7:23
            X509v3 Authority Key Identifier:
                keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:e1:8b:d8:e8:36:4b:39:b4:bd:35:d8:b9:6d:d1:d0:d1:
         43:ec:4e:24:58:f4:95:f2:95:b1:22:dd:83:52:46:4b:99:2e:
         cb:79:df:e9:21:30:9e:a4:f4:96:15:05:3c:a2:08:13:1d:52:
         76:cb:bb:bc:ab:de:94:c7:28:95:83:28:90:2d:4d:06:53:5c:
         e5:19:39:2a:5e:3d:95:70:9a:de:b7:08:8e:5d:81:59:80:85:
         3d:13:cf:1b:0b:bd:15:a9:e1:0c:65:3c:d2:0c:8f:12:00:1f:
         b4:77:06:01:ff:8c:19:13:5f:e5:e0:0b:45:0f:62:6a:25:83:
         52:f0:94:8a:17:4f:b7:e2:52:08:ca:3a:d2:66:0d:bf:22:fe:
         27:fd:b4:63:40:03:e8:cd:d7:0f:34:3b:24:8b:01:19:89:76:
         94:cd:bb:c5:4c:e8:03:49:d2:2c:99:ad:b1:51:18:58:a9:6e:
         c9:41:01:a7:85:45:66:3f:c8:39:34:bd:3c:e8:27:e3:d4:c0:
         b0:cb:31:48:05:7a:e1:28:f7:c8:0f:f4:75:7d:e0:1c:09:c6:
         94:4d:77:3f:55:6b:9b:ae:ad:c5:fa:05:d1:74:c5:64:7e:1f:
         3a:12:a1:52:3f:1b:06:2f:af:b3:46:03:cf:45:05:5a:af:9a:
         11:73:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----