Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File:                     LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier:          9dDcbI/Vk3+8DX9nN8JMDCjEnktxuHuHdTj4Ba/g84M=
Subject key identifier:   9F:D8:FF:D2:F1:66:AE:49:FA:B1:9A:6C:37:BC:5A:A9:12:3F:00:F4
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer:       /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial:       01962E61CFD1E0D60B7615BF321A3F5AD755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number:          13B8
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: 9DXO/acj/kTfjqH4vraIZZc7cEsV6dhz18AyfZQD7f0=)
                          2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:d1:e0:d6:0b:76:15:bf:32:1a:3f:5a:d7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=9fd8ffd2f166ae49fab19a6c37bc5aa9123f00f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:7d:ed:57:4b:32:da:a9:fb:7d:5a:96:18:
                    6c:f8:fc:01:03:31:0d:79:b8:00:3e:5a:91:b0:4d:
                    ec:4d:23:61:b1:e3:8c:6c:97:25:49:2b:dc:33:41:
                    5a:1b:3b:74:80:8f:ca:96:48:bf:20:cb:e5:60:25:
                    2c:86:ce:4c:7b:bb:a8:4d:8d:31:e7:02:a0:b5:28:
                    6c:6f:42:9e:0b:db:a5:87:b2:48:dd:85:63:90:17:
                    34:de:b8:25:6d:52:aa:87:ff:7c:f7:41:33:6b:e6:
                    e6:b5:38:01:29:ed:6b:e1:d0:00:0e:76:0c:49:fd:
                    23:d8:f2:ae:48:93:91:7b:ce:01:69:05:fa:1e:79:
                    1b:10:b9:8c:4e:3e:7d:73:98:64:d8:15:99:13:86:
                    0c:c6:b7:27:69:28:78:3a:95:29:64:c0:f6:6f:65:
                    4b:ad:51:27:b0:63:4b:ef:7f:03:e3:fb:e5:2b:2b:
                    a7:38:2a:75:b4:79:c2:03:b1:37:01:dd:ff:ef:9e:
                    fb:2f:1c:d9:2e:23:b8:86:e5:86:19:2d:a9:69:91:
                    72:4b:f3:90:97:a2:25:ca:2a:d3:d6:a8:50:a9:b7:
                    d7:0b:a5:fd:c6:d6:1e:9c:54:59:9f:84:b6:53:c9:
                    9f:e5:85:c3:89:09:db:fa:13:b5:3f:20:67:4d:35:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D8:FF:D2:F1:66:AE:49:FA:B1:9A:6C:37:BC:5A:A9:12:3F:00:F4
            X509v3 Authority Key Identifier:
                keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:a0:55:96:9c:cb:75:33:8c:e0:7d:ab:32:fc:08:de:bf:
         39:9e:c3:e0:27:38:50:29:84:07:2c:70:95:1a:d8:f0:f9:14:
         34:4b:bb:c7:e6:d0:a1:72:75:62:14:4a:54:57:d2:8e:33:f0:
         a2:8f:19:fc:22:c7:55:03:fe:ad:e6:53:80:ec:8d:dc:6e:e9:
         44:e6:91:34:89:e2:59:5a:83:7a:f9:fd:d7:a9:9f:b0:48:fb:
         87:f7:63:38:bf:b7:27:e3:3a:5a:76:05:7a:41:7e:46:1a:1c:
         6f:f1:ec:79:86:2d:72:e3:c8:5b:c2:36:f7:e6:4a:00:62:29:
         7c:c8:fb:4f:a1:5a:f8:62:ec:8b:41:1a:97:49:46:d2:bb:c9:
         41:c3:8c:c4:0f:2e:0b:6b:ff:0f:d8:38:6d:8c:c7:b2:5c:7e:
         f3:6d:30:4e:37:c2:27:8a:92:29:74:02:f0:bf:7f:5b:1d:63:
         71:46:61:53:6f:c5:a5:23:00:87:b8:eb:b7:03:47:db:b7:f0:
         78:c3:f8:46:06:19:e9:51:93:aa:8b:7f:ef:4b:62:71:5d:77:
         63:ce:46:3a:3a:cf:f4:33:73:65:eb:0e:08:f9:de:5b:08:01:
         2f:de:ca:f5:03:33:d5:e2:66:3c:0f:46:19:69:c5:e2:a3:ea:
         67:1f:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----