Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
File:                     LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft (raw, json)
Hash identifier:          pKu4iP1fK16G+6dPyAo8d0uFMhRDZErDnpGiYtXRPMY=
Subject key identifier:   65:19:6D:5C:1C:94:99:93:63:43:75:98:D5:ED:C5:10:2E:44:57:41
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       01962FAB41BE6818E986F20D496C2C59991B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
Manifest number:          012D
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 3-eMi9JT7hPc3NDPKynwHnHwGvg.roa (hash: oSIP6BTgdOLnonKZ26sBvhO6MiVPEpNSBESIrEziWKI=)
                          2: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl (hash: 0p0L4GVsGIv57v13CEFIkYaeKs+7rrF7eDHjMJhpzQM=)
                          3: dNm1rES2Zl08JygLPN3BuGwOCUM.roa (hash: 7raxOyAsZMXqdmIt6IsBRfrs2D9ul1H2Zd2ogF8bwNk=)
                          4: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (hash: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=)
                          5: jwJTBwWKLkja_FzcvvrpqgDCjws.roa (hash: 7otd9+EZJqRYx/bzq3vtn+zgaqnh5M1MG1Iibx6PmCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:be:68:18:e9:86:f2:0d:49:6c:2c:59:99:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=65196d5c1c94999363437598d5edc5102e445741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:bc:1f:3f:22:43:a3:4d:42:1d:5c:0a:5b:
                    91:24:8b:a9:2d:b0:ba:7a:1b:74:e2:c4:ab:12:01:
                    2a:4f:00:3a:48:11:ca:75:84:12:4d:08:bf:80:77:
                    17:41:9d:e2:49:fe:04:79:ef:9c:23:96:5d:4e:07:
                    ff:29:e3:51:45:5c:b3:07:7d:17:68:a0:30:3e:87:
                    24:50:51:2f:61:52:4d:89:d7:8c:ca:50:b2:3a:1e:
                    1e:b7:cc:88:77:16:08:11:5d:ec:de:61:ea:5e:6b:
                    4b:4a:4f:5b:01:80:3c:d7:22:86:7f:10:23:58:e3:
                    47:e6:8f:31:28:32:bb:a4:6a:97:14:1b:66:7c:1b:
                    48:d6:8c:65:59:90:6c:f4:89:d5:a7:95:26:2b:2c:
                    35:da:f7:42:d2:db:95:f4:e0:9b:71:c9:cd:a6:fd:
                    5e:65:b4:ea:fd:cb:26:ce:7f:17:ce:ba:bc:c3:36:
                    5c:0e:dc:3d:06:5e:26:6a:5a:e3:c9:3c:61:51:02:
                    99:18:9a:81:7d:4c:db:33:19:0c:ab:21:d7:b1:cc:
                    e6:13:32:9f:1c:26:d9:8f:8a:a9:c6:5f:67:c5:8c:
                    c6:69:e0:c0:d1:4f:09:8a:58:16:08:bc:86:30:7a:
                    2b:f2:b7:b6:68:2c:be:ef:f5:a8:1c:da:98:9c:91:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:6D:5C:1C:94:99:93:63:43:75:98:D5:ED:C5:10:2E:44:57:41
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:3d:64:92:18:50:e5:1f:b2:18:c0:50:12:2b:bb:2b:8f:
         c8:9b:d2:0f:ec:34:15:0d:8c:95:d8:ae:18:cd:c7:91:67:70:
         c4:ce:d8:f1:90:5c:61:17:a5:54:e7:ed:d7:14:ce:e4:b7:d1:
         87:7d:ce:99:54:79:f3:f8:a5:71:4a:ed:70:00:85:9c:04:9c:
         c5:aa:8c:7b:bb:0c:7d:bc:66:f0:3b:24:e1:7a:1b:c8:12:0d:
         92:6c:a1:64:c9:44:09:54:88:15:4b:9a:55:2c:7a:3f:c5:ff:
         3b:69:67:3f:1a:14:f5:d9:df:7d:1b:f4:03:34:94:ce:78:6b:
         a6:fb:99:0e:51:39:79:ac:65:6b:ee:c3:50:c5:10:4b:17:92:
         32:13:67:4a:88:26:62:9b:e2:43:db:df:08:1d:b5:85:10:1e:
         68:49:22:30:10:5c:bc:7f:71:b4:40:b0:00:e1:d6:c9:ca:53:
         0b:23:80:0f:33:25:95:d6:fd:ff:41:01:02:9e:fe:cf:55:8c:
         bb:c7:7f:bd:82:1d:90:b6:9a:02:b9:b9:28:47:43:37:05:18:
         b8:1c:74:67:38:ed:d7:e7:72:41:0d:09:34:07:62:2d:6b:ec:
         0c:2b:05:1d:1e:ce:71:c9:57:30:27:d4:e8:05:57:aa:f4:65:
         a2:28:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----