Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File:                     L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier:          ZK3BXpWXn84Qv4wgyz6nm1P0dW7lxSKbCoH8UXyCYms=
Subject key identifier:   14:F6:2C:75:0F:76:C8:BB:A2:BB:A1:5B:EE:E3:07:56:97:4E:0B:00
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer:       /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial:       01962F74BC9F3B85D6469D6AB7015C4C5E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number:          0ABD
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
                          2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: mGZn+uMUYOp+1vXlT8peib/baoTuhWce3sl36gm6FbQ=)
                          3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:9f:3b:85:d6:46:9d:6a:b7:01:5c:4c:5e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=14f62c750f76c8bba2bba15beee30756974e0b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:30:9c:70:b1:2a:40:b3:19:40:cd:8c:52:
                    11:bd:ca:74:61:8f:7d:39:94:d0:44:75:12:bf:1a:
                    7b:6b:c5:2f:40:69:c3:05:63:fb:1a:bd:19:02:dc:
                    ac:86:cd:2b:a8:fc:0a:72:be:4e:19:94:69:18:67:
                    45:df:9d:3f:69:70:8c:cc:b4:dd:1e:96:3d:b6:3b:
                    13:38:9a:a3:64:cd:dc:b0:cb:d3:ed:93:f3:cb:d1:
                    a1:b4:cd:52:c0:ac:54:4d:54:bb:d8:da:83:b6:31:
                    5e:a8:17:81:c3:73:f3:50:bc:c7:0c:48:b3:cc:6d:
                    a8:33:43:91:f0:67:ed:08:54:de:0e:5e:9f:bb:43:
                    73:6e:19:6a:e5:37:53:e0:2c:b5:86:ab:2b:4d:3c:
                    e6:e7:3a:6c:92:2c:9d:42:31:ca:92:17:36:e1:5f:
                    7b:95:c1:2b:c0:06:5e:cd:f8:59:ee:28:1f:73:de:
                    f9:33:8b:92:37:6a:22:c5:48:09:bf:46:60:b2:55:
                    47:c6:c9:50:b2:13:c0:84:96:8b:1e:e4:01:fa:fe:
                    f1:80:42:3d:18:21:bb:1d:7d:68:e5:b9:56:1c:ef:
                    13:39:a1:38:17:d0:c9:57:a8:43:7a:c9:7b:65:92:
                    ad:4c:7c:40:fb:0c:4f:14:d4:c7:a7:75:e0:52:01:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F6:2C:75:0F:76:C8:BB:A2:BB:A1:5B:EE:E3:07:56:97:4E:0B:00
            X509v3 Authority Key Identifier:
                keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:53:ea:72:d9:3b:9d:be:9d:48:a2:bd:18:5d:5f:23:bc:
         18:db:b5:5c:7b:de:3e:1d:fe:96:61:a7:b1:34:0b:57:0f:9e:
         8d:31:b8:e8:c3:10:c7:3c:57:d7:85:85:4f:ff:c8:57:56:77:
         77:9f:e1:09:12:b7:14:f1:ee:50:bc:31:ee:2c:14:cd:67:88:
         f5:98:54:4a:41:06:19:63:03:47:74:25:9f:0b:b8:fb:e1:45:
         15:49:cc:52:81:29:7b:aa:49:d7:1d:7e:1d:3d:05:e7:f8:d0:
         5a:b3:bf:db:ed:0c:b7:71:b7:59:3e:d5:32:1a:b2:72:c5:5f:
         ff:7d:70:57:dc:9b:db:9a:ee:62:51:2b:da:71:52:c7:02:e8:
         98:b2:a8:5d:f0:68:1e:30:fb:4f:eb:39:8c:3e:a4:4c:af:72:
         1a:4e:5e:48:91:32:22:92:36:7e:89:e9:bb:25:09:60:ed:d0:
         21:73:18:bf:cd:0f:ee:b0:2c:f7:31:be:3c:88:49:55:13:ae:
         40:38:54:37:48:9a:30:54:0d:d1:9e:7d:1d:76:a0:dc:e7:bb:
         17:f5:6a:49:bf:64:d3:b7:53:f6:b3:26:82:f7:b3:d4:90:bb:
         19:a5:5a:59:4e:e4:93:35:7a:02:2e:c8:21:65:a9:59:b2:90:
         61:4e:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----