Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File:                     lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier:          oXPuUkfw/0u1qIzT6NvhF16Qs7kKdlE6tLjpZh6g8bI=
Subject key identifier:   90:45:B2:F3:19:C1:C9:C8:75:5C:72:FB:6C:BD:76:C9:8F:BB:1D:39
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer:       /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial:       01962F74413C611D7E1910F30EB93D201765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number:          14A6
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
                          2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: dH6wD0GOxrLHMKqFtXhY/MyelQCr55FlOUPBt7LmbMU=)
                          3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:41:3c:61:1d:7e:19:10:f3:0e:b9:3d:20:17:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=9045b2f319c1c9c8755c72fb6cbd76c98fbb1d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:49:51:7c:8b:bf:95:7e:b8:d5:c7:35:20:
                    b4:a0:20:18:4c:25:e5:e3:4c:8f:8c:1c:b9:63:ff:
                    b6:d6:a2:eb:f7:27:d7:53:08:8a:48:d6:17:10:8a:
                    6f:49:7f:e8:08:03:70:83:0c:1d:d6:06:a3:8f:e6:
                    b0:ad:e7:2d:9f:66:46:5b:da:19:2a:63:e0:ca:48:
                    1a:12:00:be:46:91:37:8b:d6:57:ea:96:03:cb:0e:
                    78:de:ad:c6:15:85:23:f3:39:e7:a1:5f:e8:6b:81:
                    02:29:eb:8f:a2:a5:6c:a2:19:62:90:c8:aa:d8:48:
                    2a:76:ff:70:28:8b:91:5b:53:e5:4d:74:a4:09:c3:
                    1c:57:e6:34:db:ba:48:fa:24:90:9d:02:16:e3:b7:
                    80:cb:9f:59:ca:2a:c0:f2:08:d2:df:a4:e9:f8:b1:
                    dd:17:c1:be:25:a9:ec:b5:ea:aa:5f:d5:fd:4b:b1:
                    42:83:d8:a1:26:b0:85:61:42:f3:65:df:fd:d9:58:
                    97:ed:d9:ae:ef:cf:71:66:98:f5:28:29:73:f1:cb:
                    61:24:6d:f3:04:05:25:c4:3a:a6:39:58:45:9c:cf:
                    07:b0:6a:1a:6d:7b:1a:1e:53:fc:ff:85:51:3d:25:
                    12:40:4f:0d:53:d0:c2:40:5f:d6:c9:06:27:85:55:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:45:B2:F3:19:C1:C9:C8:75:5C:72:FB:6C:BD:76:C9:8F:BB:1D:39
            X509v3 Authority Key Identifier:
                keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:93:c8:27:d4:3c:b5:32:d9:c0:c2:83:13:59:cc:eb:d6:
         a6:e4:fb:6c:09:cc:8d:66:a2:9d:06:c1:b3:21:a5:02:20:19:
         67:63:3d:3c:04:5c:6e:d5:28:dc:82:a5:dc:ec:d6:c2:d1:ee:
         43:09:e0:74:4b:85:f5:a1:dd:95:32:04:6d:1e:c5:80:43:ce:
         de:e7:ad:a1:fc:d3:f1:39:82:5a:26:9f:b5:7a:f8:f4:41:38:
         44:15:58:3d:e3:fb:58:b6:24:f1:88:7b:59:b8:86:67:a2:b2:
         57:33:f8:42:6b:ab:bc:95:c0:64:fd:d1:ba:d4:f8:58:d1:47:
         a7:cf:b6:ef:37:16:2c:5a:65:36:e4:a6:97:94:91:f1:31:53:
         72:67:38:52:d4:64:0e:ce:81:7d:ce:d9:c5:19:95:29:ff:72:
         68:ae:fb:da:c3:d5:b0:ca:07:d0:a7:5d:32:71:f5:6d:a2:ae:
         6f:a1:2a:de:e1:82:b5:f3:64:68:52:ef:26:dd:06:d5:53:ac:
         79:a2:d3:4e:4c:ae:db:9b:59:62:21:b8:e1:05:8e:b7:6c:b2:
         24:04:54:54:52:04:1c:2e:08:c3:6e:a9:74:66:ba:09:d6:40:
         be:4c:cb:5d:71:0f:c9:ee:bf:f5:16:a6:a2:cb:3e:b1:1a:f8:
         23:6b:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----