Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File:                     LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier:          1c9o3TnZRq0pkJJjU2xUVtEO1z0e167+7GDvQ+E+cEw=
Subject key identifier:   87:DD:C6:95:94:6D:D5:6E:64:97:94:AC:CA:E1:57:F5:17:31:59:7D
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer:       /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial:       01962E989B32CC08E5DC237A8698D13EDFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number:          07FF
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: kPVOqIb+kfs8EfstCZ112wzDBMejAYH1QpFvQYH6UNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:32:cc:08:e5:dc:23:7a:86:98:d1:3e:df:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=87ddc695946dd56e649794accae157f51731597d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:95:a8:c1:0d:25:2a:35:0b:3a:ce:06:1c:
                    fb:7e:73:db:e7:f2:1e:4c:a3:2e:ca:c3:6e:de:12:
                    3e:9a:8f:1d:b9:da:30:9d:04:50:4d:b5:7a:64:64:
                    19:46:39:ed:44:24:ae:fa:94:7e:d3:ae:fa:ac:87:
                    28:38:c9:62:1f:92:6f:70:6d:ab:2a:c7:ad:e1:27:
                    4f:85:1a:01:3e:d9:72:2b:46:22:db:6a:23:cc:87:
                    99:1f:40:cd:ab:43:7f:9a:20:aa:ba:a7:5e:46:f0:
                    4d:11:20:45:af:97:f1:53:53:ce:64:39:96:cd:e4:
                    db:9b:2d:bb:da:06:35:6a:0d:7b:74:83:f9:dc:4f:
                    88:03:bc:6e:49:9e:23:3d:9d:ac:66:9a:a5:8f:2a:
                    c2:f0:c9:9a:3a:97:32:2b:3d:42:6a:ad:9b:a9:dd:
                    66:55:39:26:fa:89:be:d2:c2:c7:97:4a:58:06:f4:
                    f3:7c:11:98:06:9e:0d:70:84:0e:b6:7d:91:18:ac:
                    a2:fb:41:68:d3:3d:40:5d:70:6f:c2:c6:bc:0e:9c:
                    b4:05:58:c6:96:22:7c:0e:c4:f7:a4:5b:f4:7b:00:
                    d2:9f:66:c0:a3:6a:1a:92:ea:12:0e:a7:8e:e4:20:
                    e0:87:31:85:f4:b3:ff:b5:e6:3b:b9:9f:2c:1e:a4:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DD:C6:95:94:6D:D5:6E:64:97:94:AC:CA:E1:57:F5:17:31:59:7D
            X509v3 Authority Key Identifier:
                keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:50:9d:16:96:39:70:2a:ab:34:d2:8b:e5:2d:65:d1:2d:
         7a:c5:09:eb:84:24:f8:2a:45:8f:e3:bb:a5:86:06:cd:7d:36:
         04:8b:91:99:54:31:a9:25:67:b1:ff:55:4f:83:7d:27:d6:25:
         0a:b5:fc:52:d1:f9:15:72:5b:22:0d:3f:02:e4:3f:85:21:1d:
         86:8d:cc:9b:37:c0:e0:63:7e:62:63:cb:15:e2:47:c4:bf:f5:
         5b:63:c5:dd:91:ae:59:72:b4:ff:22:4c:3f:e0:96:8e:4e:27:
         bd:e1:1e:7e:36:51:70:18:55:52:f1:a1:35:fa:e6:13:a3:68:
         a3:cb:13:5f:58:04:95:7b:eb:e2:fb:91:b0:a5:23:04:27:d8:
         95:c5:86:65:8c:71:d7:b3:f6:56:13:b6:6f:ad:46:2d:41:cb:
         21:41:31:e0:6f:e4:e4:9c:40:72:57:39:2d:ed:c9:6b:6f:b9:
         54:39:52:c0:34:21:77:78:6b:69:f5:ef:f5:c2:fa:8f:7f:f9:
         e5:cb:5d:e2:e5:71:27:03:71:a5:15:6a:e9:05:2c:dd:64:96:
         8c:14:54:7e:11:f8:be:74:09:61:05:05:ba:dc:35:f5:61:d0:
         cb:89:8f:9f:ae:da:00:cb:d8:46:d2:ac:d0:7b:4b:52:87:f0:
         69:e4:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----