Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File:                     LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier:          6ys2ombfoucAcYs97vFfCaSNsjJ9BhNHVEkWKdp7J24=
Subject key identifier:   32:15:CC:C6:47:6B:A7:D0:96:B9:55:DB:00:C4:36:36:8F:51:37:D0
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer:       /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial:       01962ECF8C533C40087A56A39AE6031F86DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number:          04E8
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: 4OcE4V7Ow+qKprA+0RkMHvb2IZdqz65RcyV6Fpm3vIA=)
                          2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:53:3c:40:08:7a:56:a3:9a:e6:03:1f:86:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=3215ccc6476ba7d096b955db00c436368f5137d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:d3:a7:1a:07:2e:00:53:c9:8c:bd:71:a5:
                    af:1e:84:d4:fc:f5:bc:43:0f:50:d2:a1:ca:11:ec:
                    71:a1:82:5a:bc:22:bd:21:29:20:e1:b1:0f:c8:17:
                    0b:dc:ec:7a:4f:11:73:26:01:a9:bc:77:b3:14:5a:
                    e9:23:ab:96:73:c7:65:50:bd:ab:50:82:24:82:0c:
                    fd:4b:4e:11:28:d4:59:cf:7c:21:ff:c7:9e:15:cf:
                    e5:22:4d:42:93:dd:82:9f:8e:8c:ad:51:f4:5d:fc:
                    27:d5:6d:eb:75:2d:1b:68:7b:c9:a5:af:b3:56:60:
                    af:8c:b0:07:17:4d:ad:75:9c:ed:36:1c:12:3d:99:
                    2c:d3:e1:00:52:66:54:43:d1:f5:2c:04:a2:b6:10:
                    ae:b0:3c:41:f8:fd:88:0c:0c:a3:e0:c4:84:b8:2a:
                    62:4b:27:07:a3:ff:2a:b2:7d:62:dd:b7:2a:d0:c0:
                    b9:a6:30:76:06:93:28:0a:05:06:53:8d:62:9a:9c:
                    7c:05:a8:0b:f1:69:d4:87:af:4f:78:81:69:48:d4:
                    be:a8:33:45:35:1e:bb:10:d7:2a:6e:28:83:d5:34:
                    12:7a:f6:23:6b:bb:16:30:e2:d8:a5:3a:6b:e6:40:
                    6f:14:6b:26:cd:5a:88:e5:4b:ac:c2:80:f1:f4:f5:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:CC:C6:47:6B:A7:D0:96:B9:55:DB:00:C4:36:36:8F:51:37:D0
            X509v3 Authority Key Identifier:
                keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c1:c7:3e:41:df:51:fb:16:2f:65:cf:23:18:e1:17:05:b5:
         f4:22:bb:1f:00:11:52:a3:e6:e4:e7:40:fd:78:ba:33:8d:c7:
         69:bb:d2:a9:fd:e2:02:70:11:d0:a8:16:27:aa:be:40:7e:9d:
         14:13:ae:52:8c:59:94:b2:cb:4e:af:23:c2:98:f8:fb:3d:5e:
         86:8e:9a:f2:18:64:b2:1a:73:8c:10:e3:a9:a6:81:75:91:48:
         7f:d4:f3:fa:ce:b2:c5:0f:57:3a:ac:2e:68:fa:87:82:21:1a:
         5c:45:97:56:a5:c8:07:6a:6a:33:7f:08:69:27:1a:b1:d2:08:
         d4:d5:6d:bb:1c:75:0a:73:1d:7b:05:0a:79:ba:6e:95:1d:d8:
         9d:92:2d:6f:01:1b:4f:03:6b:47:0b:78:71:0a:cd:b6:ee:b6:
         05:3b:63:6a:66:cc:a4:ce:76:90:ff:1b:25:63:c2:9f:8c:ef:
         e2:fc:da:0e:60:83:5e:5a:50:7b:ff:4d:31:06:97:54:13:c3:
         bb:4a:6d:ac:04:2f:7f:73:7f:b1:66:eb:60:5e:6f:6c:80:eb:
         12:88:bb:29:94:49:b8:8d:9f:5d:3d:48:18:f7:16:9f:5b:84:
         48:cd:6a:f4:93:c3:be:cb:28:65:ae:68:b1:43:9c:b3:ad:15:
         7b:35:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----