Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File:                     LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier:          NEZgksavQtcpQRvNetXrpdd7TPwv0TVbjk9+EzYIyfo=
Subject key identifier:   8A:66:C3:73:13:59:10:95:97:87:86:45:65:93:A8:42:76:AA:EF:75
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer:       /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial:       01962DF460DD38ECC6020E65B927E53AFCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number:          0556
Signing time:             Sun 13 Apr 2025 07:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:52 +0000
Files and hashes:         1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: uboq/1ORG2evWxlZSLB2HWvnQZ+4OAa1kUIFCKZNYNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:60:dd:38:ec:c6:02:0e:65:b9:27:e5:3a:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
        Validity
            Not Before: Apr 13 07:01:52 2025 GMT
            Not After : Apr 14 07:01:52 2025 GMT
        Subject: CN=8a66c37313591095978786456593a84276aaef75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:55:83:88:00:92:42:25:15:42:7a:2f:a6:
                    0f:2d:13:97:e0:e9:4b:3c:9d:f0:2a:81:56:d1:c4:
                    21:be:a5:d1:45:cb:8f:f3:6d:d8:b2:3e:7a:5a:d1:
                    24:28:c1:43:b5:18:26:ec:50:ac:75:82:d0:89:d3:
                    0c:18:da:a3:6e:98:1c:a6:4e:52:65:2b:57:44:9f:
                    e4:71:a9:d5:d6:a5:f7:be:36:11:e1:96:7e:91:cd:
                    d2:88:7c:ad:50:7c:36:c2:89:b4:f3:ba:68:a1:44:
                    9a:2c:4a:66:f3:d7:f6:99:8f:45:02:72:5d:d0:db:
                    67:b0:4a:52:d8:38:98:ae:cb:a0:ba:99:5a:fd:29:
                    95:17:44:bd:5b:7d:3a:71:b4:05:50:58:3f:45:6f:
                    ad:7b:56:9b:49:8e:15:3a:42:d1:53:d1:31:95:f1:
                    d9:db:81:bc:48:47:af:6e:86:c8:02:ae:14:76:dc:
                    5e:d9:31:0a:85:d7:ff:3a:67:02:1f:2a:90:66:bf:
                    f4:0b:64:13:7e:8e:8c:89:f9:4f:9c:95:19:c5:7f:
                    1e:85:65:03:45:de:09:b7:9b:54:eb:c3:85:41:d2:
                    51:15:8f:70:09:f9:45:ef:57:fb:7b:78:c5:db:07:
                    0d:32:f9:9b:bc:50:88:73:4b:ff:8b:0a:69:02:15:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:C3:73:13:59:10:95:97:87:86:45:65:93:A8:42:76:AA:EF:75
            X509v3 Authority Key Identifier:
                keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9e:fa:c1:c6:94:5d:76:f0:ec:c5:72:ed:58:d0:ab:e7:5c:
         6b:1e:46:7f:58:e6:f2:ac:93:d3:19:65:c7:14:7c:c2:3e:9b:
         a6:4a:fa:29:e7:6d:57:b2:4f:a4:f4:2c:ed:82:ce:8f:95:f1:
         d1:02:8a:48:2d:9d:8d:1d:3b:21:f7:ab:ca:89:a7:87:59:89:
         38:fd:04:d4:95:2b:09:ca:0f:62:ab:4e:63:20:d6:16:69:80:
         99:1e:01:cd:a0:d0:2c:f2:b2:ab:78:e3:c2:e8:88:e4:12:96:
         84:69:d7:58:2b:3c:16:5f:86:e9:f8:ec:a7:54:79:17:dd:b2:
         cc:53:39:2f:7e:30:6b:3e:67:ca:86:f5:0d:62:e2:7f:7a:f9:
         9c:30:19:f9:49:fd:e4:e2:7a:c0:db:0d:99:ef:30:28:6e:21:
         fa:2f:be:44:a7:5f:09:6b:0c:4d:12:31:91:0a:44:fc:8a:6f:
         1b:9e:83:ec:ab:63:8c:6c:2d:52:bc:60:a1:3a:5b:8d:99:04:
         2a:d7:a9:cd:96:53:95:c5:cf:86:0b:d0:ef:ad:5f:89:1d:c0:
         1d:8a:6c:e6:ed:51:d8:82:32:16:81:0b:b8:74:77:f3:bf:dd:
         60:f8:23:04:d7:be:86:a8:f2:34:57:f0:98:3a:43:99:cc:e4:
         de:b0:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----