Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File:                     lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier:          0gMzfH2tEEe/sMDxL2Zc0E8lBOWl6UCRJPJAuoIbBkg=
Subject key identifier:   B2:0E:CA:41:8D:33:E5:40:CE:2F:BC:FC:BC:A6:BC:3B:0E:E3:A3:B0
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer:       /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial:       01962E987BAB8D340486AD90E2769464CC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
                          2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
                          3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: eKmEONp/BNRlUwk/LunRmjxU/wGXAFXnnzdEGxvbHWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:ab:8d:34:04:86:ad:90:e2:76:94:64:cc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=b20eca418d33e540ce2fbcfcbca6bc3b0ee3a3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:e8:ba:4a:d1:42:72:69:1b:10:dc:0e:78:
                    88:17:26:a1:20:f4:33:d0:23:52:dd:0e:83:bf:2d:
                    ec:4b:b0:5e:52:4a:b7:07:f8:71:20:4a:c2:bb:40:
                    79:fc:10:a2:1a:8d:f5:f7:91:8f:60:b3:23:cd:6f:
                    17:ca:f0:0d:60:ad:ac:08:d8:a1:a5:fe:45:d5:0f:
                    b4:dd:ab:b9:62:3c:24:f1:6a:ec:39:80:3e:73:05:
                    1c:e2:53:b7:c0:78:34:4d:d7:5c:83:35:08:94:1f:
                    95:2c:b0:98:4b:3b:fc:de:c0:07:2e:8a:8c:51:99:
                    8a:4f:8d:72:f6:03:f3:2e:c4:51:19:be:bd:28:4c:
                    2c:7a:f5:d3:71:2b:98:56:13:c1:38:4f:51:a4:1c:
                    b1:c7:61:17:e2:04:82:54:a6:71:4e:ce:e3:85:01:
                    64:e1:d3:cc:61:4f:bd:06:78:be:d4:73:47:a6:9d:
                    4a:8b:ad:d6:19:56:20:d8:a5:58:f6:e4:72:26:06:
                    ea:c8:59:b9:ff:19:bf:b9:47:2d:1b:35:2a:fd:4f:
                    73:91:9c:9f:e1:e8:f7:a5:7b:7a:a4:af:73:19:0a:
                    da:2a:05:94:ab:96:71:06:fb:40:31:4d:3b:17:a9:
                    9a:69:89:e0:42:6b:2f:0c:fd:66:93:49:6e:fd:e8:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:CA:41:8D:33:E5:40:CE:2F:BC:FC:BC:A6:BC:3B:0E:E3:A3:B0
            X509v3 Authority Key Identifier:
                keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:41:5a:03:22:f8:42:ba:9a:34:90:6b:59:c6:9e:e2:a7:
         b3:0e:cc:82:74:76:3e:b6:d1:84:4d:65:a4:8d:fc:a5:e7:3f:
         b3:9e:84:05:14:28:78:48:71:e2:ff:92:ab:8d:75:81:e8:97:
         a7:74:4f:d3:0a:85:db:39:d6:a2:bf:38:f6:7d:67:0a:33:5d:
         0d:c8:e8:ae:34:ca:64:6f:85:7f:c2:2d:46:71:b2:ca:62:fc:
         b8:fb:41:d0:7f:f6:2c:91:ad:09:6c:7f:b8:59:84:ee:2f:50:
         ab:93:1f:8d:64:89:27:3b:b6:77:48:ac:85:5b:39:2b:7d:94:
         ad:25:ce:3d:6f:70:7c:e3:b7:58:30:a8:e2:1f:05:34:17:fb:
         dd:a1:d8:51:bf:17:50:67:f4:c1:3c:10:9e:5b:26:52:06:ac:
         70:8c:1d:ec:5b:60:14:0e:de:cb:39:ac:15:e9:fd:67:17:f2:
         40:05:b9:16:90:7e:ea:7a:20:d3:a6:52:32:aa:48:0c:76:65:
         e8:5c:82:df:b0:e9:52:54:22:26:f7:c9:dd:0a:cd:5e:82:fb:
         3b:58:36:ad:aa:c0:8b:18:da:d5:07:66:9c:14:f7:00:27:f4:
         ba:63:cf:84:1b:1c:9b:f6:ba:98:7f:65:ea:15:ec:18:17:5e:
         fe:37:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----