Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File:                     lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier:          QaX/aFkaQ5zZtX+Tdsc4SDqSCOGbbN8k7oHqVDNP0Tg=
Subject key identifier:   92:11:69:AC:5C:91:8C:C3:42:FA:5B:9D:26:0D:C8:C1:05:FD:42:35
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer:       /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial:       01962F06EC227AB07DE143C1E70CDE3886EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number:          05A7
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=)
                          2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=)
                          3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: NaY8Hp/5GBNSEdxVh6GcdOuRS0pFDigy1xZfyJsm13I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:22:7a:b0:7d:e1:43:c1:e7:0c:de:38:86:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=921169ac5c918cc342fa5b9d260dc8c105fd4235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:8b:4e:70:22:db:d1:da:ca:7d:2d:58:a0:
                    b4:a1:6e:52:2f:3a:b8:90:23:6d:d2:17:98:8f:b9:
                    cc:d1:18:26:fc:7a:c8:5a:d5:98:e1:ae:85:f8:72:
                    6c:a7:da:d1:39:6b:19:1f:eb:01:16:1e:d7:0d:5e:
                    a5:ea:4f:8f:c2:69:84:28:1c:8c:f2:c8:81:78:a7:
                    9f:fb:bc:84:c1:a5:12:c5:b6:6f:9e:e2:1a:be:5c:
                    6e:d8:a7:19:39:11:89:4f:d6:5a:83:ca:bf:9c:a0:
                    08:d6:32:17:5b:d1:47:ac:db:5e:db:f5:7f:29:25:
                    2e:7b:c7:51:6f:09:1c:58:93:68:bc:08:f8:69:96:
                    52:95:68:76:76:a4:e1:be:82:3f:c0:e4:b8:24:e4:
                    80:7f:fa:96:56:a1:09:0a:4b:ab:b5:34:db:d0:2f:
                    dc:57:8a:23:a3:fb:c0:39:cd:25:80:5a:cf:54:35:
                    77:a0:62:18:48:bb:88:9c:7f:63:8f:3a:1b:9d:5c:
                    0b:c3:48:7a:4f:6d:b0:e4:67:8c:8e:e5:18:d2:0d:
                    7e:2a:77:9a:4e:df:73:62:5c:e7:84:d9:ff:f3:c7:
                    fb:70:2d:df:90:ee:e1:e3:cb:8b:f4:08:e9:e7:5c:
                    5b:47:ba:55:88:16:4b:80:0f:85:c2:3b:b8:3d:2f:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:69:AC:5C:91:8C:C3:42:FA:5B:9D:26:0D:C8:C1:05:FD:42:35
            X509v3 Authority Key Identifier:
                keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:af:3f:12:ef:e0:fd:16:7e:7d:f4:18:2e:d5:3d:d4:18:
         15:56:ef:65:2b:c3:2b:8b:4c:99:8c:ed:58:52:7f:ec:6e:5e:
         86:64:7a:a5:74:bd:dd:d8:ae:f5:02:c6:69:a0:d9:8b:87:2c:
         7d:06:ae:63:72:eb:17:0f:0a:45:92:e7:65:86:e4:ca:a7:3b:
         4f:dc:f3:2f:0e:ee:8e:1d:99:d3:bd:67:d8:52:aa:4d:b5:ab:
         e8:53:b0:e1:ec:a1:d8:bd:ce:09:f8:d8:2b:97:da:9e:35:77:
         4c:9f:b1:77:4f:d7:12:0c:41:51:f8:17:21:4b:9e:e3:d8:21:
         97:ff:bf:a7:9f:2f:f2:54:9b:2c:cb:6e:c2:3e:05:3b:dc:75:
         55:ef:71:0f:01:34:e3:74:3b:6f:f6:ea:76:38:62:1d:fd:a8:
         2d:f1:c6:e6:1d:30:dd:2c:b4:c3:42:50:06:7e:a8:05:9c:a7:
         11:d0:67:cb:4e:1a:eb:b6:c4:ec:7b:6a:46:fc:fe:67:e6:8d:
         ca:5c:b5:01:52:8f:98:c2:a1:47:6f:61:28:44:7b:bc:e3:0a:
         32:e9:23:c3:9a:52:a5:f7:28:46:be:d1:7e:70:b8:69:04:07:
         f8:53:1b:24:fd:a4:0c:71:4a:fe:41:97:d2:12:b5:d8:9c:04:
         b4:05:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----