Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          bet17gttY/phGcFgXpqigzT1aP0dSFnqhHp6UMU3kGI=
Subject key identifier:   19:55:7A:F7:63:55:72:35:64:89:95:AC:78:FA:0D:D5:07:D6:0E:B6
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       01962F0640ECD4742C4352FED2B8A9FBC310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=)
                          2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: CVtmX18IhibO3zS1pU69xp4vGdGM7oAtrjRGEu01ibM=)
                          3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=)
                          4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=)
                          5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:ec:d4:74:2c:43:52:fe:d2:b8:a9:fb:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=19557af763557235648995ac78fa0dd507d60eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:1b:3b:c6:db:fd:f9:5e:da:2c:05:be:ef:
                    03:59:24:a8:90:f0:88:3e:2b:e0:62:e1:f2:06:aa:
                    e8:8d:23:22:6a:af:58:15:77:3d:1c:5e:77:2d:36:
                    2f:4e:19:03:72:ba:06:48:a9:d4:a1:5a:db:49:2b:
                    e5:3e:1e:71:92:de:46:47:35:af:cf:e2:14:39:f2:
                    4d:b3:6c:77:3a:2f:9b:e9:b2:70:04:75:a4:ab:2f:
                    ab:62:2c:40:d8:cf:bf:03:92:4f:27:26:5c:b0:e3:
                    35:eb:f5:f3:e6:5f:ea:71:5b:62:99:95:78:c2:ce:
                    02:94:e7:e0:6c:e0:fd:cf:9f:d7:5a:12:6f:02:7d:
                    1a:62:28:a4:08:b8:a3:7e:3d:72:0e:20:f1:0d:8e:
                    4a:63:fb:7c:0b:79:d0:6a:80:06:5b:14:34:78:e5:
                    8d:7b:95:b7:2d:3d:92:35:ab:4a:99:e7:70:cb:b2:
                    8d:9b:cc:1d:0b:e4:94:ce:75:30:75:03:ff:ab:24:
                    72:f3:31:09:ee:f6:81:70:99:cb:5a:e4:86:67:91:
                    2d:37:55:56:11:6f:5b:52:6f:ea:44:8c:48:82:de:
                    5b:ae:92:35:f3:81:5d:b7:62:c0:47:14:0d:eb:cb:
                    0b:90:53:69:7f:88:6c:d2:00:56:cc:7e:3e:9f:d4:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:55:7A:F7:63:55:72:35:64:89:95:AC:78:FA:0D:D5:07:D6:0E:B6
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e3:73:cb:6f:ef:f9:ee:16:77:e8:e6:3f:fa:a6:3f:57:33:
         71:5c:cb:5b:8e:8f:fa:42:10:21:bb:03:cd:60:d1:ed:2c:93:
         2f:06:bc:5b:9b:c1:74:4a:9b:b2:23:8f:f3:ff:05:c5:a9:82:
         64:35:cf:15:e9:53:ca:6b:b1:95:84:88:e5:1e:93:e9:75:b0:
         7a:ca:2c:6c:42:38:62:d7:00:72:2a:a9:f9:0e:ae:c5:e9:c8:
         13:05:81:e3:9b:33:13:06:ba:08:6e:b3:6d:f7:57:85:ba:12:
         b6:5c:fc:30:85:d0:b9:cd:f0:88:a0:f1:f6:7d:e8:0d:1e:a6:
         63:92:e5:f9:24:b0:44:69:7a:8b:85:8e:f3:72:fd:a1:73:2b:
         dc:0d:ac:eb:f1:7b:ab:e4:99:56:49:ea:6b:d6:00:80:01:32:
         a2:69:79:f6:ab:9c:7b:8c:42:fb:32:36:81:3d:98:f6:b7:bb:
         ff:de:d6:a1:99:bf:f9:c7:7d:bf:53:4e:0b:7a:f8:4b:ae:45:
         20:d6:14:2a:43:75:30:16:19:4b:68:9c:86:e7:ee:7d:66:4b:
         fb:73:17:76:71:fa:6d:0b:c6:f1:4f:25:b2:6f:e1:82:06:f1:
         ef:6c:52:ee:ff:f4:db:76:ef:5d:9c:da:43:f8:42:37:b5:47:
         5a:d1:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----