Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          MOgNeAvQtDZqOicOTW7Th1mrTWLG5MCRo7Z85BLA+/g=
Subject key identifier:   C0:90:C3:5A:D7:9A:98:9B:BF:95:A6:8A:B9:75:6E:FD:9C:7B:96:22
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       01962FAB73C5922458BAEDDB9CE1F632CC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa (hash: Ez8uNLSpiX9S8lz0pVk5NS7jK9ai+KC6g5pGfPW50c4=)
                          2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: +8/8+iKvCyrWFUHXbNqNTLh4AxyFnTUZXPeRRwNHA7k=)
                          3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
                          4: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
                          5: uWccS943-NPeBV4pk-C9zstqwA8.roa (hash: 490wH2czNsjIO+r82D6BUKq4nX5xx/FCB3oUPV7/DME=)
                          6: yGvOgFMZISJsfSPqCjNlOqtAHMM.roa (hash: Y4gEqzV+We8lCW3rGQRh7ia7nliYhdhTWgBtjF9WRdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:c5:92:24:58:ba:ed:db:9c:e1:f6:32:cc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=c090c35ad79a989bbf95a68ab9756efd9c7b9622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:1b:11:ca:78:8c:60:61:0a:bb:35:ad:bb:
                    b0:02:a3:b5:c9:5c:61:59:8f:35:9a:14:1c:26:b6:
                    80:8d:45:01:35:0f:42:b0:ca:b7:b1:06:bd:48:81:
                    72:6d:fa:40:3b:f3:8c:7c:4d:d1:77:a8:a7:7f:8e:
                    6e:7f:34:3a:53:73:58:67:5b:a5:54:67:6e:54:a8:
                    c5:e7:cd:c9:0a:c5:10:4f:15:39:70:91:7b:ed:ec:
                    f8:20:cc:cf:d8:74:24:f7:0e:c9:44:fa:d4:24:38:
                    44:c3:ee:9f:91:ea:04:0f:8d:dd:b2:ef:b4:3e:82:
                    e8:6f:84:64:6a:d0:38:d8:7f:74:28:49:5b:e1:3d:
                    b7:cf:5b:ca:05:21:b9:07:42:90:1c:10:eb:e6:0e:
                    4b:42:d5:c3:0b:eb:2f:35:fe:47:0a:d3:ac:64:f9:
                    98:35:47:0b:11:9f:ed:23:b7:bf:4d:22:8c:6b:17:
                    da:9f:7a:4d:4c:52:13:29:eb:0f:14:d0:bf:bf:f6:
                    c2:a6:0c:ec:2a:73:8c:60:5d:02:75:43:02:fb:8f:
                    35:57:b9:b5:42:f1:e4:23:52:16:23:6c:32:70:11:
                    9f:5d:dd:70:d1:33:c3:5a:08:ec:f6:7b:bd:59:4d:
                    50:6b:bc:db:f2:c9:be:8b:26:e9:7c:b8:46:1d:c2:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:90:C3:5A:D7:9A:98:9B:BF:95:A6:8A:B9:75:6E:FD:9C:7B:96:22
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:24:ce:9e:4f:7c:1f:16:65:e5:57:77:3b:90:51:fc:c8:eb:
         ab:c4:65:84:02:d4:26:15:41:f7:33:e2:46:cd:9e:cc:d0:f2:
         78:fe:89:66:e7:14:2d:e7:67:a1:0d:8e:47:d6:0a:a4:fa:c1:
         12:95:e6:c2:6c:9d:3f:5b:77:43:cc:b4:09:0f:e4:39:5c:db:
         19:02:bf:f5:57:0a:f5:21:f6:d6:43:b6:81:fb:4a:60:5a:06:
         9e:72:b8:d0:ee:d2:8b:bb:39:da:7a:bc:c7:a3:ea:f4:35:f1:
         8f:bf:bf:71:9e:e6:9c:30:67:26:97:74:d6:fb:19:c5:ec:3d:
         30:18:ff:97:e9:3f:01:73:f7:2c:a2:ab:c7:aa:1e:4c:64:4c:
         48:9e:d5:12:0d:dc:7c:5b:2b:88:e5:bd:50:27:9c:c8:bb:85:
         b0:7c:2e:91:19:49:a3:6b:24:ec:b8:b4:26:b3:93:82:f4:cf:
         89:9a:61:8c:00:a8:76:f9:6d:8a:b5:20:e9:f4:38:a0:41:f2:
         51:e3:77:59:2f:32:ff:a2:80:97:c1:39:61:7f:63:ca:bf:93:
         d3:0e:73:35:85:e4:46:e8:b2:9f:68:ec:01:d0:7e:9a:82:3a:
         9d:73:0c:c1:94:be:d6:a6:0b:81:db:87:7b:5b:c4:65:5c:a4:
         17:0f:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----