Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File:                     lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier:          Ih38ip9+mGfXloRLRuqRJZNRI7mXPgAj6HW6FLbCrr8=
Subject key identifier:   71:AB:47:63:72:DE:9B:6E:73:17:89:5E:D1:10:E5:DB:1C:03:C0:84
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer:       /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial:       01962F070CB92AA11F66C099A38EAF45657D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: 6+UGiKO/PXmNow65uPjeVQ0XLRkXrNAKPJs6EzPzbU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0c:b9:2a:a1:1f:66:c0:99:a3:8e:af:45:65:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=71ab476372de9b6e7317895ed110e5db1c03c084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:85:63:b3:74:d6:0a:7d:51:98:7d:72:74:
                    c2:ee:71:dd:aa:d1:9b:4d:b6:d0:71:9c:7c:84:df:
                    43:ac:4a:fc:61:e6:bb:d1:58:a6:fe:57:34:6b:0d:
                    7f:22:e8:7e:38:2c:2b:5c:dc:f8:3f:fb:89:e3:0a:
                    19:77:dc:8e:59:6c:f5:96:d7:a0:52:78:ca:b7:38:
                    0f:2d:f6:48:2c:e3:f9:cf:bc:a6:eb:8a:3a:ab:1a:
                    b0:6f:36:b4:6e:8e:02:a8:6e:58:04:00:a9:8c:28:
                    2e:e1:6e:ee:8e:55:87:b0:d1:a7:ef:f6:65:e0:1c:
                    4d:46:43:65:23:89:06:63:d8:8e:5b:d5:39:e8:09:
                    1d:4b:aa:d3:85:53:13:63:62:36:50:a3:07:06:e2:
                    02:2b:34:f0:84:a3:42:35:ba:a9:5d:8f:f7:79:97:
                    df:aa:44:61:c5:1d:ed:b3:78:a4:96:01:53:9f:b1:
                    ae:3d:69:65:ce:70:49:8f:18:54:58:21:3d:5b:08:
                    a5:ea:3f:aa:f0:c0:9e:30:60:a4:d8:e8:65:0e:44:
                    d5:27:b5:b9:d4:09:af:41:c0:98:85:8a:fd:fb:3f:
                    c2:ae:13:bc:a2:4e:06:4f:67:4f:2a:9e:38:d7:b7:
                    16:95:d9:5c:e4:db:8a:e7:b9:15:37:76:4f:75:b7:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:47:63:72:DE:9B:6E:73:17:89:5E:D1:10:E5:DB:1C:03:C0:84
            X509v3 Authority Key Identifier:
                keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:48:74:97:dc:01:20:d4:92:46:55:a3:63:e9:04:d9:6e:fe:
         99:62:23:e6:24:97:0b:80:c6:86:98:8e:fd:34:93:c1:56:76:
         2a:54:b3:9a:a8:b4:78:d0:44:fd:b7:a4:98:9f:0a:ee:55:48:
         e6:3b:22:91:46:fa:d8:50:a8:c9:74:60:fe:b4:4a:15:5c:20:
         2f:02:7d:9e:c2:f4:4b:91:54:42:5d:ca:bd:93:25:c7:8f:a4:
         d9:bb:52:90:26:f7:33:99:bb:78:8b:64:b2:11:7e:e2:14:2e:
         21:07:22:d9:1c:5d:44:09:9e:74:fe:24:33:8d:8c:b6:98:e5:
         88:a1:d5:0c:77:2a:37:e0:4e:30:08:e4:f8:76:5e:3c:84:ec:
         aa:2f:3c:ca:90:a5:5a:0f:a4:bc:67:b2:1b:20:3b:35:b0:53:
         ea:36:db:5d:b9:da:32:b2:8b:28:1e:aa:2d:69:25:26:57:0b:
         13:f4:c8:7d:d1:f6:48:29:04:b9:c8:bf:c4:78:d8:d6:64:9d:
         de:78:a2:1e:8c:f9:95:49:ba:96:42:7c:b3:04:a1:0b:fd:93:
         3d:f6:a4:e5:55:e1:58:63:38:d9:63:61:17:9e:bd:5b:c8:a1:
         35:84:ff:87:5c:cb:59:44:03:e0:a1:9a:95:d3:ec:81:fc:26:
         0c:14:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----