Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File:                     LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier:          RGOyMdVdzhpD+QcKSI/42CXOkU79vfmZ6bgGdcQY1KU=
Subject key identifier:   67:C3:0B:9E:57:CA:1F:E1:36:A2:AF:76:E6:D6:84:E6:03:FF:81:4E
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer:       /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial:       01962ECFDE1044E2117453AB019204120D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number:          0261
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: uWOqE+kaUN8Hn4Ag/tIOon3hEje4oo5lZdwsrVmAZWc=)
                          2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:10:44:e2:11:74:53:ab:01:92:04:12:0d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=67c30b9e57ca1fe136a2af76e6d684e603ff814e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9d:da:0b:29:18:b4:d1:b4:77:d8:c5:4b:89:
                    ae:88:dd:ee:a8:a8:fc:29:94:c3:46:fc:07:f2:41:
                    15:a4:c7:1e:fe:7d:ca:59:62:64:ce:b3:b0:b3:53:
                    dc:94:a8:c2:cb:7f:c4:f3:2a:31:40:6a:26:2b:92:
                    44:b8:0c:39:0c:1a:04:2b:32:3a:2e:c1:1e:f0:a4:
                    a3:48:5d:07:f3:41:56:34:e5:13:d8:0f:6f:71:74:
                    67:72:12:e3:78:1f:ac:0d:ec:d3:43:8b:05:1e:fc:
                    05:15:10:ab:72:38:e0:1b:ef:0e:e2:07:91:74:0e:
                    06:1c:5f:84:d3:9f:46:ff:5e:ea:e2:2a:40:7b:7e:
                    14:a8:f6:cf:28:e5:b1:9c:a0:c7:b8:4b:21:32:a5:
                    54:3e:ca:11:ac:98:a7:f3:e6:a4:98:f5:c1:94:de:
                    85:61:47:64:37:75:cb:6d:7d:23:b2:d6:ae:63:5f:
                    6e:77:81:9a:cc:e2:e3:e2:81:ad:0c:dd:3b:8d:c5:
                    2d:70:a8:b2:98:5b:15:9a:ee:9c:0c:05:04:4f:cd:
                    5c:c6:31:d8:ba:46:94:8c:d8:73:1e:c8:2a:00:c0:
                    64:4a:34:10:86:bd:f1:4a:b0:cc:23:95:a7:f6:dc:
                    8f:4a:78:e9:0e:0f:2c:97:b7:44:f0:73:1f:c5:bc:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:0B:9E:57:CA:1F:E1:36:A2:AF:76:E6:D6:84:E6:03:FF:81:4E
            X509v3 Authority Key Identifier:
                keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:cb:87:09:c2:4a:31:d5:ea:92:c4:3e:e8:cc:5a:c6:fd:
         db:23:d2:83:17:4a:9a:05:92:7d:22:6f:48:30:58:19:51:3b:
         73:62:a4:2f:42:da:02:a5:2f:f8:e2:4b:8c:56:e5:ab:04:96:
         d4:d7:3e:52:c8:e1:cf:c5:dc:b0:36:05:1c:f4:67:6d:d1:e3:
         aa:94:53:7c:df:be:6c:91:6e:08:f6:e3:a8:e5:81:07:bc:09:
         27:c6:00:62:b0:1d:29:ba:02:7f:22:2a:f4:6d:c3:e0:97:2c:
         40:d7:e4:b1:67:53:fa:81:34:0a:82:00:1b:cc:82:f3:b3:38:
         a2:61:57:13:72:b4:25:3e:d5:13:19:9a:b3:35:2c:19:32:f3:
         3c:96:39:70:2c:2f:e5:49:79:be:0e:45:3a:03:02:64:3d:81:
         13:e5:2c:92:6f:56:22:23:f1:cf:fa:a6:97:ea:61:65:4f:6c:
         d4:2b:d4:fc:9c:4d:00:50:e5:2b:67:68:4e:be:50:57:31:6a:
         15:99:6c:fe:73:eb:fa:b9:24:2d:eb:b8:d8:6f:ea:b3:5c:1b:
         e9:ef:52:b3:51:96:b6:84:97:de:9f:03:66:ed:38:76:60:24:
         ab:75:d3:90:c0:4a:07:2f:69:b7:8a:0d:b4:0f:c0:0a:fe:7e:
         98:4f:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----