Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
File:                     lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json)
Hash identifier:          1mBjh5MqL/DASJsy4daTWuaq9NDUljJDMyWhsFMihoI=
Subject key identifier:   EA:61:15:91:28:F3:07:21:66:1C:C4:CB:13:68:A0:A9:C9:D2:0D:22
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Certificate issuer:       /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial:       01962FAB5C5AC9AB9B79F91D676A57A9C36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
Manifest number:          1194
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: _zRJudFm9-SwIj8WqpSjxqhsHho.roa (hash: yl1VlGdcj3D0SfYe9bEEDXwIlAfQxRhpjuP7t/iSfW0=)
                          2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: fC40RZbP6TtZMw1O7oz+/lIF1izdjruANx7Zl0QTlcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5c:5a:c9:ab:9b:79:f9:1d:67:6a:57:a9:c3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=ea61159128f30721661cc4cb1368a0a9c9d20d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:c8:99:11:9e:62:8c:ce:1f:02:5c:c3:ef:
                    fc:d8:f9:ad:b0:59:5c:29:2f:fa:2b:50:7c:48:81:
                    3b:b4:af:f9:d1:a3:ad:29:a8:d0:fd:63:a1:a8:a3:
                    2b:d3:7e:30:65:17:23:d3:57:62:61:f0:30:a8:07:
                    46:6b:82:ee:5a:16:5b:09:a4:d1:7b:ef:b6:84:a6:
                    28:df:15:89:e7:ed:fc:0b:68:db:ff:51:63:9b:82:
                    4e:33:bf:22:5e:ed:8b:de:12:da:93:8a:74:1a:b5:
                    c2:8e:3e:6f:34:c9:b5:78:e7:a3:88:1f:a2:50:c6:
                    52:8d:90:95:28:b7:46:ca:10:7e:10:76:e8:4b:7f:
                    5a:f4:dc:30:6f:63:6a:f5:ca:bc:1c:11:7c:b7:12:
                    92:70:2f:1c:42:13:ef:d8:e4:13:61:5d:e7:a1:fa:
                    58:af:db:b7:6c:18:5f:c7:1f:8c:59:5e:ac:5f:c1:
                    94:27:2c:60:9a:d1:f2:6a:0b:50:94:92:a2:68:56:
                    64:93:33:0c:a4:0c:21:11:73:c1:70:cd:05:98:c6:
                    90:23:d4:3f:22:35:11:af:5f:f2:5d:82:d7:fb:88:
                    8f:32:7d:c5:86:d0:4a:16:de:75:b2:da:92:97:ca:
                    3a:bb:57:da:6a:84:38:d8:65:44:16:1e:ea:e6:81:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:15:91:28:F3:07:21:66:1C:C4:CB:13:68:A0:A9:C9:D2:0D:22
            X509v3 Authority Key Identifier:
                keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9d:6a:0c:00:ca:28:92:c3:50:db:36:e1:29:04:85:19:45:
         b5:99:dc:50:66:cd:e6:87:56:6c:fa:fd:57:30:a3:41:c0:47:
         d1:c5:74:0f:cc:09:2f:8c:2e:48:13:9e:5c:56:2d:12:96:6e:
         a5:66:ec:c2:f0:e9:52:63:79:06:1c:83:ce:18:5e:a5:70:62:
         26:31:2a:bb:e5:50:16:1d:75:45:bc:4d:e1:dd:99:c7:e0:38:
         df:0f:a6:41:60:d4:63:9a:4c:29:70:78:9f:cb:2d:be:8d:22:
         2c:3b:cc:59:dd:bc:02:16:3c:2d:6f:2b:2e:5f:4d:ff:b1:52:
         c0:ee:cb:a1:d6:6d:7c:00:19:c7:d6:f8:0d:1e:03:c0:c5:11:
         30:04:8d:6d:a6:8b:f1:35:cb:79:cc:36:f5:81:a3:d0:9f:be:
         be:56:6b:1f:23:d8:9a:45:e6:1b:57:c1:dd:78:9e:71:25:9d:
         c7:df:82:8d:de:40:37:2f:e5:b4:48:ad:6a:79:9c:ae:8d:41:
         11:e3:fb:10:04:97:3a:94:d9:cb:94:af:8c:b7:69:1b:05:74:
         7d:9d:7d:9d:ee:76:f4:3f:99:02:c4:c2:fd:ac:c5:6b:ae:78:
         2b:15:d7:74:de:ea:a2:6f:c8:21:e0:94:12:7f:06:a8:49:9a:
         f2:c8:e2:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1xayaubefkdZ2pXqcNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTMyNjU2MmFmNzBlNzlmM2Q1MTI0ODhlMjkwZTkyNDMy
ZDVhMDEwHhcNMjUwNDEzMTUwMTIxWhcNMjUwNDE0MTUwMTIxWjAzMTEwLwYDVQQD
EyhlYTYxMTU5MTI4ZjMwNzIxNjYxY2M0Y2IxMzY4YTBhOWM5ZDIwZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfrImRGeYozOHwJcw+/82PmtsFlc
KS/6K1B8SIE7tK/50aOtKajQ/WOhqKMr034wZRcj01diYfAwqAdGa4LuWhZbCaTR
e++2hKYo3xWJ5+38C2jb/1Fjm4JOM78iXu2L3hLak4p0GrXCjj5vNMm1eOejiB+i
UMZSjZCVKLdGyhB+EHboS39a9Nwwb2Nq9cq8HBF8txKScC8cQhPv2OQTYV3nofpY
r9u3bBhfxx+MWV6sX8GUJyxgmtHyagtQlJKiaFZkkzMMpAwhEXPBcM0FmMaQI9Q/
IjURr1/yXYLX+4iPMn3FhtBKFt51stqSl8o6u1faaoQ42GVEFh7q5oEqKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOphFZEo8wchZhzEyxNooKnJ0g0iMB8GA1UdIwQY
MBaAFJaTJlYq9w5589USSI4pDpJDLVoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMt
OTQ5YjkxZTlmNDhkLzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMtOTQ5YjkxZTlmNDhk
LzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ1qDADK
KJLDUNs24SkEhRlFtZncUGbN5odWbPr9VzCjQcBH0cV0D8wJL4wuSBOeXFYtEpZu
pWbswvDpUmN5BhyDzhhepXBiJjEqu+VQFh11RbxN4d2Zx+A43w+mQWDUY5pMKXB4
n8stvo0iLDvMWd28AhY8LW8rLl9N/7FSwO7LodZtfAAZx9b4DR4DwMURMASNbaaL
8TXLecw29YGj0J++vlZrHyPYmkXmG1fB3XiecSWdx9+Cjd5ANy/ltEitanmcro1B
EeP7EASXOpTZy5SvjLdpGwV0fZ19ne529D+ZAsTC/azFa654KxXXdN7qom/IIeCU
En8GqEma8sjimQ==
-----END CERTIFICATE-----