Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          ZCC3357c6RXRPhUtZNjvbJ61TXkLDHksP3T6cIUdVtI=
Subject key identifier:   C9:64:68:CE:58:A9:D1:F3:0B:CD:0E:74:69:8C:ED:FA:51:F9:5B:6E
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       01962E61996069AC380A6846C4A57B7632B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          102B
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: lsl3SbRfIXZ0914AD5rN8uZccU27eXfxEcGjSKpNTKw=)
                          2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:60:69:ac:38:0a:68:46:c4:a5:7b:76:32:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=c96468ce58a9d1f30bcd0e74698cedfa51f95b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:a8:60:56:33:3c:4d:75:d5:7d:87:c2:13:
                    22:1a:7f:42:9f:99:de:16:d4:cc:c1:2f:64:81:a6:
                    c4:4c:e5:2c:7f:ef:b7:eb:da:bf:d0:8d:35:29:9d:
                    1b:78:3f:9e:7b:ba:7a:d9:96:15:ee:26:2d:09:7b:
                    55:99:0d:21:af:15:75:6d:c3:3b:4e:95:d4:55:d4:
                    49:17:3d:56:d4:58:f6:5c:6d:22:87:fb:6e:65:df:
                    42:af:d7:fc:48:69:65:fa:ff:4e:43:e5:60:ca:72:
                    3e:de:04:b6:be:60:3e:ec:92:bc:0b:3e:64:fd:e8:
                    8e:7c:43:66:22:5e:9b:ef:af:af:00:60:4d:0e:ac:
                    53:ce:53:0f:7c:66:d1:36:e5:a8:e4:43:5e:cc:fe:
                    0b:42:08:64:7c:4c:ec:c1:4e:9f:0f:42:08:da:ed:
                    25:7a:de:d7:3b:e4:4f:d4:09:06:c4:01:cb:7a:2c:
                    e7:6d:2c:33:96:bf:bd:26:8d:6c:35:33:46:85:79:
                    ba:dc:f4:73:60:01:ef:ab:dd:24:a0:22:ce:0e:21:
                    be:01:fc:ac:07:37:d2:3c:9b:40:6a:7e:a7:6a:1b:
                    b9:d0:49:67:8c:0d:02:e2:a1:32:94:43:c6:61:24:
                    7a:b0:80:e5:96:30:ff:3b:b1:98:08:c2:cf:ee:12:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:68:CE:58:A9:D1:F3:0B:CD:0E:74:69:8C:ED:FA:51:F9:5B:6E
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:9f:db:d3:80:12:d6:68:e9:1d:fb:e6:87:c5:b7:ae:a9:
         0c:4f:4e:12:31:4c:a1:d0:40:fe:79:9c:2e:5f:98:82:27:cd:
         89:bf:1e:78:75:c9:0f:8f:9f:b3:6c:07:5a:30:e5:b9:00:c9:
         17:d8:cf:bd:72:2b:4a:c9:45:45:a1:65:7d:59:8a:44:df:5e:
         2f:d3:7b:5e:3b:b4:18:76:ca:42:a4:79:9f:df:df:67:42:06:
         f9:69:1d:7d:d6:57:6b:a2:3e:d9:fc:0c:f9:23:13:27:f9:b5:
         be:96:46:2a:8c:4c:67:59:c9:45:d7:3e:d1:c8:dc:61:aa:51:
         b3:42:09:f5:12:95:d3:df:19:14:ad:23:57:0e:d0:f0:7b:f3:
         8c:a2:1b:dc:1c:25:cb:5a:7c:0f:9f:6f:cf:26:f6:ca:9c:a1:
         a6:60:d4:12:05:3c:77:cb:7c:1e:c7:01:87:14:c3:cd:14:98:
         90:15:4b:7e:cc:64:99:88:e7:7d:e6:60:a4:12:bb:e3:5b:c3:
         73:28:6c:ad:01:71:87:4f:c8:32:13:04:f8:55:3c:06:04:6e:
         f6:91:46:1d:36:de:b2:2d:c6:7c:40:a6:79:49:5f:55:b1:8b:
         94:9b:05:c3:7f:0d:3b:64:d3:87:fd:ca:e6:29:39:77:77:47:
         9f:c4:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----