Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File:                     ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier:          PFk5zClwS02LluBOs8sZOvWcI43eSUB/FVTpJPI1iZo=
Subject key identifier:   A0:30:77:D8:FC:9B:DB:1B:5A:34:1F:71:05:47:A8:27:7A:D5:74:19
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer:       /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial:       01962E98F2146DCD6CEBCA943C8730479CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number:          12AA
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
                          2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: fujBH8kbUWElOLt1iHoVtNj10EAdg2aqIvfNmSCzi4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:14:6d:cd:6c:eb:ca:94:3c:87:30:47:9c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=a03077d8fc9bdb1b5a341f710547a8277ad57419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:64:9e:46:c2:b5:f7:69:0c:70:88:36:8b:
                    d4:32:d3:44:19:a9:6c:28:92:2b:1c:3e:43:c2:93:
                    b3:20:0b:c5:2d:e1:6b:63:b8:33:4c:96:d9:f3:3d:
                    a3:c0:e1:32:d8:5b:6e:e4:b1:a0:bc:57:e3:50:c3:
                    84:69:4f:be:9f:d4:38:18:75:d5:02:68:49:f2:2c:
                    32:52:3a:56:8b:22:4e:43:70:bb:72:af:aa:79:b3:
                    67:b1:ba:5b:a0:99:d0:d0:47:d5:61:c0:f8:12:33:
                    c3:52:ae:95:7c:1d:55:18:9a:2e:24:d3:4c:d1:02:
                    fd:ea:c6:42:0d:f6:9a:dc:6e:cc:3c:30:a0:72:35:
                    70:aa:7e:10:73:b1:9d:82:5b:bc:20:d4:c0:c7:ca:
                    af:0a:26:f7:ef:a2:07:2f:6d:2e:d5:16:4f:77:6f:
                    3e:f2:1f:c8:58:6c:aa:ff:48:90:ad:9d:1f:ea:a6:
                    70:8e:f9:72:00:9b:bb:af:3d:74:cc:ff:d3:dc:73:
                    19:c9:c8:93:92:ab:88:9a:13:33:9e:da:a2:a3:94:
                    15:8a:4c:71:9a:fd:b3:41:68:c9:6b:23:6c:90:01:
                    67:ae:e6:13:a7:10:77:a3:df:bb:51:09:89:90:10:
                    38:f2:b5:5e:37:18:87:0f:c4:bc:ed:af:79:73:10:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:77:D8:FC:9B:DB:1B:5A:34:1F:71:05:47:A8:27:7A:D5:74:19
            X509v3 Authority Key Identifier:
                keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:92:8a:16:85:b8:49:c2:4b:27:37:0c:5b:98:0f:99:99:c3:
         44:37:05:14:89:0d:bf:86:90:a2:28:05:22:0f:80:0a:17:7d:
         44:4d:40:fc:b2:ec:c6:ed:71:0d:f2:2f:32:07:99:b6:12:6d:
         b2:ef:df:05:69:3f:2f:d1:d8:f2:3a:80:91:e0:8f:aa:f9:bf:
         b1:59:36:cc:6c:f6:4b:de:1b:e1:31:e6:e4:2f:a2:51:bd:05:
         46:c3:28:bb:5d:00:3f:a7:53:93:3e:d5:6b:4f:67:c2:30:6b:
         f0:10:d0:ce:a6:45:a1:71:d5:93:28:d8:70:92:62:bb:33:9e:
         70:dd:34:28:47:b3:5d:9a:a7:e4:a9:15:df:89:db:fb:5c:97:
         43:ba:a7:cd:5f:9d:01:b9:c4:44:ca:7b:2e:5a:0e:7d:c5:b8:
         da:59:7e:85:14:31:74:0a:f8:19:1e:f0:29:bb:b4:6d:50:72:
         7e:29:da:84:9e:58:eb:3a:bd:ce:3c:dd:61:cc:e4:3b:84:da:
         e5:26:f7:3e:e5:b1:93:a2:54:b4:ab:0d:3c:17:c3:3a:d6:70:
         f1:b9:5a:b5:5f:f2:2e:07:9a:a0:61:3b:66:f3:59:23:2c:42:
         d2:85:46:db:03:12:0e:6d:98:80:9b:54:50:fd:a2:f5:a7:5d:
         e3:f4:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----