Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File:                     lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier:          wPvpjghMDSER15qppvQkHxNTT55hAk6elHU+A34U/U8=
Subject key identifier:   B3:3C:11:87:47:C8:38:62:DF:00:35:C8:5B:F4:2B:2A:5E:4A:E0:DA
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer:       /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial:       01962F3DB19A68E0B756FD29F3A60A7B2346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number:          0596
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: LgsbPWKiSAQjwURsIyfrUSbHjZ2M8Sv7/9AoGK+RjNU=)
                          2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:9a:68:e0:b7:56:fd:29:f3:a6:0a:7b:23:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=b33c118747c83862df0035c85bf42b2a5e4ae0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:b7:32:97:c3:ad:56:9d:76:f2:b3:86:41:
                    cb:08:5a:a9:1f:ac:ef:b5:61:bb:07:d5:ac:8e:c5:
                    d1:60:f0:53:ff:51:b6:1a:9a:e7:de:d5:b3:81:40:
                    73:69:51:c7:f4:19:c1:1c:3c:51:52:1f:16:d8:80:
                    c8:ea:54:e3:80:44:f7:9d:f0:4f:f7:c3:33:e1:55:
                    66:5a:d2:c5:cd:69:71:3f:6c:0f:7a:d6:5a:a3:bf:
                    9a:69:83:85:bb:5e:e6:f6:44:70:f5:b7:1e:1c:90:
                    54:71:c3:61:ec:fc:40:25:6e:f1:26:cb:f4:14:f1:
                    bf:12:c2:96:b8:4d:38:79:b3:79:43:5f:9f:ca:89:
                    ab:de:c5:93:16:bf:72:54:c6:a0:cf:b6:41:1d:1e:
                    8f:d3:1e:39:e6:93:d3:3f:88:c5:df:b7:6b:a6:02:
                    d5:45:43:98:b7:f5:1b:be:fe:ca:f9:97:ce:6b:c9:
                    41:8e:82:b1:f5:a5:38:57:51:bb:36:22:94:fe:3e:
                    4b:30:6e:e0:ba:2d:e6:09:06:82:c1:1a:dd:f9:59:
                    ab:68:bb:3e:1d:bc:7a:0f:d0:89:46:43:9b:71:33:
                    a7:95:8c:81:33:72:cc:30:df:dc:92:f9:8b:01:c9:
                    4e:23:2c:96:b9:7d:65:42:ba:67:d6:01:83:f1:ba:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:11:87:47:C8:38:62:DF:00:35:C8:5B:F4:2B:2A:5E:4A:E0:DA
            X509v3 Authority Key Identifier:
                keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:ec:a7:5e:83:a7:42:25:90:29:60:d8:c8:a8:21:5b:ee:
         33:b9:57:8c:2c:19:77:78:ba:39:ae:cd:7a:f5:ea:1c:c6:f9:
         58:97:92:f2:db:5e:19:9f:95:37:4d:17:6c:8c:8a:e0:98:cb:
         20:18:73:43:d1:3d:ff:90:1f:ac:44:93:4a:5b:cb:b7:a3:9a:
         8c:0a:96:82:35:2d:fa:6d:f7:7d:e0:fe:7f:c8:34:60:4f:41:
         75:c7:3d:7a:dc:d4:cf:38:82:93:fb:e9:3f:48:2b:f4:16:c6:
         bb:0f:63:2d:3c:2d:a1:12:e3:a0:69:ae:16:c0:53:0b:e4:51:
         b8:c8:0e:b8:e9:5e:2c:54:7b:99:aa:b7:62:ea:61:34:3c:2a:
         9c:d4:7e:bd:66:e4:ed:6e:23:0b:5e:de:f9:88:e5:cc:dd:3d:
         3f:0b:eb:eb:da:95:2b:76:5f:e7:1e:81:8a:7d:ff:bf:52:18:
         d9:46:59:76:ee:7d:44:5f:39:ac:a0:f5:e3:36:e4:3f:3f:8c:
         30:eb:65:3e:ca:f0:f9:80:df:6f:24:52:c5:4c:75:7e:74:d0:
         26:f3:76:14:e9:6a:11:40:14:b4:26:09:e1:a4:73:41:dd:cc:
         d8:10:10:36:73:dc:8b:34:dd:20:ae:a7:98:7c:29:5c:71:a4:
         26:00:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----