Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File:                     LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier:          Ne1fktE45+5uyreHFp5leFHBb1nt8Zqy32HTb7tf3dM=
Subject key identifier:   D0:FF:7E:1D:35:B1:1C:42:78:8D:C0:8B:2F:DB:7E:1F:1B:48:2D:30
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer:       /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial:       01962E2AD0D9011D9A1609812D93017DB527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number:          0D73
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 85Je+U/+489QdU1ioy9aIbo7PxTg16fmM22fQ+6RjrI=)
                          2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:d9:01:1d:9a:16:09:81:2d:93:01:7d:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=d0ff7e1d35b11c42788dc08b2fdb7e1f1b482d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:35:86:df:4a:c7:ac:ac:cb:29:6f:b9:c6:
                    c9:b2:bf:88:44:01:cd:b0:8e:db:8d:02:6b:fd:f6:
                    98:b0:0c:5a:9c:3e:29:21:d1:95:fe:7f:fe:af:86:
                    af:d0:35:9e:69:6d:86:fd:55:8a:e3:67:8e:76:50:
                    be:8d:c8:38:5d:78:dc:43:76:a4:c9:db:05:3f:f7:
                    e2:a4:f5:9d:48:20:41:5f:65:63:71:20:9d:29:b3:
                    6c:e3:51:5b:35:b4:34:f2:1b:8b:cc:b4:56:f7:8e:
                    10:fe:c3:11:17:9b:c5:2c:81:d2:69:40:c8:76:17:
                    fd:3e:8e:20:69:f8:9b:a0:b8:c2:d1:67:98:d0:0c:
                    ab:f1:89:b2:3a:11:5b:f7:bf:b9:10:9b:13:06:54:
                    80:db:08:6b:48:0f:0f:1c:a2:57:43:a6:58:f2:a5:
                    9a:a9:7d:e4:0d:2d:73:e0:b5:58:91:75:a9:c8:23:
                    78:26:4b:fb:5c:78:a1:e1:37:a2:7a:68:d2:30:1b:
                    98:c7:30:76:8e:02:22:9a:61:31:1e:6b:8c:e1:39:
                    0d:e2:06:19:76:48:cb:98:df:aa:76:b0:91:f3:cb:
                    9f:6b:b8:4e:54:0c:f7:ee:2c:5e:07:3d:d4:9c:71:
                    cf:3a:f5:1d:f6:f2:a4:98:14:c9:9b:20:8f:f1:08:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:7E:1D:35:B1:1C:42:78:8D:C0:8B:2F:DB:7E:1F:1B:48:2D:30
            X509v3 Authority Key Identifier:
                keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:ac:cd:57:7d:26:81:0b:1d:dd:2f:31:2d:e4:fb:a4:0d:
         62:df:bb:f5:5b:79:4f:17:9e:48:d9:2a:25:4d:b5:57:64:ae:
         52:c0:5c:2a:3f:62:75:2c:de:db:d9:0c:4c:c6:e2:78:cd:af:
         f4:46:69:f2:79:56:3f:c6:55:6e:1f:ac:af:82:2d:0a:d6:7d:
         a3:2f:01:e2:9a:d0:67:37:61:cc:78:3b:83:cb:e6:bc:f2:49:
         8c:72:f4:1e:25:0c:9c:54:a9:b4:02:d1:7d:70:cc:24:07:71:
         79:25:06:65:04:6a:35:b5:42:84:22:97:76:62:8a:8c:46:27:
         5b:0f:c7:14:47:2f:c4:ea:96:12:d0:23:66:d0:1f:00:0c:75:
         81:f8:de:1f:f4:64:da:be:ec:a7:9f:6d:7c:56:85:bd:7a:43:
         75:b4:7b:d5:12:ff:b2:3f:15:6e:d1:3f:52:b1:6e:15:25:4a:
         a1:34:f2:b9:a6:f9:c7:83:9b:67:3f:f3:7e:66:b8:09:d5:e1:
         70:a5:7d:9f:92:7a:d4:14:d9:a6:8c:96:e3:79:2c:de:96:e7:
         c8:38:97:ee:fa:b6:ee:d9:62:3f:a9:79:51:f5:f3:c1:29:a5:
         12:41:1a:30:30:22:08:f9:95:24:37:03:18:10:00:21:5b:17:
         dc:2e:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----