Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          Pb6Q249YqY+nz01QAUBfilA7+xWk0awNYqi1VeYee7o=
Subject key identifier:   A1:63:41:C3:64:FA:8D:F0:10:B9:80:D8:F6:1A:B7:D0:6D:72:17:37
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       01962F7484FC79CC892D548687A33927D90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
                          2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
                          3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
                          4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
                          5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
                          6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: 3/6iQtSFHMMgDgSld3FLwdSknn80jG5KFQMbvR2XXBg=)
                          7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:84:fc:79:cc:89:2d:54:86:87:a3:39:27:d9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=a16341c364fa8df010b980d8f61ab7d06d721737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:4d:bb:39:f2:26:ec:4c:71:e0:ad:89:14:
                    e5:85:2a:60:be:a9:be:3b:1f:4c:fe:59:f3:40:f4:
                    83:76:ce:bd:77:f9:d8:db:af:c6:3c:89:d3:09:f0:
                    3e:25:95:58:88:62:45:7a:1a:52:0f:23:51:1c:38:
                    a9:fc:43:b4:9d:9e:d6:d3:ce:46:69:88:d4:21:37:
                    d8:a2:cd:8a:65:0f:37:a7:f1:a5:40:f3:8f:b0:d1:
                    b8:58:23:14:2f:c2:f8:46:71:a7:df:c5:2d:d3:e1:
                    72:a7:36:ea:fc:41:3c:a6:7e:04:e4:61:17:ec:57:
                    cc:2b:22:78:7a:76:18:d8:8a:9a:5b:a6:d4:61:6f:
                    61:ee:6c:ea:14:d0:2d:17:35:37:46:38:d0:ed:94:
                    e1:d3:24:26:4a:5b:3f:1f:1a:28:e6:c1:be:bb:84:
                    35:02:3d:47:d0:48:bd:c8:e7:ec:59:39:09:00:52:
                    cc:1f:02:b8:e8:42:fb:eb:ed:c4:af:26:17:a3:56:
                    38:e9:5e:6d:26:34:76:fd:47:78:92:f9:93:e3:70:
                    7a:5c:c3:9c:e1:7f:a9:7b:1d:d1:62:95:03:56:41:
                    91:63:67:a9:c3:b2:b2:f6:87:86:fe:d2:8b:7a:df:
                    40:fb:89:6c:b6:60:ca:a1:b8:70:4b:b6:ca:12:91:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:63:41:C3:64:FA:8D:F0:10:B9:80:D8:F6:1A:B7:D0:6D:72:17:37
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:38:33:9e:f2:d6:0d:f9:72:ff:0e:09:ca:96:3f:51:a4:69:
         6a:1d:dc:81:97:74:e3:34:8c:26:c9:2d:e9:cb:8f:0b:7e:b5:
         a9:28:f0:f0:89:52:83:a9:5b:9b:02:a5:c2:b7:5d:6e:be:e0:
         a6:89:21:53:1e:d2:19:28:86:8e:17:68:33:95:a5:d4:30:00:
         bd:be:46:eb:00:f4:78:46:c3:e7:98:fd:b9:42:70:f1:90:ac:
         dc:22:e4:a1:5b:8e:13:cb:cf:35:94:07:c6:3a:27:97:58:40:
         05:24:6c:e5:83:d8:26:1c:b4:11:d8:70:8e:5f:ed:2a:6b:f8:
         65:8e:13:79:92:50:b3:21:58:18:c4:c7:87:7a:88:c8:b7:89:
         5c:bd:2e:6b:4c:46:a5:4c:b8:e8:ec:60:0a:f6:db:df:97:32:
         97:21:83:f0:d6:46:92:8e:2d:ec:51:54:75:0e:d3:07:1b:9e:
         08:d5:cb:e8:f4:47:b1:7b:62:09:8a:04:27:1d:02:db:8a:4c:
         4a:a7:f2:18:45:e8:9c:15:3c:5f:02:83:e6:89:ff:2b:fd:1d:
         cb:e6:a1:aa:46:d4:fa:72:a7:3f:5b:9a:b0:12:b0:c4:52:6a:
         17:9f:1d:91:ae:d2:18:de:bd:6c:18:30:2c:8a:17:40:8b:08:
         79:fe:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----