Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File:                     LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier:          R8WENxrNLFh5qdSOe0+70NQJ6k407JKe0+w+TDbAGr0=
Subject key identifier:   EF:50:85:C6:60:AA:02:5F:63:36:8F:E3:C6:C6:2A:85:68:61:01:42
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer:       /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial:       01962E2ABDB263FFC32CE45A9C8123146A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number:          79
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
                          2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: T7dKqzHgwo5g5V6du2iEeeE2HqsoF0p4IE1qk/jdw7A=)
                          3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:b2:63:ff:c3:2c:e4:5a:9c:81:23:14:6a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=ef5085c660aa025f63368fe3c6c62a8568610142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:eb:3d:10:45:84:31:72:fa:08:37:36:1a:
                    09:ef:ae:80:93:62:b6:52:7c:60:2d:52:4f:d6:41:
                    c9:6d:41:66:dc:01:bd:cf:e5:cc:2a:2b:9b:81:d6:
                    ee:8d:14:6e:9a:c2:98:5a:34:d5:ef:c6:d7:ff:cd:
                    82:41:82:73:29:2f:7c:d6:88:26:79:1b:47:c8:2b:
                    69:45:89:e5:35:ac:d5:25:86:22:7f:30:e6:47:9d:
                    6f:ae:97:eb:6f:fa:3f:72:52:6b:1d:ef:42:4d:82:
                    9c:e2:c3:51:8b:04:c5:1b:f8:4d:e7:66:64:02:77:
                    a5:5e:60:4d:34:e7:6e:15:14:90:74:27:29:a2:c0:
                    5e:3e:ef:2b:75:3b:c8:24:47:90:77:fe:49:49:4c:
                    8f:6f:85:41:d5:05:df:7d:4a:81:a0:34:cf:7b:ad:
                    09:52:5d:ac:f9:64:08:6f:c4:f3:97:eb:e9:f9:4f:
                    1e:52:82:65:cf:db:30:d8:76:41:97:aa:dd:2b:b5:
                    e0:03:3c:a0:11:a7:e4:1e:48:3f:f5:27:b7:54:6a:
                    4f:69:71:53:15:0a:48:f1:61:ea:19:01:6c:6d:00:
                    ad:39:21:53:b5:f3:d2:69:8b:dc:56:62:e4:c8:76:
                    bf:ab:26:c7:d8:30:1f:74:f3:a9:15:b0:2d:72:69:
                    13:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:85:C6:60:AA:02:5F:63:36:8F:E3:C6:C6:2A:85:68:61:01:42
            X509v3 Authority Key Identifier:
                keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:22:49:90:13:38:15:a2:2e:b6:02:8a:fe:26:56:a3:73:
         df:ce:a3:5f:c3:2f:70:7c:bc:41:7e:75:5d:22:42:d6:e8:af:
         18:47:a3:05:a2:9a:e1:75:92:c0:04:68:9b:4c:89:dd:8c:cb:
         a3:f3:97:a5:fd:c1:80:b8:48:1c:de:cd:18:c1:96:be:d2:ae:
         d6:dd:01:27:46:eb:e4:1f:d9:cc:fd:54:4f:82:5f:34:bc:40:
         70:69:83:18:9f:99:75:97:35:fa:f8:e2:36:53:b7:e1:a4:18:
         7c:f1:c9:8c:65:b3:58:f8:aa:ae:f1:73:75:46:ee:ea:43:31:
         bb:f6:e6:78:66:9d:1d:a5:61:b6:78:b7:cc:c5:ee:81:6b:15:
         40:55:24:87:f7:86:ea:81:34:e1:35:d7:04:66:79:c7:a2:77:
         aa:2f:bb:51:0e:8c:7e:0a:7b:15:7b:13:a9:e1:08:17:15:e2:
         99:7f:2e:62:45:41:dd:b1:ca:80:7d:40:52:9a:4f:49:bc:27:
         28:59:7a:53:7a:95:84:39:28:89:be:48:74:ed:c1:28:1a:a9:
         f7:22:88:71:72:56:05:80:bd:c2:3a:cb:27:f6:38:b4:36:26:
         c2:74:60:cd:e8:77:b7:db:08:e5:12:82:eb:8c:27:1d:f4:6d:
         14:1a:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----