Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft
File:                     LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft (raw, json)
Hash identifier:          Rw8er/Hi8rp74R65BwH89OH/+xyYeyrNSlphtagxQlg=
Subject key identifier:   FC:93:74:4C:85:42:D7:6D:60:C8:F2:67:AA:72:37:9A:E7:6D:9A:12
Authority key identifier: 2F:32:52:07:D5:CE:E0:EC:EA:99:E4:70:24:53:40:7B:56:4C:39:CA
Certificate issuer:       /CN=2f325207d5cee0ecea99e4702453407b564c39ca
Certificate serial:       01962E991C951565754A80113399351860D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzJSB9XO4OzqmeRwJFNAe1ZMOco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: LzJSB9XO4OzqmeRwJFNAe1ZMOco.crl (hash: nWQBOUDA3y6ymsYxs416tETPPn8C3Ruc8mM/9ZzlDQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1c:95:15:65:75:4a:80:11:33:99:35:18:60:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f325207d5cee0ecea99e4702453407b564c39ca
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=fc93744c8542d76d60c8f267aa72379ae76d9a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:0e:d8:38:ee:9a:5d:54:f0:b6:13:ee:15:
                    1c:81:54:80:bf:b8:c1:de:6b:45:64:b0:d1:21:21:
                    fc:bc:eb:94:29:84:41:8e:2d:7f:f2:4e:53:6e:1e:
                    d9:fa:be:27:31:37:b0:e8:74:bb:d1:23:2b:3e:f7:
                    26:37:b3:15:a7:f2:f2:7a:bf:77:92:d3:a9:21:40:
                    39:ac:c7:8e:2f:5e:d8:87:14:40:91:01:84:aa:3c:
                    46:bb:76:42:f7:fc:34:4f:f0:d5:24:03:d3:08:da:
                    c1:db:f4:3a:c0:df:64:f1:fd:b9:ec:e7:99:59:9c:
                    2d:23:ee:e5:41:a0:8e:8e:5c:4c:3e:2c:54:8f:28:
                    ab:6b:c5:4a:f0:13:fc:db:73:c8:d0:d0:50:e6:52:
                    23:e7:cc:d8:f8:df:b3:6b:89:69:fb:3a:d6:22:6a:
                    0a:da:15:5c:78:af:03:83:8a:55:82:35:e1:05:db:
                    c1:ed:c2:2a:6c:ed:c9:49:c9:1b:fc:72:5a:58:0b:
                    e5:96:c3:47:0b:69:26:e3:21:3d:4a:fe:38:a1:47:
                    4f:11:14:7e:22:7d:9e:b2:36:1f:02:e5:7f:b3:25:
                    07:64:88:95:85:d0:79:f8:8f:b9:0b:84:90:a6:6e:
                    67:60:f3:a1:15:bd:69:8c:b6:d5:56:db:ec:03:58:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:74:4C:85:42:D7:6D:60:C8:F2:67:AA:72:37:9A:E7:6D:9A:12
            X509v3 Authority Key Identifier:
                keyid:2F:32:52:07:D5:CE:E0:EC:EA:99:E4:70:24:53:40:7B:56:4C:39:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzJSB9XO4OzqmeRwJFNAe1ZMOco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:92:23:38:c3:94:f6:c2:d5:88:7f:03:ef:1b:97:74:0f:9e:
         2d:e2:ee:8d:56:59:03:f8:1e:10:6a:18:7a:21:f1:53:b4:c4:
         38:20:2b:3e:39:29:19:75:c4:06:f9:04:08:2a:ce:d2:b2:58:
         79:fe:e7:7a:13:7a:32:81:ff:85:f9:81:78:46:44:16:81:96:
         ad:ca:e8:7c:90:22:f8:3b:0e:5c:8c:31:01:2d:9b:4a:d0:c4:
         52:9b:f1:07:88:4c:f4:a7:98:48:bb:93:9d:34:5b:61:67:4e:
         ed:ac:f8:61:db:f5:78:a9:4d:b3:e7:36:00:14:cd:21:cc:9a:
         6e:c2:13:a4:35:05:ff:82:d6:ad:0e:e4:13:ea:12:22:80:ae:
         01:71:68:72:c9:e5:0f:bf:bf:31:9e:5c:65:d7:f4:99:6b:a5:
         a1:dc:c6:fd:7b:12:2d:2e:2a:be:be:4b:fd:99:5e:ca:ed:74:
         ee:cd:9f:36:f4:a6:88:ac:5a:18:ae:0c:92:cd:da:90:fb:e7:
         3e:97:e1:6e:29:e0:58:ab:68:2b:de:49:3a:ee:66:ec:ab:bf:
         d4:f4:fb:e1:17:71:d6:f9:20:d8:00:52:52:b8:a2:bd:65:9b:
         26:15:62:38:23:5e:c4:19:0c:8a:94:45:22:04:55:48:2a:65:
         66:f5:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----