Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          T9xUh20vBgJGZ8lw+ZRm2eX7SxX6moxEGoEeDgb0dyc=
Subject key identifier:   15:BF:10:2E:A6:8C:34:4A:DB:F1:CC:8B:2A:40:D6:64:9F:AA:44:01
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       01962E6172AB232DC0C3D5D44413F7D03721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          06E8
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: tEqV4o0iR79RTvgnjaNx5eBRuUAmuf/V3+VpPsnBzNQ=)
                          2: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:72:ab:23:2d:c0:c3:d5:d4:44:13:f7:d0:37:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=15bf102ea68c344adbf1cc8b2a40d6649faa4401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:2f:7e:84:b9:d8:bd:53:77:25:92:fd:ee:
                    f3:48:26:10:0a:a2:2c:a5:a1:61:c8:3c:8e:5d:f0:
                    ff:f4:e2:47:90:a6:2d:24:c7:31:15:1c:15:dd:13:
                    8b:9a:a5:c1:87:0b:68:d7:6b:da:39:64:21:13:37:
                    12:28:92:bd:7f:9e:c0:37:8d:b6:a2:bc:99:e6:b8:
                    8f:8f:58:be:20:08:21:8d:d3:0e:7b:b5:28:33:a8:
                    33:56:07:3c:5a:6d:ae:d4:51:bb:47:f6:27:81:f0:
                    85:d5:7c:a8:68:6c:ac:32:cf:5d:5f:7d:f3:3d:18:
                    06:72:cc:ac:4f:26:5e:77:83:8f:23:63:6b:34:d5:
                    80:31:b4:65:31:f5:2f:5f:74:aa:43:53:72:83:99:
                    02:e6:41:a3:45:09:d1:32:2c:f4:44:4c:22:d2:76:
                    cf:b8:fe:a4:0e:79:4c:32:9b:26:61:11:83:0e:2d:
                    b4:4c:06:ed:24:db:39:58:8d:dc:01:0f:41:0e:b9:
                    d8:48:35:e1:03:28:6e:92:17:9b:f9:f2:49:99:05:
                    fa:9e:00:a9:aa:61:4c:d2:f3:bc:40:4e:7b:90:d9:
                    7b:66:15:b6:b2:6d:e3:63:f3:fb:e2:18:dd:ea:b5:
                    ca:6e:5c:a1:02:db:ee:a7:c3:3e:29:fb:9e:a9:45:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:10:2E:A6:8C:34:4A:DB:F1:CC:8B:2A:40:D6:64:9F:AA:44:01
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:13:8e:5a:a7:81:9f:c4:74:9c:dd:55:bd:66:da:51:e6:
         44:ad:4e:80:51:85:7e:41:77:6e:2a:40:12:34:64:d7:e4:1a:
         7e:3c:0f:73:1a:37:ce:c8:60:20:38:82:1f:cb:ab:a3:48:3a:
         97:a2:21:6b:49:0f:94:78:e9:62:ff:f0:4e:d1:76:fe:51:dd:
         c9:79:45:45:85:b4:c1:cc:3c:c6:ea:90:86:02:94:7d:f7:3e:
         b3:be:cf:fb:0f:a9:16:5a:5f:0f:b4:56:a4:4c:21:df:a9:68:
         21:75:3a:a9:5f:24:45:4d:ce:19:0b:d9:88:80:4a:3a:e1:bd:
         cd:6b:e7:aa:ce:bb:0b:65:c6:f4:b9:b2:99:63:4d:bf:38:35:
         be:8c:d2:0f:00:01:f7:c7:21:0d:a7:46:33:e3:95:c0:cd:28:
         5e:e5:b4:35:27:c9:ea:b9:b5:13:c2:bc:76:61:6c:ae:36:58:
         e6:92:64:d8:5a:5a:9d:7d:f8:a4:fc:db:15:17:e2:67:56:e0:
         76:c8:7b:df:10:fc:b2:93:eb:4e:3b:8d:8d:f9:5f:b1:28:80:
         f6:47:9a:3a:df:f6:dd:b9:a0:a4:d3:13:0a:d1:de:c6:32:01:
         c5:5f:4d:8c:76:28:5d:06:dc:2d:0f:6f:74:b0:dd:9a:4c:88:
         20:d1:70:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXKrIy3Aw9XURBP30DchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj
MTZmNDMwHhcNMjUwNDEzMDkwMTAwWhcNMjUwNDE0MDkwMTAwWjAzMTEwLwYDVQQD
EygxNWJmMTAyZWE2OGMzNDRhZGJmMWNjOGIyYTQwZDY2NDlmYWE0NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ovfoS52L1TdyWS/e7zSCYQCqIs
paFhyDyOXfD/9OJHkKYtJMcxFRwV3ROLmqXBhwto12vaOWQhEzcSKJK9f57AN422
oryZ5riPj1i+IAghjdMOe7UoM6gzVgc8Wm2u1FG7R/YngfCF1XyoaGysMs9dX33z
PRgGcsysTyZed4OPI2NrNNWAMbRlMfUvX3SqQ1Nyg5kC5kGjRQnRMiz0REwi0nbP
uP6kDnlMMpsmYRGDDi20TAbtJNs5WI3cAQ9BDrnYSDXhAyhukheb+fJJmQX6ngCp
qmFM0vO8QE57kNl7ZhW2sm3jY/P74hjd6rXKblyhAtvup8M+KfueqUX0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW/EC6mjDRK2/HMiypA1mSfqkQBMB8GA1UdIwQY
MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt
MWMzNWI4MzkzNzliLzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli
LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0sTjlqn
gZ/EdJzdVb1m2lHmRK1OgFGFfkF3bipAEjRk1+QafjwPcxo3zshgIDiCH8uro0g6
l6Iha0kPlHjpYv/wTtF2/lHdyXlFRYW0wcw8xuqQhgKUffc+s77P+w+pFlpfD7RW
pEwh36loIXU6qV8kRU3OGQvZiIBKOuG9zWvnqs67C2XG9LmymWNNvzg1vozSDwAB
98chDadGM+OVwM0oXuW0NSfJ6rm1E8K8dmFsrjZY5pJk2FpanX34pPzbFRfiZ1bg
dsh73xD8spPrTjuNjflfsSiA9keaOt/23bmgpNMTCtHexjIBxV9NjHYoXQbcLQ9v
dLDdmkyIINFw3w==
-----END CERTIFICATE-----