Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          TEpzLkLIHDt1UwxyALdk+s2M0aZotaA8c03ja3mZqHQ=
Subject key identifier:   2F:37:8E:94:A3:6E:7C:F6:86:69:0D:7E:87:C7:9B:76:0C:C7:6E:06
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       01962E99C3F70898178B0AE55C6FEEB3EF77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: xtFyilP3a2fME8hj8Zr3MkCVe4E5Uy8lQs+9/Y80Ynw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c3:f7:08:98:17:8b:0a:e5:5c:6f:ee:b3:ef:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=2f378e94a36e7cf686690d7e87c79b760cc76e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:93:8c:e6:e0:89:38:8b:8a:10:85:16:d1:
                    83:c4:d6:14:6a:d3:73:5f:77:43:bf:bc:40:20:79:
                    f3:ff:54:05:1b:ef:ab:07:c6:ea:11:31:f8:bc:51:
                    17:bb:7e:f5:c5:9d:ec:89:41:97:9f:46:84:54:5d:
                    c9:bc:6e:ac:fa:9e:84:cb:00:a8:bc:9c:1f:2d:35:
                    ec:f2:31:06:b8:c9:73:29:93:fa:01:68:bc:34:f1:
                    5d:9a:03:c7:ac:09:9b:e0:28:ee:c9:99:4d:58:75:
                    72:39:0d:51:95:44:f6:c9:d9:08:04:03:32:f3:be:
                    3a:54:34:75:c1:6b:0e:26:fc:a0:db:fc:2c:2f:99:
                    c9:85:a0:e9:33:b4:61:05:14:be:59:ae:f2:35:f3:
                    51:49:33:60:f6:0c:68:80:f5:63:ab:87:0a:f7:ba:
                    56:9f:9b:1b:e8:8a:49:fe:24:8b:20:9e:e4:f2:6a:
                    3c:6b:dc:6c:bd:f1:22:ee:04:cd:ef:f7:a1:29:e6:
                    8b:e5:ff:ba:aa:3a:de:de:bd:8c:b9:45:67:15:1d:
                    a6:a8:11:34:b8:5a:36:3e:e7:da:e3:17:a2:9e:24:
                    5b:08:8f:ed:80:3a:cf:85:5c:0a:42:d0:71:4c:30:
                    c2:d0:75:46:ae:1b:00:54:85:22:66:2f:3b:8a:10:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:8E:94:A3:6E:7C:F6:86:69:0D:7E:87:C7:9B:76:0C:C7:6E:06
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:9e:dd:18:92:91:25:0d:c1:bc:44:8b:a8:ab:04:15:6b:
         f0:6e:d4:84:a7:0b:77:3d:34:38:13:15:e7:c1:2a:69:39:de:
         79:61:f8:64:b7:26:96:14:d5:86:b2:21:c9:fc:1a:93:05:4c:
         65:91:07:d9:a0:83:2a:2a:36:d4:43:e3:a7:42:41:ba:ba:bd:
         00:3a:41:46:ce:a1:02:ae:e2:7e:48:97:e5:69:fc:78:4d:7a:
         28:9f:ee:10:c5:55:4d:9b:22:59:63:1f:2e:61:6a:cb:52:1c:
         a2:55:a1:ce:3d:41:1c:03:22:6d:e5:c5:a4:49:72:00:25:16:
         31:2a:34:00:de:c5:33:d7:4c:6b:f7:98:5d:62:d8:c1:cc:40:
         53:73:00:93:77:0b:31:37:45:80:70:cb:64:ce:97:df:07:6c:
         50:79:3d:c0:49:14:0c:76:4a:71:f4:8b:81:72:fc:50:01:94:
         13:64:74:eb:89:48:54:67:17:be:32:bb:ac:0a:35:63:1a:da:
         ad:f7:1f:25:45:99:c7:de:39:75:f8:02:b7:31:37:81:b7:87:
         4e:12:0b:92:e5:b6:5a:61:8c:8e:b7:91:76:ae:86:10:a5:59:
         60:91:db:83:f7:f3:96:5c:0d:1a:a6:07:07:ba:a6:d1:89:97:
         9c:09:2c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumcP3CJgXiwrlXG/us+93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjUwNDEzMTAwMjMxWhcNMjUwNDE0MTAwMjMxWjAzMTEwLwYDVQQD
EygyZjM3OGU5NGEzNmU3Y2Y2ODY2OTBkN2U4N2M3OWI3NjBjYzc2ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf6TjObgiTiLihCFFtGDxNYUatNz
X3dDv7xAIHnz/1QFG++rB8bqETH4vFEXu371xZ3siUGXn0aEVF3JvG6s+p6EywCo
vJwfLTXs8jEGuMlzKZP6AWi8NPFdmgPHrAmb4CjuyZlNWHVyOQ1RlUT2ydkIBAMy
8746VDR1wWsOJvyg2/wsL5nJhaDpM7RhBRS+Wa7yNfNRSTNg9gxogPVjq4cK97pW
n5sb6IpJ/iSLIJ7k8mo8a9xsvfEi7gTN7/ehKeaL5f+6qjre3r2MuUVnFR2mqBE0
uFo2Pufa4xeiniRbCI/tgDrPhVwKQtBxTDDC0HVGrhsAVIUiZi87ihCnVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC83jpSjbnz2hmkNfofHm3YMx24GMB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFye3RiS
kSUNwbxEi6irBBVr8G7UhKcLdz00OBMV58EqaTneeWH4ZLcmlhTVhrIhyfwakwVM
ZZEH2aCDKio21EPjp0JBurq9ADpBRs6hAq7ifkiX5Wn8eE16KJ/uEMVVTZsiWWMf
LmFqy1IcolWhzj1BHAMibeXFpElyACUWMSo0AN7FM9dMa/eYXWLYwcxAU3MAk3cL
MTdFgHDLZM6X3wdsUHk9wEkUDHZKcfSLgXL8UAGUE2R064lIVGcXvjK7rAo1Yxra
rfcfJUWZx945dfgCtzE3gbeHThILkuW2WmGMjreRdq6GEKVZYJHbg/fzllwNGqYH
B7qm0YmXnAksFw==
-----END CERTIFICATE-----