Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File:                     lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier:          ZcPJQhYGVYraL/SWi6RpwIIl5hN70qTU4XoKIaPgHxc=
Subject key identifier:   35:12:71:8D:CD:0A:8F:86:3C:C7:D7:FF:E9:F5:EC:9F:B3:BD:2A:8D
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer:       /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial:       01962F3DDB8147A0E9AE20F200E93D45EB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number:          10BA
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: DlLo9b3NPNX8Lj2ax9No63E4xN/lZKdhRw72jHyJhMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:db:81:47:a0:e9:ae:20:f2:00:e9:3d:45:eb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=3512718dcd0a8f863cc7d7ffe9f5ec9fb3bd2a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:a3:86:65:3a:34:83:0c:db:a2:fb:0e:9e:
                    09:68:0e:d2:92:e7:05:3d:fd:16:86:84:66:94:3c:
                    6c:5d:6f:0f:13:03:77:55:0d:df:71:75:95:db:45:
                    c9:64:39:27:d8:c1:24:3f:5d:e3:64:e5:45:42:0a:
                    e9:b0:d4:77:4d:79:d0:07:34:1b:a2:7c:07:df:f4:
                    53:92:06:57:1b:e0:ca:47:00:e3:58:fd:25:7d:f8:
                    a5:83:f3:b7:26:e7:38:1d:12:7e:bf:6f:32:03:b1:
                    46:20:78:5e:cc:ef:ff:33:c2:b0:59:26:d6:ea:8e:
                    de:33:b8:fc:03:4a:64:57:87:dc:42:b5:86:63:9f:
                    d5:e5:26:25:10:c6:3d:6d:57:c4:66:24:a1:7c:d8:
                    f8:a1:39:e3:5b:ce:99:f8:a7:c6:74:77:b8:af:2b:
                    80:de:e8:83:d7:ee:a0:e6:81:70:df:9f:dc:28:0b:
                    5c:db:54:88:7b:23:66:df:0f:d7:73:46:ae:22:12:
                    70:71:35:b0:39:28:05:98:e5:73:40:34:3e:85:4f:
                    e5:1d:97:d5:0e:9a:ba:04:b4:25:2b:5f:dc:41:d9:
                    94:a6:21:54:b3:88:35:b4:b6:70:6c:3a:aa:ec:30:
                    8a:ca:66:2e:7c:92:cc:66:8f:34:63:82:50:93:f2:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:12:71:8D:CD:0A:8F:86:3C:C7:D7:FF:E9:F5:EC:9F:B3:BD:2A:8D
            X509v3 Authority Key Identifier:
                keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:87:04:82:65:c2:1e:e3:61:15:6a:6c:eb:cc:79:f0:70:24:
         7b:2d:b5:eb:c9:98:d9:ce:93:2c:f0:1f:34:e2:13:9d:4f:11:
         f0:11:77:50:3c:f5:66:8b:70:1b:2d:5d:9b:de:23:c1:50:0f:
         a0:1c:fd:8e:58:d4:f0:2b:06:f9:d1:ed:b3:35:c2:3f:50:f0:
         27:92:38:b2:2c:0f:e9:9e:8f:7b:1a:4f:6f:d9:07:9f:ab:b7:
         e1:0d:a4:0c:13:87:df:97:c7:b3:84:59:55:be:9d:30:a6:a4:
         24:3c:12:ed:2b:e2:76:7f:1c:af:29:c4:85:39:9c:bf:c2:1b:
         ab:dc:78:30:ac:c0:54:06:38:66:5b:ba:b0:cf:fc:5b:23:6c:
         ba:e7:36:23:24:66:0d:2b:c3:58:95:28:de:b4:36:11:fe:cb:
         aa:c0:83:9c:53:74:30:42:fc:c1:b8:02:f2:ec:74:1f:1e:d6:
         a2:03:6e:fd:fe:3c:e1:31:15:89:a1:55:71:8f:97:dc:89:7e:
         5c:5c:8d:75:34:d8:0a:e0:91:33:d6:cf:4d:e7:d8:d6:16:1a:
         fd:72:93:1c:9d:a9:34:8e:68:49:9f:e8:15:91:09:ba:bd:86:
         aa:fe:4e:1b:2a:e1:36:87:06:4c:b6:ed:31:13:bb:85:14:61:
         77:97:f8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPduBR6DpriDyAOk9RetYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YzE5MjA2NzE2YzVjNzlkMzViZjE1OTI0ZGIzMzIzYTRl
YzE4YzgwHhcNMjUwNDEzMTMwMTQ1WhcNMjUwNDE0MTMwMTQ1WjAzMTEwLwYDVQQD
EygzNTEyNzE4ZGNkMGE4Zjg2M2NjN2Q3ZmZlOWY1ZWM5ZmIzYmQyYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8qjhmU6NIMM26L7Dp4JaA7SkucF
Pf0WhoRmlDxsXW8PEwN3VQ3fcXWV20XJZDkn2MEkP13jZOVFQgrpsNR3TXnQBzQb
onwH3/RTkgZXG+DKRwDjWP0lffilg/O3Juc4HRJ+v28yA7FGIHhezO//M8KwWSbW
6o7eM7j8A0pkV4fcQrWGY5/V5SYlEMY9bVfEZiShfNj4oTnjW86Z+KfGdHe4ryuA
3uiD1+6g5oFw35/cKAtc21SIeyNm3w/Xc0auIhJwcTWwOSgFmOVzQDQ+hU/lHZfV
Dpq6BLQlK1/cQdmUpiFUs4g1tLZwbDqq7DCKymYufJLMZo80Y4JQk/KSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUScY3NCo+GPMfX/+n17J+zvSqNMB8GA1UdIwQY
MBaAFJXBkgZxbFx501vxWSTbMyOk7BjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5Yjkt
YTRhOWNjNDcxNTk5LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5YjktYTRhOWNjNDcxNTk5
LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4cEgmXC
HuNhFWps68x58HAkey2168mY2c6TLPAfNOITnU8R8BF3UDz1ZotwGy1dm94jwVAP
oBz9jljU8CsG+dHtszXCP1DwJ5I4siwP6Z6PexpPb9kHn6u34Q2kDBOH35fHs4RZ
Vb6dMKakJDwS7Svidn8crynEhTmcv8Ibq9x4MKzAVAY4Zlu6sM/8WyNsuuc2IyRm
DSvDWJUo3rQ2Ef7LqsCDnFN0MEL8wbgC8ux0Hx7WogNu/f484TEViaFVcY+X3Il+
XFyNdTTYCuCRM9bPTefY1hYa/XKTHJ2pNI5oSZ/oFZEJur2Gqv5OGyrhNocGTLbt
MRO7hRRhd5f4uQ==
-----END CERTIFICATE-----