Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File:                     lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier:          AFwc3TEzmxOEBxbnjc1mu/fvhSWlNsj8Hg5z1nh5mus=
Subject key identifier:   7C:42:8A:F9:B5:33:47:DF:51:BF:E6:4E:22:A5:CA:E1:E9:FB:9D:F7
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer:       /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial:       01962E61BCCD5B4204867612517022C23E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=)
                          2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: YjIDtrOhNcFWo4wQ2lCUosA3HtwjssNAlwgxMgFUUtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:cd:5b:42:04:86:76:12:51:70:22:c2:3e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=7c428af9b53347df51bfe64e22a5cae1e9fb9df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:6a:25:3f:e1:2f:18:93:a3:07:5f:ec:38:
                    98:66:c2:43:59:53:f1:a6:e9:57:97:b3:cb:95:9e:
                    1e:46:bf:21:08:0a:2e:2a:ee:4b:ea:51:cf:89:8f:
                    77:33:f3:96:23:1e:e2:f2:26:af:b3:fc:1e:27:f1:
                    fb:65:73:a8:ae:f8:a1:8b:b8:76:e4:f5:64:da:ea:
                    9e:8d:39:73:37:63:48:0e:34:89:09:ae:76:0d:03:
                    20:06:ea:47:07:1f:c3:b1:89:d7:93:73:f7:44:df:
                    2a:31:6b:27:ac:de:68:5d:2e:65:12:06:19:6f:13:
                    69:e3:93:c3:a1:5b:09:3f:f5:db:f0:6e:1d:4b:13:
                    be:d2:a1:0a:cb:19:01:ee:03:9e:1a:18:9d:74:0e:
                    9f:66:27:50:95:ef:b0:48:55:ef:7c:b3:fa:fa:5f:
                    69:22:08:7c:d4:46:30:7a:93:5d:f9:36:2b:7b:6d:
                    32:73:b2:6b:c5:69:be:ea:f2:ea:40:80:9f:c1:01:
                    f2:9d:28:49:df:66:7b:a1:64:72:00:cd:2b:06:5f:
                    89:8a:5f:88:42:fb:c1:b0:30:4e:e6:05:53:67:66:
                    d0:31:65:c6:c1:08:cf:60:a5:22:c5:8d:51:9c:70:
                    43:c1:01:bb:c9:5c:86:48:a8:a1:5f:3f:f0:27:c5:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:8A:F9:B5:33:47:DF:51:BF:E6:4E:22:A5:CA:E1:E9:FB:9D:F7
            X509v3 Authority Key Identifier:
                keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:4a:31:51:bf:b6:f7:23:74:2d:8f:3e:b4:ea:68:2e:3a:
         5a:bf:43:e2:3e:6f:89:7f:44:20:0e:a5:be:3f:63:58:48:d6:
         15:32:c7:cf:45:70:a5:ad:37:99:bd:f8:bb:06:6c:e7:00:a6:
         8d:b9:90:e7:67:0a:88:fb:8b:27:57:2e:11:62:aa:59:52:93:
         9b:d6:80:78:fb:0e:5a:24:01:8b:f9:cd:1e:75:e8:54:59:c1:
         46:d5:6e:33:d0:fa:fc:28:4e:46:31:26:93:41:77:d7:8c:c2:
         d4:25:51:41:29:44:14:eb:91:58:39:dc:51:6c:76:b5:e1:9b:
         2e:78:84:97:b7:cc:33:30:6b:45:55:8f:c4:6d:de:7e:7b:f9:
         50:46:9a:77:53:bc:6a:dc:c7:f4:6c:56:91:7a:b9:0b:6e:c8:
         a9:6d:14:81:17:61:96:d3:d1:9a:85:39:a4:79:a6:a3:da:49:
         f2:52:45:99:53:a2:06:d8:03:ad:ae:d7:9a:44:54:48:c5:03:
         39:bc:27:2f:f7:45:3f:b3:7c:f7:fc:a8:ef:ff:34:cb:2c:fd:
         4d:88:5b:21:54:e2:6c:b5:7a:e5:fa:5b:64:0c:7e:1f:30:60:
         1e:64:b9:56:27:6a:9d:5e:d2:fa:b7:b8:b1:b6:a6:2d:df:41:
         1c:1b:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----