Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File:                     LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier:          sp5m9S3ZUKLxSD31JuWDihfE/35KCDDOv5x+Xi3Wmlk=
Subject key identifier:   73:32:8D:8C:5D:13:D5:7B:8C:07:A8:10:E2:20:59:52:6F:55:B0:B3
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer:       /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial:       01962F7432742210B1E601BA9855B6C8B1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number:          120F
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: dvL/AZkPCtRbKNIdAQf1qNpv4GTx7J7z9OvMw2uL4pQ=)
                          2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:74:22:10:b1:e6:01:ba:98:55:b6:c8:b1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=73328d8c5d13d57b8c07a810e22059526f55b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:01:d9:67:f4:16:db:58:fe:d5:cd:0a:c5:
                    f0:53:7d:52:1f:80:38:4b:b3:ed:80:c6:20:3a:30:
                    8f:14:80:48:db:ef:5c:33:9e:cf:0e:3e:86:ef:ec:
                    e3:65:e8:67:68:2f:7e:04:6c:db:74:a0:e8:d8:9e:
                    c8:26:c2:66:6b:6d:42:8d:0e:51:e5:fd:5d:16:d9:
                    75:67:3b:d3:4b:75:e5:b8:dd:5f:35:d0:31:41:2e:
                    05:44:b7:98:5c:b8:97:19:f3:d4:d3:fc:52:e0:f3:
                    6f:56:e9:ca:f5:b2:c0:61:3d:b5:c0:99:04:76:d5:
                    c9:72:b6:88:40:32:06:b2:a1:df:71:39:78:51:ef:
                    a2:59:96:c1:0f:1a:41:c6:f4:7c:84:01:d5:36:cd:
                    9b:57:0b:ce:9d:7c:b7:12:39:68:3d:c3:21:97:9a:
                    e8:5c:88:c5:06:3a:d4:2f:a8:c2:e1:bb:26:49:c2:
                    a6:74:ce:72:10:2e:7f:61:1d:09:96:97:39:9c:80:
                    93:95:57:a2:70:13:52:d8:88:20:35:bc:3d:82:1f:
                    40:f8:1f:6b:43:d2:7c:af:87:5b:22:b2:85:05:ea:
                    c1:77:cb:66:a1:23:a1:62:08:32:fd:a3:d8:99:6c:
                    41:cd:ec:c7:a0:a3:8c:25:83:f1:cf:f6:74:da:90:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:32:8D:8C:5D:13:D5:7B:8C:07:A8:10:E2:20:59:52:6F:55:B0:B3
            X509v3 Authority Key Identifier:
                keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ab:9c:63:30:c9:98:2a:6f:ca:fe:3d:ae:f1:6d:09:10:99:
         4a:4b:f8:45:3e:62:46:5f:4f:5c:73:02:55:e1:6c:ea:21:9b:
         7b:2f:68:43:27:0f:c0:72:8f:95:ee:04:c2:17:bd:a7:8c:43:
         3a:67:c6:56:59:86:f4:f7:a8:5b:3f:31:39:a3:9e:1f:4b:b4:
         2f:3f:e7:0b:69:b7:af:ca:15:c1:f3:d7:d2:42:31:09:62:54:
         81:01:55:ac:87:87:c1:9f:d4:d4:e6:f3:9a:10:df:30:58:6d:
         89:30:3f:10:03:26:ac:fc:d8:9c:7a:22:03:22:02:e6:59:ad:
         8d:84:91:0a:4f:df:e1:7c:7d:b8:b6:8d:42:94:0d:59:4d:46:
         30:e9:0b:9a:a3:67:37:df:36:e6:68:cd:8f:2d:0e:44:7e:a6:
         13:81:c6:8d:65:66:c7:b7:b3:43:07:9d:29:16:86:6b:a1:d1:
         6b:d1:86:37:da:a3:17:e2:4d:37:c1:a6:d0:2f:04:09:a4:0a:
         d2:a0:3e:31:c7:97:7b:77:71:83:c1:af:16:7d:7d:7f:c9:14:
         e8:41:71:be:2c:09:36:08:3a:73:f6:ae:55:a8:7a:d2:71:30:
         12:5b:a0:7e:9a:3e:ef:5e:a4:e1:2f:6d:fd:a1:ee:3f:19:ad:
         3f:ed:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----