Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File:                     LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier:          TvkYr5SeL+dSavd6Vua2PV5lVl0zyDZ0IsbsfBcuvmM=
Subject key identifier:   CF:0A:FD:E3:A7:0E:A6:32:4C:91:A8:6C:FC:52:9A:83:B6:D7:2A:C0
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer:       /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial:       01962E993C1249643735ACA55133C3FEB113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number:          0FB6
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: Q5u8OI8nUh1OPu9UZOzOMGDRw1XX1rxuSJ0rOqIlW9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:12:49:64:37:35:ac:a5:51:33:c3:fe:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=cf0afde3a70ea6324c91a86cfc529a83b6d72ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:e8:1a:d1:c8:fe:ab:45:35:e3:c1:e1:a2:
                    81:0b:e5:b0:c3:3c:c3:8e:b4:4a:a2:c3:69:0c:76:
                    a1:5c:96:02:c1:e4:06:a4:9e:df:a5:c3:8e:96:fa:
                    ad:9b:77:03:0a:bf:8a:1e:eb:6d:55:ab:92:e6:16:
                    75:ac:d1:d2:f1:b0:87:f2:2b:55:e7:81:20:10:96:
                    1c:5e:2c:af:c3:db:94:64:ab:33:04:94:47:86:0c:
                    dd:28:a0:65:45:48:84:2e:34:4a:e0:ff:86:a9:b3:
                    5f:dd:d4:d4:71:92:c7:13:5b:ee:26:ff:9c:e4:74:
                    db:1b:d6:99:af:de:1b:d2:ea:4d:45:1c:09:79:f6:
                    e0:ad:61:9c:67:23:b8:ce:c2:7d:9c:3e:77:18:01:
                    eb:81:09:f5:ce:00:e9:30:b8:8b:0b:b4:bd:da:4b:
                    3e:dd:5a:3f:44:52:67:be:26:61:eb:b9:c7:02:e5:
                    1d:0c:15:86:e6:83:83:18:3f:e7:c9:cf:66:4c:fb:
                    44:3d:bb:75:9a:54:94:01:ec:89:fd:db:90:90:08:
                    c1:72:53:43:f8:33:a3:73:5d:b8:d0:69:a8:e5:2c:
                    e0:32:a7:e4:4a:aa:4c:7e:9d:ea:ef:6b:45:93:e6:
                    60:f8:60:f0:d0:28:69:09:1f:cf:26:4f:ef:93:2a:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0A:FD:E3:A7:0E:A6:32:4C:91:A8:6C:FC:52:9A:83:B6:D7:2A:C0
            X509v3 Authority Key Identifier:
                keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:48:e6:94:44:87:f4:42:28:ff:39:3f:53:9c:38:4e:06:
         12:01:68:ec:8e:21:57:78:70:28:dd:c5:a7:ec:07:d7:5b:07:
         f3:29:d0:69:01:ad:90:e9:ba:ab:b7:96:6d:01:57:d5:54:83:
         a0:c9:99:97:78:1c:01:2b:fa:4a:d2:e5:71:c7:04:7a:ee:b6:
         ea:70:77:0c:a8:d8:2b:94:4a:66:0f:cd:ab:8e:59:f7:b5:b3:
         81:47:7c:b2:20:3b:64:7d:6f:59:13:57:ac:14:a9:62:ac:8d:
         60:9b:7c:aa:59:1c:26:ca:66:7f:af:89:7a:55:58:83:8f:3f:
         9e:a1:5c:8a:6b:9c:f0:a7:e1:8a:3e:d9:46:14:cc:fb:95:6c:
         d3:97:fb:9c:71:2d:e0:a9:77:8b:b1:64:19:60:06:28:45:49:
         e8:22:df:f1:c1:ef:d9:25:81:81:89:68:ba:0f:de:19:0b:b6:
         7e:6f:b3:cb:c6:53:d8:5f:ba:b5:f4:9e:80:13:d1:e7:d7:63:
         66:57:63:8e:13:92:3f:b1:a5:03:8e:89:50:0c:57:c0:98:35:
         c5:dd:6d:b9:55:94:21:75:8f:d0:fd:49:e3:b7:94:82:49:7e:
         b0:79:2b:84:4f:e5:c4:91:52:92:8f:79:94:47:b1:23:7e:ed:
         63:de:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----