Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
File:                     lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json)
Hash identifier:          FyP/Q+rPdg58VPQPlIMwIpxDsAwRja0VYCovJYTcyns=
Subject key identifier:   BB:AB:AA:C9:DF:67:C3:A4:F6:F9:D9:C9:70:A5:E6:8A:B6:01:2E:83
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Certificate issuer:       /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial:       01962F3D4742145FC3E86904432C7096E9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
Manifest number:          01CF
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=)
                          2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=)
                          3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=)
                          4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=)
                          5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=)
                          6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=)
                          7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: /qfRm5jadh+a/xbgj1hBL7xMBWPSQIvcSwPBE3Q9MDY=)
                          8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=)
                          9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=)
                          10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:42:14:5f:c3:e8:69:04:43:2c:70:96:e9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=bbabaac9df67c3a4f6f9d9c970a5e68ab6012e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:f8:fc:9d:5a:82:b4:e0:71:ab:5e:3e:fe:
                    8c:b7:84:20:8d:29:46:94:75:07:38:67:89:03:f9:
                    2e:d7:da:cf:9a:2e:71:18:a8:b4:37:6b:b3:a7:de:
                    7b:9d:e7:49:f3:34:40:ad:0a:d9:73:0d:02:e0:d8:
                    c1:a4:ee:0a:70:31:00:d5:00:12:ef:72:ac:98:44:
                    ea:ad:24:2e:ea:dd:5d:64:ba:58:01:04:cd:2e:5f:
                    fc:06:fa:5e:a9:63:1d:b3:b7:ad:08:00:c2:10:23:
                    01:60:49:8f:5a:8f:57:be:eb:40:c6:15:b4:55:01:
                    61:85:b1:7e:40:00:fd:23:d5:9f:d3:f4:f8:bb:e9:
                    71:79:1d:b2:1b:c5:f7:bf:6f:54:a8:82:8f:6a:56:
                    52:ec:28:f0:ef:06:8f:9d:39:21:63:ff:f7:4f:41:
                    75:4f:f1:9a:f8:ae:2b:36:58:46:e9:04:07:63:cc:
                    3a:48:a9:85:f9:ed:d0:f7:52:71:c0:17:5a:f4:be:
                    09:2e:ca:1b:e7:12:b4:3a:bd:6c:5f:39:77:4d:3c:
                    6e:35:b4:32:c1:d6:f6:d4:41:35:5f:f7:2e:5d:37:
                    dd:80:e3:b9:63:81:79:ba:47:53:4b:eb:61:59:c3:
                    5f:f1:af:72:b8:80:f7:60:75:41:fe:8b:eb:d7:44:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AB:AA:C9:DF:67:C3:A4:F6:F9:D9:C9:70:A5:E6:8A:B6:01:2E:83
            X509v3 Authority Key Identifier:
                keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:03:6b:a8:ad:60:0a:cf:ca:17:4d:84:36:19:26:35:fd:
         27:44:5c:b3:d1:fc:4e:c5:6a:81:43:f6:19:40:76:19:60:fa:
         8b:af:e7:66:b2:03:34:b7:e2:96:35:50:5b:ba:85:a5:57:1b:
         04:59:8c:b8:44:e4:83:86:60:56:43:78:1a:e0:4a:75:f7:7e:
         97:41:5e:d2:97:26:e9:00:9e:e5:b9:5b:2e:4d:e0:4d:81:f1:
         a8:fa:cb:ee:9f:39:7a:f8:a4:3e:c4:e6:ed:46:35:ed:44:96:
         89:b5:46:a6:40:fe:5a:ff:29:ce:f7:e0:97:ec:e0:31:2a:20:
         1f:4a:8d:66:e0:c2:c6:b2:85:f8:a6:73:af:6e:9d:76:a2:75:
         f4:a2:c9:64:58:03:47:a0:53:c0:d8:c2:de:15:cd:ca:96:6f:
         05:fa:51:04:57:c1:fd:1b:70:d5:8b:f6:64:f9:91:82:69:a6:
         9c:7a:d6:9c:2e:d5:3f:fb:ba:0b:17:04:9a:25:b6:e3:c3:a4:
         b4:19:6b:be:24:f0:5f:ae:82:fe:37:6e:c6:85:37:0b:1c:14:
         ee:f5:69:7e:17:d8:31:05:9e:74:16:71:bb:5b:e2:93:ed:2c:
         4e:c6:7c:bc:ae:d0:b4:53:84:ea:c9:78:09:7b:7b:a3:c7:6a:
         76:4c:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----