Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          Va2sozBj0YeQ+twEaYcII2cyiXsKp2JY0x+aRbVMxkc=
Subject key identifier:   8B:DA:1A:7D:D1:44:CC:5D:11:8D:93:96:49:65:44:58:18:27:73:05
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       01962E98ED7DE88CC6E9F8F416207A1A27BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          0C33
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
                          2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
                          3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
                          4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: j2TNAFL47qdY1xg2TnLWH9bXVj4yQtxWZXlL69++ztg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ed:7d:e8:8c:c6:e9:f8:f4:16:20:7a:1a:27:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=8bda1a7dd144cc5d118d93964965445818277305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:6c:82:6f:23:93:7e:da:3b:ea:72:b1:0f:
                    de:8f:42:fc:c8:19:32:85:b2:42:de:b4:97:56:4f:
                    12:b3:8c:0b:f2:b7:05:20:58:b0:83:49:23:cd:9d:
                    de:0f:81:bb:27:71:34:9c:50:95:c1:7c:3a:a8:b2:
                    7f:eb:e6:fe:91:08:be:74:34:12:65:d2:6e:45:43:
                    38:33:e3:8e:02:17:7a:5e:aa:49:b7:86:1d:10:7e:
                    f3:26:18:20:62:2d:e2:b1:e3:bb:42:40:41:0b:e6:
                    70:c4:39:2b:64:66:5f:a4:33:34:cc:83:56:84:d2:
                    bb:93:7b:2f:88:2d:a4:e6:af:38:7a:5b:2e:9f:87:
                    cc:e4:5a:a2:69:db:51:64:7a:4d:df:ae:45:02:12:
                    47:50:ec:3c:be:4a:a7:34:4d:6d:4f:39:ca:83:ed:
                    29:fe:9a:95:32:32:13:a1:dd:d7:80:4f:ed:90:c8:
                    8b:ba:f7:5a:21:3b:a4:aa:87:56:f4:4d:f2:04:ec:
                    51:88:fb:28:ff:58:c4:18:99:17:38:ca:9f:3b:9e:
                    59:ce:e2:6d:81:ba:e2:1e:1e:5e:6b:7d:95:23:2a:
                    2f:26:4f:fe:0a:63:67:db:99:ce:22:80:3d:63:5e:
                    60:e5:3d:43:cd:bd:19:7c:7a:88:f5:3f:d5:52:df:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DA:1A:7D:D1:44:CC:5D:11:8D:93:96:49:65:44:58:18:27:73:05
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:c9:17:74:80:12:77:60:64:54:89:c2:43:ba:14:d3:9e:
         d8:34:cd:63:62:a0:19:25:52:b9:11:29:81:b3:af:0e:b1:0a:
         66:d9:8e:b3:ac:14:cb:15:f3:e9:9a:04:65:80:42:85:b0:60:
         95:58:18:9e:d2:47:68:06:c7:b3:39:f4:0a:b7:e5:22:c1:19:
         a5:a8:24:13:3e:39:74:db:1c:dc:ab:10:12:59:b6:25:4b:f6:
         5c:d3:b1:c8:ef:06:0e:60:b4:22:6c:01:c4:74:68:92:bd:48:
         b1:af:93:59:ff:0e:d7:61:54:43:6a:94:46:06:16:cc:98:d3:
         2f:84:8e:8c:e1:e7:75:1d:a2:fd:3f:04:69:80:3a:0d:00:83:
         b0:ef:90:9f:0d:fb:3b:bf:ae:c9:03:d6:cf:0f:f9:bc:9f:c7:
         f8:d0:cc:41:c2:9a:56:a7:ea:f2:cc:f1:a0:44:07:ff:52:a9:
         ff:ac:5b:93:c5:27:d9:16:6e:f6:0c:1d:e9:cf:b1:b6:bc:2c:
         65:56:87:ec:30:3f:1a:27:a6:f7:36:91:a8:49:60:7c:57:f0:
         6f:35:05:5a:bf:39:85:0e:3d:89:51:e3:3e:72:5f:b1:01:a0:
         63:86:18:87:3c:79:1a:08:38:b2:0a:b9:bd:6f:45:4b:6c:2c:
         e3:72:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----