Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File:                     lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier:          WAAqdXKmfoyhzYNcIahgbLfxyld59IFQsatwp54iN4M=
Subject key identifier:   20:EC:1B:61:61:C8:54:9D:F6:2C:D9:CA:03:B4:85:75:3B:21:78:9A
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer:       /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial:       01962F064CBE5BA428CA6374E67ABBCF51A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
                          2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
                          3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: D8gngE4B9MbWPM+SZH/I5vDrd3qZFjyka3EAAiRfe9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:be:5b:a4:28:ca:63:74:e6:7a:bb:cf:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=20ec1b6161c8549df62cd9ca03b485753b21789a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:dd:25:1a:6a:e4:cb:06:f3:96:bb:87:52:
                    15:dd:59:6c:25:e5:17:5c:d8:7f:fb:c4:29:6c:c8:
                    3f:b2:f0:58:95:57:68:70:62:aa:e7:b9:53:d6:df:
                    5a:3b:b6:02:30:57:6f:1c:d7:2f:19:24:5b:68:e6:
                    7f:1b:10:92:78:16:68:83:96:c8:7e:42:9e:b8:b4:
                    98:b2:8f:4f:92:b4:c7:7c:a6:1b:31:48:3b:98:ac:
                    f3:f4:d9:c5:85:ed:77:b5:2b:a7:97:16:c5:b2:fc:
                    c0:48:f0:c2:74:39:b5:06:0f:c0:53:40:c5:e0:ed:
                    d7:dd:1b:a7:d2:4d:cb:7d:08:ac:83:70:a5:65:8b:
                    ce:cc:d0:12:e7:eb:e1:ef:f5:06:95:62:49:ce:9d:
                    3f:f5:c9:79:03:a3:21:62:bf:1d:72:19:0b:1f:85:
                    f9:18:eb:13:fe:37:27:48:7c:d9:f3:fa:8a:c0:9f:
                    07:f4:f5:b4:6f:a7:e2:60:91:1f:f4:ed:c3:1c:74:
                    97:d9:00:42:37:40:92:04:3b:d2:24:b1:d6:11:7c:
                    78:c6:0e:a2:e1:ec:23:26:38:69:2a:36:ae:bb:f7:
                    32:e2:c2:84:11:d0:e7:8b:62:82:0f:0d:74:4a:d5:
                    46:95:0a:18:a3:ee:0a:b0:55:76:ff:69:7c:ae:b6:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:1B:61:61:C8:54:9D:F6:2C:D9:CA:03:B4:85:75:3B:21:78:9A
            X509v3 Authority Key Identifier:
                keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:55:f5:e8:6a:90:8b:df:8f:56:ef:b9:f9:68:75:b4:fb:9f:
         69:cd:0b:89:32:86:76:4f:8b:91:99:e3:cf:f8:3f:52:36:70:
         42:91:1d:2f:5c:69:0e:9b:db:55:47:1b:f2:d4:d9:7f:ec:fe:
         4b:ae:4d:02:28:15:44:4b:08:e4:07:9c:ef:3a:30:b5:ce:48:
         65:9f:f9:16:4b:39:c3:be:86:8a:53:62:73:f1:19:d4:f9:eb:
         62:d5:7b:97:5b:b5:dc:6e:b8:c2:99:87:23:76:d0:5e:13:af:
         d7:99:aa:95:e7:99:0b:6c:11:e8:b8:c5:f4:b8:62:2e:af:05:
         27:da:19:92:b2:57:a4:7f:5b:c2:fa:63:a5:70:b0:ca:1a:6a:
         3d:f7:a1:d0:11:0b:f9:40:e9:07:94:d9:83:c7:6d:e7:35:0b:
         7a:5e:34:e7:d2:a8:1a:0f:34:90:5b:f5:be:13:14:6f:fd:d7:
         d0:f4:db:e7:28:88:e0:9b:6d:a2:6d:25:78:db:c8:2a:d3:0d:
         93:c5:ad:b5:a2:d1:64:cc:24:0a:d7:78:b6:71:7c:2e:f4:7e:
         ac:c4:f8:a3:e9:f7:4b:6c:9b:87:df:78:99:3c:1e:bd:7f:3c:
         6d:54:2e:44:6d:24:8e:de:1f:82:09:fd:f5:ea:4a:57:bc:04:
         b4:0a:0f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBky+W6QoymN05nq7z1GiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw
ZWFiMTYwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
EygyMGVjMWI2MTYxYzg1NDlkZjYyY2Q5Y2EwM2I0ODU3NTNiMjE3ODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDbdJRpq5MsG85a7h1IV3VlsJeUX
XNh/+8QpbMg/svBYlVdocGKq57lT1t9aO7YCMFdvHNcvGSRbaOZ/GxCSeBZog5bI
fkKeuLSYso9PkrTHfKYbMUg7mKzz9NnFhe13tSunlxbFsvzASPDCdDm1Bg/AU0DF
4O3X3Run0k3LfQisg3ClZYvOzNAS5+vh7/UGlWJJzp0/9cl5A6MhYr8dchkLH4X5
GOsT/jcnSHzZ8/qKwJ8H9PW0b6fiYJEf9O3DHHSX2QBCN0CSBDvSJLHWEXx4xg6i
4ewjJjhpKjauu/cy4sKEEdDni2KCDw10StVGlQoYo+4KsFV2/2l8rrY5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDsG2FhyFSd9izZygO0hXU7IXiaMB8GA1UdIwQY
MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt
ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk
LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVX16GqQ
i9+PVu+5+Wh1tPufac0LiTKGdk+LkZnjz/g/UjZwQpEdL1xpDpvbVUcb8tTZf+z+
S65NAigVREsI5Aec7zowtc5IZZ/5Fks5w76GilNic/EZ1PnrYtV7l1u13G64wpmH
I3bQXhOv15mqleeZC2wR6LjF9LhiLq8FJ9oZkrJXpH9bwvpjpXCwyhpqPfeh0BEL
+UDpB5TZg8dt5zULel4059KoGg80kFv1vhMUb/3X0PTb5yiI4Jttom0leNvIKtMN
k8WttaLRZMwkCtd4tnF8LvR+rMT4o+n3S2ybh994mTwevX88bVQuRG0kjt4fggn9
9epKV7wEtAoPYQ==
-----END CERTIFICATE-----