Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File:                     ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier:          LH9/rllNc3oRiKNf2xUZY1r9YNQaVtTkDF61oqR5PnE=
Subject key identifier:   AB:B5:A7:ED:BE:C3:38:66:11:E0:15:88:0F:ED:49:5B:C4:7F:48:E2
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer:       /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial:       01962E2B014D2FC1003B66C988BB1A6E7308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
                          2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: tKTJ9gZI929vpkKWOK77e1c5vOBu/3IxgDoqmK+vXUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:01:4d:2f:c1:00:3b:66:c9:88:bb:1a:6e:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=abb5a7edbec3386611e015880fed495bc47f48e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:b3:0e:10:8a:33:2e:46:41:f5:43:79:1e:
                    c6:36:9a:41:41:81:04:04:42:1c:0a:ae:0f:1c:b5:
                    4d:cf:84:72:aa:bd:c9:e3:be:ad:71:96:07:d0:4c:
                    2e:a1:8e:d5:a9:d1:95:2d:11:56:45:27:a9:4e:ad:
                    98:15:99:aa:71:5f:b7:55:a5:28:98:d0:54:45:49:
                    0c:50:e0:85:49:05:6c:fb:e6:51:7e:a4:6e:57:dd:
                    06:41:da:9e:4a:0a:03:f5:44:68:98:81:06:7a:38:
                    44:f4:7d:af:4f:2a:e5:6b:b9:b8:6d:77:52:60:37:
                    8d:12:7c:0e:db:81:e0:c2:59:54:0d:e9:ac:0f:76:
                    56:a3:a2:1f:09:b2:d3:2d:af:4f:48:aa:3c:ad:ed:
                    7f:f5:0a:68:73:f5:e8:25:dc:a3:f0:f5:85:63:54:
                    ea:b9:9b:fe:0c:50:41:4b:a4:61:bc:9d:a0:7a:3f:
                    03:52:41:27:be:8b:37:7a:87:94:cf:53:ad:ba:0d:
                    7f:97:75:05:99:26:ef:c1:18:1f:d0:4c:81:21:9e:
                    cb:b4:b5:0b:d3:4e:86:b1:e3:c2:1a:72:90:a3:10:
                    97:53:35:f8:95:0d:a2:2a:75:42:59:c9:d6:0c:19:
                    4e:71:f2:58:04:b4:41:a3:8e:a3:32:df:42:1f:28:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B5:A7:ED:BE:C3:38:66:11:E0:15:88:0F:ED:49:5B:C4:7F:48:E2
            X509v3 Authority Key Identifier:
                keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:95:6c:e5:63:c3:e4:f7:10:ff:8b:cb:ae:14:17:50:bc:
         45:92:8f:90:35:90:e0:6f:7f:4a:33:a3:77:3a:7c:e7:eb:68:
         d8:84:d7:c6:94:ad:4d:4d:c0:ff:6a:ee:52:b7:7e:8f:d1:ac:
         40:08:e1:fa:9e:79:75:4d:c1:f3:a1:99:73:28:04:15:c8:7d:
         8b:c6:5a:1d:c8:25:f0:22:77:6c:a1:41:1e:c6:a3:b6:d3:e8:
         24:4d:36:38:56:27:45:48:66:12:86:f9:19:24:a3:f0:61:44:
         92:a2:fa:86:26:4a:06:2b:9a:93:83:79:2d:67:8e:9f:92:47:
         ef:91:e5:60:98:25:50:a7:83:53:bf:2e:2c:68:f2:fb:77:cf:
         8c:30:40:7d:87:20:f4:90:bc:fd:1c:ab:39:b4:b8:3c:36:cf:
         78:8a:6e:af:ee:03:93:14:c0:c0:8e:7b:9d:1a:cd:1c:09:84:
         25:97:ca:4e:7f:e3:59:59:21:59:f9:da:1b:a8:6e:66:8f:49:
         9f:47:9b:b3:bb:fb:be:78:4a:6a:8e:7b:85:87:6a:e6:f2:df:
         ce:b0:a4:cd:53:f3:04:ec:ce:c1:8e:64:a8:d0:c7:96:4b:98:
         1a:3d:fc:13:61:5c:f0:2f:72:a4:90:8c:1b:a3:16:c6:ed:74:
         48:43:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----