Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File:                     luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier:          tOt8xgJxepyIqPg7MuoSHNgQBRpjjgnhIVT2wz6VtCI=
Subject key identifier:   29:3E:CC:AC:86:20:4B:3B:77:88:FA:F6:88:41:BC:BF:31:A3:F6:6C
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer:       /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial:       01962ECFC36D9C19AE09C0D332337F298DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number:          03D3
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: 6BQtBVgjCAenbdVUfSl8mXsqRK7RfSQnDkW+vkaZbgI=)
                          2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c3:6d:9c:19:ae:09:c0:d3:32:33:7f:29:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=293eccac86204b3b7788faf68841bcbf31a3f66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:68:b2:b5:9a:49:67:8f:c2:48:c3:29:c8:
                    92:ad:17:cf:a3:a2:36:9b:83:a0:36:0b:71:4b:3f:
                    9b:37:ac:63:f7:17:db:16:43:45:a8:9a:73:87:23:
                    94:7b:f5:0b:c8:0b:10:9c:63:97:18:b2:71:f2:c8:
                    62:c2:0a:49:2b:b4:d9:12:a5:ad:09:fe:d3:99:68:
                    d1:8c:53:8a:76:b4:ec:3d:fc:11:3d:55:15:10:ca:
                    99:9f:26:c3:5f:83:88:b9:a8:ba:12:cd:65:14:2a:
                    e5:d9:b4:df:c9:ec:26:92:02:88:e4:d3:42:f4:04:
                    dc:86:fb:59:15:20:27:fc:77:cb:c7:67:0f:33:5d:
                    e8:4e:a7:d5:7e:02:d9:7b:a6:11:52:ac:9a:d9:13:
                    2f:91:0f:57:7d:0d:3f:ed:37:f3:b7:dd:1f:f5:b3:
                    09:8e:93:5d:51:e6:5e:20:95:13:41:8b:79:58:33:
                    d8:f3:8e:6b:c6:e6:ef:cd:db:19:b2:2c:13:6b:9f:
                    c5:07:56:3d:d1:0b:01:53:37:07:79:24:33:3d:d9:
                    2f:d7:90:44:a4:f7:3a:ee:26:03:0f:7c:cb:0f:4d:
                    ee:ae:4c:73:72:82:b7:32:0b:fb:fa:17:db:21:59:
                    01:78:f5:d9:91:d4:f0:db:ab:be:f6:9c:10:7c:b7:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:CC:AC:86:20:4B:3B:77:88:FA:F6:88:41:BC:BF:31:A3:F6:6C
            X509v3 Authority Key Identifier:
                keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3c:b0:9b:e0:e6:2f:32:2b:e4:f8:62:67:b5:42:fb:62:d1:
         3b:db:ac:a0:1a:71:31:b9:1d:35:95:42:d8:15:20:23:cd:d4:
         36:a6:59:68:d0:95:97:f2:d0:5b:6e:0b:53:99:ba:9f:98:53:
         b1:e1:69:d1:45:c2:cb:53:dc:65:06:10:ef:d6:38:8b:a5:39:
         90:e4:b6:1d:f1:4e:d3:b1:ce:58:b8:ac:3a:91:c4:f9:b5:29:
         2d:38:26:08:d5:98:18:45:80:f9:2c:b6:f7:67:db:2e:b8:29:
         56:74:a7:f7:d6:e2:42:8b:ea:bf:26:14:d7:cf:c8:d8:02:4d:
         82:d6:79:ce:be:d6:86:f0:8b:a8:74:8b:de:8c:08:71:d3:a5:
         55:ad:29:29:77:95:a3:a4:95:c1:24:3f:7b:e1:06:71:4d:b8:
         36:00:4f:81:03:6f:84:1c:3f:f3:25:78:c7:30:8c:ae:63:11:
         38:f8:b1:ed:fb:63:68:88:ec:7f:0e:51:1b:12:da:ec:2a:ca:
         c9:bd:46:67:33:fc:47:55:06:ba:8e:59:9c:cd:ac:9c:8f:b1:
         5d:f4:be:29:5c:85:e4:7c:7e:42:31:5c:73:35:e3:00:8b:64:
         b0:8c:34:06:57:6f:81:cb:54:15:a1:6f:65:62:ae:07:bc:0e:
         f6:4b:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----