Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File:                     Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier:          aymIIh6IV6xiHl6exHjsYZO7V4EKru4Y3SiSNFG05us=
Subject key identifier:   2E:28:F0:A4:0C:B7:8C:6A:1E:91:EE:54:9D:08:F1:C1:4E:F4:33:6E
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer:       /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial:       01962E9863C764431270B0C5BE389AE2AA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
                          2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: bSs79zFT3i2/jYVS3ktdT02Q240MQEXzPEm8OkH5vVM=)
                          3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:63:c7:64:43:12:70:b0:c5:be:38:9a:e2:aa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=2e28f0a40cb78c6a1e91ee549d08f1c14ef4336e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:7d:40:fa:fc:58:e8:f2:a2:29:89:50:e1:
                    a5:ab:13:e9:b5:27:8a:35:6f:21:a6:e9:23:11:90:
                    ec:af:f4:dc:1a:57:73:92:81:d0:2f:95:33:e8:10:
                    cf:39:e7:06:ad:65:6a:1a:86:cc:ff:4b:59:2d:e7:
                    1a:2f:0c:ce:ff:e4:5f:05:a0:30:75:d7:0b:55:8c:
                    d9:b4:c0:a5:44:27:16:08:1a:c6:b6:49:b9:22:70:
                    f8:1d:19:81:8c:36:7e:a2:07:9a:e0:47:dd:b7:87:
                    db:e1:d8:06:06:94:c5:54:9e:04:fa:bb:4f:2e:85:
                    14:03:37:cf:63:1f:af:cd:23:e7:6d:41:9e:64:ee:
                    60:b3:f8:f6:82:d6:68:d0:02:79:79:a9:b7:34:cd:
                    11:a1:3b:2f:e6:4d:a8:73:00:ac:f7:33:bf:d6:f1:
                    31:c7:b6:5a:e3:bc:33:4e:d2:44:0d:04:12:ba:37:
                    5f:e6:35:00:56:f9:7f:0a:cc:83:7c:7c:79:00:01:
                    17:cf:ee:f8:36:83:ad:17:7a:af:ba:61:89:b8:51:
                    a0:93:29:d2:8c:d8:af:68:4e:8b:85:4f:d8:bd:2e:
                    29:8e:33:09:7a:1f:c3:00:3d:04:cb:24:31:be:2a:
                    5c:77:38:18:f3:62:73:52:c6:41:24:8c:f2:33:bd:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:F0:A4:0C:B7:8C:6A:1E:91:EE:54:9D:08:F1:C1:4E:F4:33:6E
            X509v3 Authority Key Identifier:
                keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:b0:26:fe:f7:fb:cd:83:00:48:38:97:34:13:57:1c:b2:95:
         17:db:44:7f:2d:16:24:d9:4f:a4:69:b1:a5:fd:ac:55:93:26:
         5d:e6:47:81:2e:cc:e0:ac:7b:09:75:31:ed:a6:a9:99:c1:ca:
         02:34:e8:2f:e2:df:c8:80:70:84:30:aa:25:0b:aa:8f:15:62:
         aa:a2:e4:d2:ee:2e:41:e8:b0:d6:79:da:61:1e:a9:32:6a:bc:
         a2:85:63:e3:ed:a1:03:67:72:31:49:5a:c6:e6:80:31:a1:83:
         69:5f:19:0b:50:7c:93:bd:1f:7d:fc:24:be:5b:d6:5f:ec:1d:
         c6:43:b5:91:15:22:7e:2c:a8:64:b0:0a:8f:65:45:57:65:df:
         80:70:28:57:a5:e9:b9:d3:b4:95:8c:65:57:92:24:f8:6f:34:
         f1:f0:cc:de:2d:3c:36:9e:40:23:f5:3a:e8:4f:ec:dc:32:33:
         b5:01:88:ba:bd:93:a3:ab:0b:b0:62:c4:eb:ad:96:5e:1e:64:
         04:04:a3:3f:05:76:ae:de:98:2d:6c:20:79:44:4b:84:70:04:
         25:55:3a:24:d9:ac:82:94:2b:aa:8e:dc:c4:95:5e:e3:0d:0b:
         d7:56:33:56:b9:09:b3:3d:76:7e:a1:cd:d6:71:cb:44:f4:68:
         46:3b:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----