Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File:                     lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier:          f9+su8+3hJItXWF6FyVA4NvY9VFKZ2qwvxB9rstnTes=
Subject key identifier:   6B:D2:3A:BA:4D:A6:44:96:8D:C8:0F:38:3C:24:84:B0:EE:7B:BA:AB
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer:       /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial:       01962F741D83E15D5C03BCC4460731955F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
                          2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: w+4A1s+RKlBXfAil8Hb0cbH5FUuTSPXwEaJJrN4WwOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1d:83:e1:5d:5c:03:bc:c4:46:07:31:95:5f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=6bd23aba4da644968dc80f383c2484b0ee7bbaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:98:0b:79:8f:2d:f7:59:b6:5d:86:f4:cd:
                    7e:bc:25:7b:44:8d:f5:c6:3d:17:60:f8:43:2d:d1:
                    92:4f:a8:68:e0:a8:64:6e:47:49:ad:c1:a2:98:90:
                    71:94:07:bc:e4:5c:db:d1:c3:aa:7c:80:b0:3d:7d:
                    b7:cc:67:cb:10:d2:3b:ca:e7:8d:3a:b2:2a:78:4f:
                    9b:52:7e:49:46:a2:4c:a1:5f:eb:17:29:ab:9f:8b:
                    6f:93:4d:0a:61:a3:3d:c8:ec:9e:48:4e:68:46:eb:
                    ea:fe:5c:4f:19:b1:84:ae:d7:67:ef:bd:6e:98:00:
                    b6:66:5e:f4:8d:12:65:c1:80:c6:a6:23:f8:85:f3:
                    e1:8d:3f:5e:a1:e9:98:af:43:13:38:cd:9e:77:dd:
                    fc:32:46:b7:f3:de:66:b2:7a:40:b8:d0:f4:fc:e9:
                    ef:35:95:1e:a2:21:cc:45:2b:b7:3f:55:ce:01:11:
                    9d:4f:d8:27:05:6f:d3:cd:dc:ba:50:f8:7c:20:cb:
                    16:96:8a:a0:b8:11:42:16:67:7d:c5:91:d8:d2:85:
                    98:35:dd:06:88:28:57:09:e7:44:37:07:86:0c:a5:
                    0f:88:47:5b:a9:d2:ad:fe:23:2d:77:93:51:6f:07:
                    a0:ae:18:ae:69:70:a3:4a:57:69:1c:04:06:93:43:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D2:3A:BA:4D:A6:44:96:8D:C8:0F:38:3C:24:84:B0:EE:7B:BA:AB
            X509v3 Authority Key Identifier:
                keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:f0:ac:08:03:2e:4d:a1:b8:51:d6:bf:c2:81:79:d0:68:
         c0:d9:1c:ed:0f:e5:53:50:17:39:7f:46:3c:5b:99:bc:96:6f:
         36:c7:92:14:a3:1d:51:78:62:2e:50:30:2e:5e:31:94:6b:b7:
         c1:0e:06:1b:3c:69:88:a4:f1:e6:3a:eb:4d:66:c3:76:3a:8a:
         bd:43:99:ac:5c:27:fd:9b:42:ca:8a:64:32:a4:6e:a1:24:98:
         a5:44:f4:bc:af:ee:0f:34:1d:2e:ed:48:8e:47:99:62:c3:82:
         00:58:f2:3c:6a:56:04:5b:70:81:f9:15:76:76:06:d4:b6:8d:
         d0:6f:bd:97:56:99:82:98:f3:6f:51:f6:0a:4e:c4:b6:40:48:
         1c:a8:9a:b9:9e:d7:99:79:ad:b0:ed:75:43:79:e5:a2:a8:b2:
         a8:9d:28:f4:bb:16:12:2a:5d:42:4d:7b:4b:6b:50:80:ba:3f:
         bc:16:b3:6b:b9:f0:ec:68:4f:b5:3b:d7:1d:08:04:7b:fd:da:
         0c:fa:c4:a3:0f:4a:38:14:69:df:a1:d3:66:f4:18:a9:a6:e1:
         be:27:b4:a4:c3:b3:26:fc:c9:9d:a4:5a:5b:11:13:d8:42:a6:
         b2:85:f9:78:45:74:0e:35:c7:63:a3:02:2c:fa:b5:30:a6:31:
         7b:92:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----