Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          ymWiLDREW/mKXHqNXezVOtqSiXmFhRdE42wD5t8VN5c=
Subject key identifier:   5D:3C:72:4B:30:FA:00:EE:5D:F9:73:36:F6:16:F7:B6:1D:EB:EB:0F
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       01962E2ABD5E5FC27B56AB19228F08151DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          040F
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=)
                          2: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: VBr8IhvmJcrqfkG0DsxY0fdCFO3ctzCMFvxJZt90NOQ=)
                          3: gomnRiII4UUcGSHuI8nXBgSpWmo.roa (hash: Rx7SYdS0kAPSQJ6WBVcTiVGAF8kqx/mt3lPi/ehy1+s=)
                          4: mv2c9mpu4nsKL2iXSU5ybGfbMyA.roa (hash: n7gKzzkF9393BLuqwZ2ZBCD9txFPO+ZrNkXIbbBUXgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:5e:5f:c2:7b:56:ab:19:22:8f:08:15:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=5d3c724b30fa00ee5df97336f616f7b61debeb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:98:a9:5f:07:6a:af:b8:b6:71:b5:85:9e:
                    ea:72:68:7c:eb:e9:5b:e3:fc:e2:62:e6:01:4f:22:
                    77:b9:c3:92:a8:48:bd:69:69:dc:0e:61:38:0b:5f:
                    0b:e2:38:34:ca:41:ec:4b:6e:8b:54:70:16:39:54:
                    7e:73:82:45:bc:1e:04:8b:ad:ff:fd:b9:10:11:20:
                    82:eb:d2:4b:7b:d2:04:5c:47:65:2b:81:41:36:b4:
                    05:87:ee:a6:50:11:07:5b:bb:7c:07:f8:7f:78:c8:
                    98:94:77:c2:74:a8:d3:aa:39:1e:81:3c:ff:f1:17:
                    bf:af:fc:41:9e:e8:72:6e:ce:3f:29:b7:93:e5:7a:
                    60:4e:da:d8:fe:28:5e:71:64:d6:db:f5:70:db:57:
                    c7:8c:a4:09:8b:08:ff:8a:9c:e1:9e:a2:9a:93:a6:
                    03:13:59:bd:ff:93:c4:90:78:71:a3:14:5a:f5:5f:
                    86:46:7f:01:d1:86:8d:82:30:9f:42:38:20:d0:af:
                    cd:7a:56:55:15:dc:26:72:bc:d3:d8:41:df:be:05:
                    9c:dc:6f:47:d5:e9:95:7e:1f:fd:d7:eb:00:20:5c:
                    05:bf:c6:8f:d0:51:db:e9:74:bd:75:9e:dc:7b:06:
                    15:01:47:0e:a0:70:6a:35:2f:bc:37:42:a3:48:b9:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:72:4B:30:FA:00:EE:5D:F9:73:36:F6:16:F7:B6:1D:EB:EB:0F
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:4f:79:1e:c2:57:ba:71:62:f3:fd:3a:6f:90:3c:f4:92:
         1e:f4:e0:17:08:57:af:55:aa:3f:3d:26:a6:44:5a:64:c9:8d:
         8e:f2:27:34:36:63:80:74:f3:e4:54:e5:07:e7:e0:91:46:4b:
         41:21:ef:ac:bd:a0:38:d8:7c:f2:b7:68:0c:54:7d:67:26:6e:
         3f:ff:f9:dd:79:f2:d5:29:45:f6:48:74:e1:9c:f4:f4:f4:f6:
         0e:c4:4a:8a:82:4e:35:f0:00:05:56:77:fc:49:8c:35:59:88:
         3b:35:7a:48:20:64:7b:26:35:e8:6c:43:9c:b8:4b:a7:ff:d6:
         4c:05:85:6e:56:f6:e5:6c:0e:a3:94:fc:31:da:3e:84:ba:bc:
         e3:09:b7:6b:3c:55:32:71:bb:ee:d0:97:36:8c:80:33:00:cc:
         ed:1c:ac:06:41:ea:a9:07:8f:1c:e3:55:4a:9c:fd:a3:b3:03:
         f8:31:12:c8:68:71:a5:c3:e7:b6:2e:29:03:a2:e5:58:f9:1e:
         2b:68:a0:29:48:02:98:97:df:c1:7a:f2:3f:85:52:c3:ee:bb:
         74:2d:ba:78:90:40:23:2f:14:6b:9b:08:84:e6:ff:bd:97:39:
         7a:b1:03:dd:97:c8:44:df:17:81:d6:65:e6:36:96:f5:12:eb:
         59:36:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----