Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File:                     lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier:          JEu4ZGK1Clx7LEfzmE16qJYKZ35keL0ZxQn52Gqo9u0=
Subject key identifier:   27:E6:F5:35:FA:2D:8A:31:AA:59:09:3C:8A:C2:50:97:B8:50:15:1E
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer:       /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial:       01962F3D4CED22F53B70DB137A6A19DDE2BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number:          03DF
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
                          2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: vGvlLZwQZT5RG8gf4jIsyNoJm75soAOxBJzilVwX8AU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4c:ed:22:f5:3b:70:db:13:7a:6a:19:dd:e2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=27e6f535fa2d8a31aa59093c8ac25097b850151e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:86:b1:10:ed:ec:2c:58:a0:b6:12:9d:d7:
                    10:70:b7:9a:6f:a1:56:6f:92:01:fc:3b:c6:33:a7:
                    27:9b:6e:7e:3a:1d:6a:e4:22:5d:f4:99:cd:df:09:
                    f2:41:89:aa:8c:1b:3e:35:92:84:b3:2b:63:22:16:
                    2e:ac:d8:f0:08:2b:33:ef:73:41:41:4a:3b:d3:0f:
                    fb:bd:ff:2d:5c:35:76:dc:81:ef:e2:50:fd:a8:39:
                    1d:b1:be:4b:60:8d:0e:47:ca:a4:b8:70:89:61:15:
                    9b:59:74:2d:f3:27:7d:ea:c3:7a:46:cd:e8:16:74:
                    1e:a7:5c:c4:96:10:d9:a9:87:22:75:e7:e2:47:dc:
                    24:21:5d:97:5b:bd:94:2b:2d:5c:55:c4:3e:e7:78:
                    ed:67:a3:49:f6:67:dd:13:45:64:bf:1e:56:af:14:
                    75:3e:dd:56:c1:13:e7:96:54:80:f9:92:8c:f2:4a:
                    e8:5f:44:11:1f:9d:4c:4a:1d:2f:9d:c3:cc:02:a7:
                    16:83:e1:1c:47:ac:ed:38:76:00:19:cf:a4:41:58:
                    76:4b:2f:6a:a2:94:c0:9a:9b:3c:a0:44:dc:17:44:
                    fa:48:e4:b1:a3:83:37:34:bc:63:ec:a5:88:dd:83:
                    04:5f:ff:84:51:42:79:80:1c:38:f2:ee:35:54:7c:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:F5:35:FA:2D:8A:31:AA:59:09:3C:8A:C2:50:97:B8:50:15:1E
            X509v3 Authority Key Identifier:
                keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:bc:00:ae:27:9b:24:e3:97:0a:45:4c:ce:00:20:b0:29:
         40:de:69:09:90:bb:6c:79:52:38:1d:8d:9a:a1:d5:46:1b:54:
         90:79:fa:37:e7:49:df:6c:10:45:92:e9:c7:6a:21:71:18:0c:
         b2:e9:ec:8c:f8:6a:95:fb:cd:0e:6b:89:ca:9d:7a:cb:17:be:
         79:56:f6:27:36:e6:d5:e4:83:ef:2c:0b:62:e1:22:ef:e0:06:
         aa:a3:b5:a5:d7:dd:93:b5:f3:21:b2:9f:d7:1d:69:e9:61:aa:
         87:e4:29:b7:b7:01:8f:83:af:0b:4a:5c:56:a7:e4:58:81:b5:
         6e:c5:12:69:a8:99:26:bd:55:4f:92:31:d6:75:f7:73:78:77:
         95:31:c6:0b:88:aa:14:c4:2c:3e:37:19:57:22:9e:a8:69:f1:
         3b:c4:16:7c:01:b1:66:a4:9b:c1:22:b3:85:62:e1:24:e1:cd:
         82:59:1a:7e:25:18:0f:07:a6:be:3b:31:a7:bf:55:db:57:0a:
         4f:9b:fd:3f:18:2b:77:22:65:ef:8a:5a:4a:be:96:5a:2f:8f:
         e8:23:bd:52:8a:12:69:49:35:6f:e2:72:f6:ec:3b:97:17:81:
         cd:90:6f:52:5d:4c:8a:1f:2c:e0:1e:cc:98:e2:2f:ab:0f:16:
         69:d5:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----