Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File:                     lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier:          ny8Q2Qy2iIf2FhsIPIIajGz5cF6XxeXrZv+I3vHBMo4=
Subject key identifier:   00:C0:42:F2:D1:95:CD:38:45:4F:99:8B:A9:4B:76:DB:F1:61:32:38
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer:       /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial:       01962F06BFFD44FAD1455ABA1AA071E6460C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
                          2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: kiLcq0bAoDtcIKHMilobBURDjbjCioJhiIqhzSbH7+k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bf:fd:44:fa:d1:45:5a:ba:1a:a0:71:e6:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=00c042f2d195cd38454f998ba94b76dbf1613238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:b0:dc:a5:59:1e:23:5d:72:f1:14:00:06:
                    ea:67:cc:69:cc:d7:8c:42:7e:5c:0f:96:df:f0:28:
                    90:6b:f8:e9:64:dd:3c:2e:7b:9f:6d:0a:d2:5f:39:
                    31:75:30:3c:4c:0c:ed:b1:a1:f8:87:c1:f6:df:65:
                    fc:5c:52:96:45:79:b7:f9:f3:55:01:42:cf:f3:c6:
                    64:ad:7b:d9:3a:6f:54:f3:bf:36:f9:31:1e:7d:a9:
                    8e:1e:a9:b3:86:1c:95:8a:93:c2:81:f7:6a:a0:9d:
                    4e:56:f8:9d:02:90:20:e9:ff:5a:49:5e:8d:f0:33:
                    61:9f:a7:d0:64:54:87:c0:7a:ab:52:71:9d:57:dc:
                    65:7a:9e:40:5c:8e:4d:47:2c:2b:f0:f4:05:8f:83:
                    a3:7e:64:30:e8:6b:94:bf:e3:1d:69:0f:19:33:02:
                    a5:71:1b:b1:f3:77:17:ce:d1:b1:be:34:09:24:7c:
                    60:c6:a1:eb:a1:f1:f5:04:06:39:88:ca:33:1a:99:
                    fe:93:ea:ac:e3:63:7c:62:de:f1:5c:e2:61:6f:6c:
                    ff:7f:40:8b:02:3b:cd:ac:25:4f:3e:81:6f:27:a8:
                    8d:6f:2a:de:9c:bb:9e:3a:88:a2:22:4b:42:4e:8d:
                    0b:bc:86:d2:b9:2d:0c:49:53:91:f3:51:d4:6c:f9:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:42:F2:D1:95:CD:38:45:4F:99:8B:A9:4B:76:DB:F1:61:32:38
            X509v3 Authority Key Identifier:
                keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:be:b4:40:63:42:62:d2:dc:23:f3:46:61:8f:dd:fe:ae:
         4b:ca:92:c6:ca:ad:36:8b:92:ce:34:0f:96:b6:1e:bb:4b:d6:
         e0:d2:37:f9:21:9a:3b:62:d9:32:51:70:c0:5c:0b:ce:43:70:
         de:58:f5:f1:9a:37:a0:75:8e:7f:92:bd:b4:7f:e8:9f:b9:7e:
         f2:65:d1:a9:ba:ce:4b:c6:2b:c1:df:c3:8f:c8:3c:29:1c:2f:
         b1:9d:16:fd:2e:66:ae:cf:19:88:b3:b5:78:b7:2c:62:59:2a:
         11:b2:8b:a6:e1:37:94:eb:49:cb:62:10:82:d9:52:58:6b:a2:
         f9:b8:e9:a2:e5:26:5e:3f:dc:4b:e3:95:97:41:cb:52:92:b3:
         01:39:9a:4c:38:67:b3:a5:fd:3e:d0:98:76:8c:b1:c4:b9:34:
         dc:bd:ee:7b:61:ab:3d:35:69:c3:0d:3b:80:b5:f3:30:f8:89:
         b3:6f:bf:80:38:84:44:37:01:83:33:35:ff:9c:e0:12:27:ae:
         c7:5e:7f:bc:50:88:60:f8:5c:09:4f:3e:fa:79:bc:e7:bf:fc:
         e8:e8:5f:d6:2c:7b:bd:80:fc:ed:53:ee:2d:e8:81:62:1d:1b:
         c0:47:2f:e3:b1:c8:3a:65:6e:8e:b8:99:ed:e4:94:6f:6e:bc:
         70:d5:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----