Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
File:                     lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json)
Hash identifier:          nxN08O0y0h6OKRHzhkBHGYTq7gQTN3YujNCOVkNK3EA=
Subject key identifier:   E1:5F:2E:D2:B3:CD:46:1A:A1:8E:53:09:97:40:97:27:08:67:43:A2
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Certificate issuer:       /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial:       01962E98A1C53622E53AF5ADF6074DAD3E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
Manifest number:          1441
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: V6dzQYTukirsU-gqtCUSWtxmwyw.roa (hash: TAhPxTUSZwI4JsrpdkkvjRG18+wELOBapOWsonm/zpw=)
                          2: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: Sq74BmF+TyYBqYu/UhKspbAkUBwMt5vPSXEkdXmKVQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:c5:36:22:e5:3a:f5:ad:f6:07:4d:ad:3e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=e15f2ed2b3cd461aa18e530997409727086743a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:a8:39:cb:4e:2b:f7:00:2f:7a:35:6d:45:
                    8c:9e:26:37:51:2a:c6:c9:5f:7f:49:6f:a9:be:8b:
                    f3:a7:58:be:74:d5:f6:85:3f:ff:59:02:58:cb:d2:
                    e9:08:03:df:a0:bc:a9:64:b7:08:44:0a:41:7e:73:
                    70:c4:f1:d9:b8:c2:90:f1:36:5b:71:94:78:ee:e5:
                    a7:24:73:d9:b6:5c:2b:ab:f5:47:38:82:70:38:cf:
                    c2:69:b6:b6:97:11:e9:d3:ec:e7:3c:a1:90:c7:0d:
                    fb:f1:e9:5c:7f:ba:fb:58:2b:26:aa:db:3b:70:1a:
                    68:0b:13:00:c6:82:1d:3c:5b:b9:e9:af:27:16:8b:
                    47:f9:49:86:0e:ba:68:52:ee:1e:4c:c0:dc:1f:f4:
                    47:31:8b:c1:c8:22:3a:03:39:58:fd:ba:12:44:03:
                    c6:18:9b:0c:1c:e5:a9:a7:24:74:9e:87:42:f3:4d:
                    d0:7d:4d:e5:bb:03:70:9d:07:35:1f:4f:ad:91:69:
                    b2:13:0a:04:54:7d:d5:68:9b:59:a5:e2:f8:af:00:
                    35:6b:28:5d:e7:8f:52:94:5c:58:9d:e6:8c:08:d1:
                    24:9b:04:ed:0a:8f:3c:7c:01:bc:db:45:73:5e:57:
                    50:93:bb:49:a5:bb:51:61:0f:49:41:5c:f4:3b:fc:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5F:2E:D2:B3:CD:46:1A:A1:8E:53:09:97:40:97:27:08:67:43:A2
            X509v3 Authority Key Identifier:
                keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:14:40:2a:54:b7:01:a4:77:f6:48:f4:40:02:12:ad:d4:bb:
         25:f8:9c:b1:c0:38:4e:f4:37:9d:b3:8e:a3:88:4e:5d:dc:33:
         ef:de:f5:ea:d8:2f:00:62:b2:76:84:9b:86:41:ef:dc:c7:83:
         67:da:a1:d0:19:1c:81:f2:2a:b2:b4:fe:0e:ef:b4:cc:cf:53:
         1d:55:0f:4e:0d:36:30:de:89:f8:a7:b8:71:29:64:9c:70:ca:
         b3:5d:3e:d4:61:1d:5b:89:4c:45:12:74:33:4c:f9:3d:cd:1a:
         d3:55:2d:93:14:c9:95:50:6a:53:64:77:a4:ca:8b:66:89:ab:
         02:65:b0:65:28:7a:4d:b8:00:26:8c:1a:9c:c3:d4:3f:82:8e:
         9d:1c:ec:63:ac:5f:6e:c9:f0:4c:10:06:a4:7e:72:9e:91:fc:
         8f:c4:f3:68:05:cf:c9:65:28:52:1a:34:75:37:9f:87:a8:8a:
         fe:60:1c:ab:62:50:c2:d3:94:32:65:5b:ab:9d:79:95:06:ec:
         cb:28:a8:4a:00:cc:2c:77:f9:fe:5f:13:3f:23:e1:c0:ad:c4:
         3a:b8:e1:2c:3c:84:18:a2:56:81:26:93:d4:1a:59:86:a6:a5:
         55:e9:97:a1:0c:f9:43:9a:32:49:bb:eb:97:24:ad:62:99:e0:
         a8:72:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----