Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          3zrPiI+fKRTny7zMa9N6wHelFdbrydZosQc2MTRHU6g=
Subject key identifier:   C0:27:A3:D4:C1:C0:F1:D7:0D:D9:6E:58:E7:FA:C0:33:A6:8B:B4:27
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       01962F74D3943139CA2F51125118E499465B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          013E
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: ogyYq/sKhY0msgQAkIs5AKMHQ3ZGFoqrQ2vCYClrAdg=)
                          2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
                          3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
                          4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
                          5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:94:31:39:ca:2f:51:12:51:18:e4:99:46:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=c027a3d4c1c0f1d70dd96e58e7fac033a68bb427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1b:81:70:06:28:2d:af:86:98:0b:e7:4e:f0:
                    d5:cc:88:64:5f:71:0e:e5:2c:92:f0:37:8f:4f:0b:
                    bb:88:6c:e9:ef:85:20:0a:83:09:97:2a:ee:88:4e:
                    0f:71:a2:31:33:76:dc:44:87:72:c9:2c:86:83:01:
                    23:4f:9f:28:18:5d:63:1e:48:c2:38:7f:8c:04:5f:
                    5c:eb:52:52:89:93:13:79:c8:42:52:f8:7a:b8:0d:
                    d4:12:75:b2:9f:f6:5c:52:ea:1d:39:c3:7a:22:45:
                    f6:af:ed:bf:2f:49:4e:af:d7:42:a6:94:3b:c0:73:
                    9f:33:c8:e5:ce:c6:27:71:20:b1:15:d6:ee:8e:1f:
                    59:51:c0:c4:6a:28:56:ec:dd:18:1c:f8:65:1b:2b:
                    02:f9:16:95:79:b2:78:67:84:b8:2f:52:19:ee:05:
                    f2:15:a3:e8:b4:f6:39:26:bb:5a:3b:9d:6a:fb:0d:
                    dc:a5:67:f2:4e:fb:59:7b:7a:f0:1f:3b:01:c7:33:
                    8d:5c:a0:46:52:ae:9a:c3:08:cc:77:72:77:a1:5a:
                    75:42:3a:27:b5:4e:4d:3f:2f:9c:e9:77:d5:af:ce:
                    77:be:42:50:c7:99:81:11:4a:cf:a9:0f:d9:99:77:
                    bf:59:3d:b8:2a:ae:6b:1c:35:40:bf:c1:73:c4:a3:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:A3:D4:C1:C0:F1:D7:0D:D9:6E:58:E7:FA:C0:33:A6:8B:B4:27
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:87:bc:12:ee:2a:23:4b:79:59:83:24:11:01:c6:09:bc:
         d7:a3:7b:7c:c3:94:dd:20:b1:c4:df:98:7c:cf:06:e2:cc:60:
         f8:20:87:be:6d:f5:3f:61:ad:08:ab:9b:95:51:ff:91:b2:f3:
         45:0f:d3:f4:97:ba:e8:1e:ae:f3:a3:a2:51:14:08:10:9f:b6:
         d7:c5:77:80:4f:c3:ac:2c:97:e9:e4:f7:10:04:05:d6:b0:b1:
         96:47:66:e2:75:08:2f:4d:30:42:68:71:66:4b:bf:1b:a0:62:
         53:7b:25:58:f6:20:5d:8f:91:51:bd:e6:cf:aa:9a:7e:66:d0:
         ed:69:01:15:03:38:fe:7c:63:55:be:3a:bb:2c:6d:88:0d:3f:
         06:77:0a:a7:97:11:ed:b5:a4:46:11:72:d5:6d:99:47:a0:26:
         6e:69:f9:00:7c:00:06:16:78:7a:5f:91:27:c6:fa:db:88:cc:
         e3:f8:5c:14:d5:55:eb:19:a0:ca:f7:79:90:a0:2e:45:f3:7f:
         62:7d:12:00:3e:9c:15:12:93:82:0f:75:65:92:c5:80:bd:ff:
         b5:4f:88:07:cb:a7:4c:e1:37:2b:a5:6b:ed:7d:7b:cc:5e:ae:
         d2:8f:6a:f2:ec:ad:61:e4:f7:5f:71:51:b5:06:2b:bc:fd:21:
         cd:28:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----