Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
File:                     lUBmkfLjdO43pkBJKjZN_FO6RBI.mft (raw, json)
Hash identifier:          D3DIQ38s4dwEBQfUxUZgNJ4hOlOQO2OfbvCBb9hkl9s=
Subject key identifier:   8A:4A:1D:D2:8F:53:C8:FE:64:1C:05:6B:D0:45:9E:44:57:4D:18:29
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Certificate issuer:       /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial:       0193FDE7621C9C98915136E7B4F476E81E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
Manifest number:          13C9
Signing time:             Wed 25 Dec 2024 13:00:19 +0000
Manifest this update:     Wed 25 Dec 2024 13:00:19 +0000
Manifest next update:     Thu 26 Dec 2024 13:00:19 +0000
Files and hashes:         1: MgovnyBuiQJnDJrFLNV-JS6Zatw.roa (hash: mbaOxBIV4Nsoc0MM1/Uy46D/rKsQE3Ree//AGKtAi8I=)
                          2: OCfk8a4AVa7fwNgkHNEQMnss8E4.roa (hash: aynvRDkjlUgqMpx+ScZgdMmALbmwshDelkQVQPOOxxY=)
                          3: lUBmkfLjdO43pkBJKjZN_FO6RBI.crl (hash: kiZ/JqsKNV/48hJ9PR2DomaPcxqpBJ9kdEmlKwDMPhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fd:e7:62:1c:9c:98:91:51:36:e7:b4:f4:76:e8:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
        Validity
            Not Before: Dec 25 13:00:19 2024 GMT
            Not After : Dec 26 13:00:19 2024 GMT
        Subject: CN=8a4a1dd28f53c8fe641c056bd0459e44574d1829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:96:e2:db:5f:43:f4:01:5f:61:09:3b:d0:
                    b5:0f:d3:f0:b9:07:40:d2:32:57:18:b4:85:98:3e:
                    3f:7e:17:f7:0c:d4:fd:2c:48:a8:9d:25:a7:3f:c9:
                    05:e9:59:e2:17:f3:18:25:aa:b2:4d:12:d7:c1:6c:
                    08:7c:5b:3f:d3:fb:90:ad:39:20:4b:d5:e3:38:29:
                    12:1e:99:40:3d:96:a0:09:82:1b:1c:38:4c:50:bb:
                    54:d4:4c:54:54:58:f3:ab:2f:cd:f8:c9:13:08:8f:
                    a8:3b:a0:a4:57:5f:60:c8:e9:41:5e:ee:7d:b6:ae:
                    28:93:f9:f3:23:23:e8:a9:85:49:67:0c:33:42:52:
                    0f:43:e0:4a:d5:aa:bd:e5:1f:8b:3d:b1:30:3a:4a:
                    2f:55:65:d5:09:7b:7e:d2:44:e2:38:43:12:53:87:
                    b6:34:98:31:e4:69:22:53:38:b0:d6:79:0e:a4:f8:
                    a8:bb:9e:3c:e7:21:c3:3b:1c:10:b6:cd:a4:fd:3d:
                    45:c2:82:de:f4:95:b6:a1:b8:14:8e:60:a9:05:81:
                    6f:a8:d2:63:57:ad:90:62:74:41:ba:ee:0f:6d:f0:
                    17:34:85:d2:cf:0b:e4:ac:fb:3e:64:53:cb:c8:ef:
                    48:79:1c:49:f5:4e:c5:82:52:14:97:9d:44:d2:7c:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4A:1D:D2:8F:53:C8:FE:64:1C:05:6B:D0:45:9E:44:57:4D:18:29
            X509v3 Authority Key Identifier:
                keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:97:6f:31:16:79:58:72:79:bd:66:de:09:63:71:8f:5a:19:
         50:e0:37:c4:e3:f2:a8:b8:42:64:b9:8c:cc:f0:ed:ea:82:03:
         3e:b1:ff:78:f5:36:54:7f:dc:4f:68:81:7d:83:88:39:bc:df:
         df:15:0e:94:c5:ef:d5:9c:48:be:9b:d2:ff:ed:c5:2c:c8:66:
         51:b2:c3:a7:92:c9:6e:8d:b2:2e:fe:8a:1a:71:5a:c4:01:99:
         1d:08:ff:8f:4a:d0:0e:34:f8:71:34:d7:b1:fa:45:1d:41:fd:
         85:f2:5b:12:e1:1d:20:c1:a4:6a:b3:7c:db:cb:83:e5:a0:f1:
         14:c4:96:f8:04:43:aa:41:3d:c0:ac:a2:d6:81:71:ce:c1:e6:
         b1:38:16:92:9e:25:60:d3:b2:82:1c:dd:90:d4:1f:72:37:dc:
         e5:7b:9f:ca:52:47:1e:21:b9:46:56:7b:52:54:88:02:29:14:
         36:5a:a8:e3:97:d2:fb:90:c4:08:c3:7c:72:8e:4f:e1:03:8f:
         a7:82:2a:f0:84:e0:37:20:f1:b4:74:ae:52:6e:78:d5:6d:fa:
         24:f2:62:d4:cb:39:ba:13:c6:e7:a1:37:fb:91:8c:58:5c:88:
         a2:ab:ad:08:51:f2:e0:bb:92:f9:cf:79:5e:82:1b:8f:af:08:
         61:cc:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----