Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File:                     LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier:          4y1ldKdniJReivWkbSshcRESRzXx5pmGQ6se79A/LD4=
Subject key identifier:   8F:15:9F:DF:72:10:3A:D3:5A:2F:44:9B:BC:28:E5:F3:05:9A:23:67
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer:       /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial:       01962F06BFC967BAEEAF8CC55122D4C1124E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: LWHyG7zt+wFzkqoVzD/M96pwDm1dOf5Z5G8Yfi8TJE8=)
                          2: _eRNvbcACjLb9zEN3lnrbv0mjjE.roa (hash: Ry+XCwkTsLP6ueqUWQ1SIxu219L75tL3GOyhLkzc9RI=)
                          3: ufpRI9yuEp7tjzAxssHQURYt3B4.roa (hash: 7g6vsYsyIBAU9MzilTSjquNoGwZYrdhjnklJiiSJri8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bf:c9:67:ba:ee:af:8c:c5:51:22:d4:c1:12:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5894923bb002a434128810607dfb526722004f
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=8f159fdf72103ad35a2f449bbc28e5f3059a2367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:53:db:93:52:a8:40:5c:a6:f2:1c:5c:ba:
                    4c:79:64:18:37:69:af:05:99:df:79:2d:6e:a1:c8:
                    76:c8:e9:8d:5b:cb:aa:a9:a0:74:62:eb:4e:91:86:
                    e2:03:fe:75:eb:43:09:7a:6a:37:2a:8b:d3:89:f0:
                    dd:66:a9:f8:9c:41:a6:df:a8:0a:71:0c:a1:11:99:
                    3b:cd:65:ec:65:ab:ea:d6:47:ad:48:5c:04:8e:09:
                    3b:bd:ef:3d:f6:cf:ec:49:c1:cd:00:68:6b:54:9b:
                    f4:ab:1b:3e:88:9b:e1:7c:0b:77:e7:c5:62:fe:97:
                    14:93:48:05:64:47:cf:71:93:34:e0:7a:65:a1:7c:
                    63:20:c8:b9:c9:a7:df:ff:af:e7:f4:0e:80:16:e9:
                    ca:a8:1a:d4:72:f3:f3:20:b0:4b:25:cf:7d:6e:4c:
                    e3:91:5a:3a:ab:77:7d:79:15:54:61:fd:0f:9f:55:
                    56:ed:8c:35:56:ae:a5:eb:b6:07:6a:9a:fd:ba:b9:
                    d6:50:64:99:1b:1b:35:55:01:9d:48:ff:75:45:56:
                    95:52:df:34:3d:85:92:12:60:68:5c:da:f6:b1:55:
                    96:39:0f:b9:3c:87:87:40:a0:6d:41:a5:83:25:2a:
                    5c:17:53:d4:71:cd:13:9e:85:16:8f:02:a2:36:34:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:15:9F:DF:72:10:3A:D3:5A:2F:44:9B:BC:28:E5:F3:05:9A:23:67
            X509v3 Authority Key Identifier:
                keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:68:ce:10:6e:96:73:09:ec:13:c7:6e:7b:67:34:e0:c9:dc:
         80:97:15:85:00:8b:46:a8:d3:9b:1c:d2:85:96:98:ae:1b:92:
         41:47:0f:eb:65:eb:cf:4a:fe:e7:81:78:53:8b:5b:2b:12:61:
         a4:9a:0b:2b:04:5a:cd:3b:f8:bb:38:7e:d0:52:54:bb:93:c4:
         3e:e9:cb:a4:12:72:cc:48:ab:2d:17:77:a1:a4:b9:84:bc:f8:
         e6:2b:39:38:f0:44:d7:77:29:44:c9:2f:51:d9:02:4c:00:7b:
         37:43:bf:5f:33:bb:e4:3c:cb:20:c1:38:ec:30:b1:99:b6:c3:
         0e:7b:37:c6:b4:8b:ba:9e:ec:4b:df:24:e5:b3:63:f0:af:10:
         3e:68:22:56:86:d4:c9:01:2b:22:95:55:9a:a7:5f:0e:f8:7f:
         b9:57:d0:eb:57:7e:60:6d:c0:1e:03:d1:03:96:e6:5c:8e:c3:
         a8:35:54:f4:02:8a:ef:cb:47:6e:8c:59:29:25:11:b1:dc:81:
         b7:d7:92:1e:93:cd:62:39:5b:4e:75:8c:95:41:4f:aa:57:e7:
         a1:4e:ac:21:11:4a:d4:82:33:e3:f7:03:d1:d1:15:7a:24:a4:
         54:09:7a:4e:48:ae:cd:69:6e:af:6c:25:27:9b:e3:0b:e3:ec:
         e8:a9:ff:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBr/JZ7rur4zFUSLUwRJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy
MjAwNGYwHhcNMjUwNDEzMTIwMTMzWhcNMjUwNDE0MTIwMTMzWjAzMTEwLwYDVQQD
Eyg4ZjE1OWZkZjcyMTAzYWQzNWEyZjQ0OWJiYzI4ZTVmMzA1OWEyMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv1T25NSqEBcpvIcXLpMeWQYN2mv
BZnfeS1uoch2yOmNW8uqqaB0YutOkYbiA/5160MJemo3KovTifDdZqn4nEGm36gK
cQyhEZk7zWXsZavq1ketSFwEjgk7ve899s/sScHNAGhrVJv0qxs+iJvhfAt358Vi
/pcUk0gFZEfPcZM04HploXxjIMi5yaff/6/n9A6AFunKqBrUcvPzILBLJc99bkzj
kVo6q3d9eRVUYf0Pn1VW7Yw1Vq6l67YHapr9urnWUGSZGxs1VQGdSP91RVaVUt80
PYWSEmBoXNr2sVWWOQ+5PIeHQKBtQaWDJSpcF1PUcc0TnoUWjwKiNjTrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8Vn99yEDrTWi9Em7wo5fMFmiNnMB8GA1UdIwQY
MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt
YWVlNTkyN2I0ZGQyLzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy
LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWjOEG6W
cwnsE8due2c04MncgJcVhQCLRqjTmxzShZaYrhuSQUcP62Xrz0r+54F4U4tbKxJh
pJoLKwRazTv4uzh+0FJUu5PEPunLpBJyzEirLRd3oaS5hLz45is5OPBE13cpRMkv
UdkCTAB7N0O/XzO75DzLIME47DCxmbbDDns3xrSLup7sS98k5bNj8K8QPmgiVobU
yQErIpVVmqdfDvh/uVfQ61d+YG3AHgPRA5bmXI7DqDVU9AKK78tHboxZKSURsdyB
t9eSHpPNYjlbTnWMlUFPqlfnoU6sIRFK1IIz4/cD0dEVeiSkVAl6TkiuzWlur2wl
J5vjC+Ps6Kn/Sg==
-----END CERTIFICATE-----