Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
File:                     Lokc9xG_fhxC4ILWoviaBL7rldE.mft (raw, json)
Hash identifier:          GXUZBQbJTKVKoHSHKHaLKhQkjNVTR5KoY7QP7D0y4nM=
Subject key identifier:   57:D8:C3:10:40:21:E8:D7:B0:F6:5A:53:BF:1F:6E:E6:EA:FD:06:AC
Authority key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Certificate issuer:       /CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Certificate serial:       01962F3D434E52ABB170FCF0FB55586CD1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
Manifest number:          EE
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: Lokc9xG_fhxC4ILWoviaBL7rldE.crl (hash: e5riKzDQ0DtrTDeR8yoh8mTkEHiGSE6B/FjxRltGeOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:4e:52:ab:b1:70:fc:f0:fb:55:58:6c:d1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=57d8c3104021e8d7b0f65a53bf1f6ee6eafd06ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:89:8c:d5:13:78:93:86:31:c7:ef:2b:4a:
                    32:ed:44:00:05:34:ff:c6:00:c2:fb:88:02:e8:41:
                    ca:35:23:3b:2b:92:a9:46:35:fb:d1:5b:7a:d8:6b:
                    44:b5:eb:3e:08:a2:1b:52:99:ba:e3:3d:91:08:14:
                    9a:78:18:2a:3b:60:34:6f:a7:60:4b:ce:93:c1:f1:
                    62:6e:d2:c6:96:b5:f9:50:33:a2:43:db:b5:b0:81:
                    92:56:7a:64:e2:f7:b3:5e:72:02:90:d6:4a:e6:e4:
                    47:54:03:a7:c0:91:7a:d0:c7:47:50:23:21:01:fd:
                    c0:87:52:13:40:b8:c3:17:5d:73:0b:ea:aa:52:fb:
                    c2:57:ec:66:6e:c0:6f:35:27:5c:41:bd:a5:c0:c6:
                    c6:92:90:da:4b:4a:29:4d:f7:26:af:ba:70:ca:54:
                    67:71:78:ad:b7:c8:b8:b7:fb:c2:bc:15:d2:bc:ac:
                    c9:d8:1a:ba:de:84:df:0d:37:f6:d0:a5:8d:4e:1a:
                    aa:8d:1c:db:43:68:84:09:2e:c1:5e:b2:d9:ad:dc:
                    d1:29:09:70:01:de:da:5e:21:cf:5e:e7:60:3f:86:
                    c9:24:50:10:13:ba:8f:a8:6d:1a:83:45:e6:9f:dc:
                    57:78:59:96:98:df:03:51:60:d5:a4:42:09:fc:a3:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:C3:10:40:21:E8:D7:B0:F6:5A:53:BF:1F:6E:E6:EA:FD:06:AC
            X509v3 Authority Key Identifier:
                keyid:2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:85:58:8e:ff:6e:27:76:20:a6:07:11:d6:a9:fa:66:3d:09:
         41:9f:92:71:71:70:4d:26:39:c2:19:f8:63:96:a9:d0:91:da:
         d4:09:26:6d:d9:47:ec:4e:b9:89:c0:b2:20:2d:f6:69:a2:ef:
         ac:ec:81:d7:a8:e6:19:a8:b9:85:20:97:88:09:1e:fe:89:d8:
         8e:a4:23:09:d4:ef:a3:8b:58:27:43:f7:ee:2e:de:3a:9d:c9:
         ba:90:3b:2a:45:29:39:8f:69:95:44:4d:b0:c5:f4:45:cf:44:
         53:61:a1:84:af:1d:aa:37:fc:7f:58:07:df:b8:a3:e9:ef:21:
         a2:f8:9b:29:74:26:d4:c2:3c:cc:57:5b:96:b1:df:ee:eb:50:
         94:0a:88:72:39:af:2c:69:86:f7:9c:4e:9c:2d:0c:75:c7:cf:
         e5:ed:cc:da:00:f1:66:2b:2d:ee:9d:62:94:f2:4c:5c:a0:67:
         6a:c7:cf:e5:d2:4c:ac:3e:bb:1c:62:e6:7b:31:b6:4b:fd:74:
         22:2c:c6:fb:86:40:75:b0:fe:66:72:b9:eb:25:50:25:78:09:
         68:ca:4a:f0:b6:fb:7a:b5:41:ed:85:4f:9a:7f:2c:08:73:f0:
         6e:98:3d:31:df:74:6b:79:92:e4:aa:34:79:f9:e6:07:ef:cc:
         96:3a:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----