Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File:                     LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier:          I928gz2WpT3K9Oim+x+q2OtgRylxK0SXVUA0QVBOJig=
Subject key identifier:   C6:CC:7D:B1:74:8E:39:8D:A8:95:A2:80:CC:25:75:27:7B:3E:BC:BB
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer:       /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial:       01962ECF79BC8472A7733F1D7064F420FFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
                          2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: Y7JVKoH6QGJUM3FG+MXLfWPupBUhQhK4kW5wpGKghm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:79:bc:84:72:a7:73:3f:1d:70:64:f4:20:ff:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=c6cc7db1748e398da895a280cc2575277b3ebcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:2e:94:80:74:23:86:0a:37:17:fc:7f:e0:
                    c4:9f:da:cb:84:0f:ea:d6:f7:c8:4e:c4:51:9d:19:
                    cd:42:db:8d:d8:ea:5a:34:38:d0:57:b5:e0:a6:fe:
                    80:a4:4e:70:a7:d6:44:ab:3e:d9:02:36:3a:97:e4:
                    0b:0f:de:79:52:99:f7:b9:2a:a2:35:f1:ed:fd:a2:
                    36:d2:0a:55:b4:f3:d7:19:fa:cf:6d:ef:04:02:9b:
                    6d:1c:ef:df:fc:e9:c1:f9:8b:f0:ba:0f:b9:52:df:
                    81:b5:80:65:b3:99:2d:3f:14:fa:64:d9:1e:69:fa:
                    a4:ba:ff:d4:5d:84:4c:46:e6:44:b7:42:6d:1c:99:
                    45:ed:85:ca:6c:7f:bc:8d:95:48:6e:73:4b:df:ac:
                    ec:14:cb:b6:0f:bd:b0:ec:b4:19:cc:81:cf:5a:2f:
                    21:72:00:75:9e:5b:c2:ec:f8:e5:8b:28:e3:60:a8:
                    07:aa:83:0a:9e:05:b5:c1:9f:57:96:71:12:a7:83:
                    4e:6e:b4:41:dc:27:e8:85:f2:71:93:78:45:6e:c4:
                    b9:ca:86:d7:ee:a2:a0:37:90:6e:64:80:7e:32:44:
                    ed:87:4a:03:49:16:d3:b4:cf:d8:d5:01:d7:ee:5d:
                    84:67:1e:23:92:c7:cd:ab:5d:65:8d:9e:c5:7a:17:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:7D:B1:74:8E:39:8D:A8:95:A2:80:CC:25:75:27:7B:3E:BC:BB
            X509v3 Authority Key Identifier:
                keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:fb:e0:6a:db:f3:85:35:8a:c4:4b:be:01:aa:22:96:96:
         6b:07:6a:a2:d9:78:56:cd:11:08:c7:a2:a9:f3:ab:79:9f:68:
         af:57:12:78:7a:7e:3e:44:08:e4:e4:4b:a2:1a:26:77:f2:f6:
         21:2d:3f:87:c1:23:15:cc:29:af:fb:94:5c:cc:e3:05:8a:e7:
         1d:2f:f3:d4:01:af:18:28:91:e2:d6:c2:1a:51:c5:ad:89:fe:
         d7:36:c5:f5:bb:16:79:e6:da:87:97:ca:47:6f:2d:97:92:28:
         b8:ae:d7:85:6a:f1:4c:0a:4e:1e:f5:1b:88:32:99:8a:68:d9:
         c6:57:85:35:f4:da:5c:64:16:cd:37:8d:a4:ec:aa:45:4f:56:
         82:66:55:59:04:3b:2e:b2:30:d5:73:f2:ad:93:1a:3a:8b:10:
         ed:78:cf:d1:79:f7:44:fd:d9:f2:03:fd:ff:6f:d7:4f:e1:12:
         c8:66:78:f3:63:b7:8a:74:1d:5d:d4:77:52:8f:58:d0:6f:e9:
         df:3c:d6:20:6c:3d:2f:96:e9:cb:c2:59:88:cf:84:64:f8:aa:
         67:11:44:7b:cf:ba:66:01:b7:b8:13:4b:77:88:6e:cd:7f:54:
         83:8d:6c:fa:00:3e:35:5a:3c:29:38:88:c8:93:bc:4d:e9:8e:
         86:7e:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----