Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File:                     LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier:          C79Oz0liZEmCgVERnt4M4Spl9oA6F4HvI+LNeWpZeuo=
Subject key identifier:   E0:C0:0D:2B:F3:2E:01:D3:03:6B:81:4F:8B:A0:C4:56:6C:7E:F6:F3
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer:       /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial:       01962F3D4B292DD5B6DA28B6F7F1669FC9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number:          053B
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
                          2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: EWTUjXayBJGpm0gzBRXdUuJL6ptzpZaN+p0dVYr9S0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:29:2d:d5:b6:da:28:b6:f7:f1:66:9f:c9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=e0c00d2bf32e01d3036b814f8ba0c4566c7ef6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:bc:e0:80:de:03:55:43:b3:6d:e3:cf:2c:
                    ae:40:7d:62:ad:25:4d:2d:c6:3c:e3:06:e3:66:e5:
                    b9:86:c2:49:ee:98:82:15:f0:ac:8d:54:45:25:d2:
                    b4:60:97:2f:54:88:06:83:fa:b8:67:42:e8:69:93:
                    0b:27:d9:24:fa:ae:7b:0c:1c:53:42:43:4b:80:ba:
                    d4:c3:4f:3b:12:2a:ee:fa:fd:01:fa:22:34:29:f0:
                    46:36:f0:4f:e1:1e:a6:d2:71:6b:06:84:77:e7:ec:
                    b7:29:ce:44:d6:50:e5:51:1a:f4:87:35:b3:d7:0a:
                    c8:19:45:0e:15:48:49:66:57:43:ba:64:ce:3e:2e:
                    71:15:27:ec:ab:d2:68:0d:f9:3b:64:d1:68:bf:2b:
                    ce:4c:4d:60:32:a7:85:28:e1:02:29:f0:6d:33:46:
                    8e:a6:fc:f4:65:c7:09:4c:f1:ec:34:e1:2e:5d:13:
                    66:4e:2b:c9:53:c0:42:e4:2a:e8:aa:a0:5f:b6:62:
                    72:e1:90:32:61:2e:34:61:1d:09:3a:24:3a:d3:36:
                    64:1c:18:69:41:51:b4:b5:24:21:09:9f:08:7b:d1:
                    94:bd:44:83:f9:37:27:8c:19:92:49:80:49:6a:0e:
                    4c:76:86:2a:6f:db:4a:1e:33:e9:a5:30:79:1c:1f:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:0D:2B:F3:2E:01:D3:03:6B:81:4F:8B:A0:C4:56:6C:7E:F6:F3
            X509v3 Authority Key Identifier:
                keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:af:5e:14:e9:9c:b9:d4:3f:5f:f6:07:13:96:6c:e3:15:06:
         27:c7:99:7a:ec:cc:66:fc:74:68:4c:44:d4:df:e6:22:ed:5e:
         cf:93:e0:da:38:fc:c8:07:e2:6a:14:df:0a:7d:ab:dd:b4:a6:
         58:8b:e0:b6:47:f3:9b:80:3b:a5:64:80:1e:a3:4d:41:92:0f:
         df:cc:9e:ca:04:ab:ee:bd:0f:a4:91:18:e6:25:10:d8:89:fe:
         59:a0:43:51:88:cc:f3:67:43:f1:17:33:b6:80:7b:13:2f:5b:
         13:72:6c:5b:15:88:ce:d3:4b:b8:ab:52:29:94:ea:e0:71:ff:
         a1:2f:ae:c8:b7:7b:89:8d:1d:1a:66:fa:4c:e4:50:1a:9b:24:
         5c:cf:9d:3f:9f:89:02:ef:35:c9:a1:ab:1c:62:be:cd:66:63:
         1c:15:2c:3a:b7:f3:92:79:a7:0d:26:1b:2e:80:9d:35:3d:9b:
         70:87:9e:7a:b8:07:af:f6:51:ff:d5:8a:fa:1a:db:92:cd:74:
         4a:7d:52:c2:ba:eb:ab:b8:50:51:d1:e4:61:e4:5b:80:6c:6b:
         26:2c:ab:1e:c3:f1:fd:56:8f:d8:d9:1f:6a:92:f7:e1:2d:ac:
         6f:22:2c:fb:e2:bf:4d:70:02:65:65:d5:51:72:fc:6d:9f:f1:
         13:f4:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----