Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File:                     lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier:          oYAYcXNWEpd3+ou7Rh6EvxwqFJtOEHRsuuWiRdEDEm4=
Subject key identifier:   88:A4:D6:68:79:E1:80:3D:C2:AE:AC:0E:11:89:6A:FA:EF:1A:E5:D4
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer:       /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial:       01962F3D54D1E1E39BCFCAEAB6342843A6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number:          14A5
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: DBxzAZVNSJPu_D0QGXT-19vacIM.roa (hash: bIWX7NiEWiqzGP0lZHaLTFhN+7dD70TkNkDzreVHTKQ=)
                          2: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: quREeAN6EtPH5d3hD5EG5Wun8RdGkUcoD/EsRKLXS0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:54:d1:e1:e3:9b:cf:ca:ea:b6:34:28:43:a6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=88a4d66879e1803dc2aeac0e11896afaef1ae5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:cd:37:f2:fb:09:a7:b9:84:50:17:56:0a:
                    1a:4a:3a:65:7b:fe:1f:f7:fc:7b:aa:cb:51:0d:ae:
                    f0:a9:1a:7e:1f:fe:e4:0a:c5:01:52:99:cf:bd:d1:
                    83:95:30:4b:9f:c9:cb:d4:20:df:d5:2a:71:e8:98:
                    de:94:de:e5:0b:aa:d4:1f:b6:f6:a6:70:c6:f8:6a:
                    0a:4c:07:47:33:a4:d6:74:4b:b3:ed:82:a0:6f:49:
                    e6:1b:b1:09:92:2e:2e:f9:32:22:f5:13:2a:0d:36:
                    64:99:0a:77:db:72:c0:40:ab:5a:62:c6:2a:96:97:
                    9b:66:6a:cb:b3:15:30:d2:4a:dd:d2:6b:f7:64:db:
                    9b:b5:47:cf:98:ad:7f:ac:ba:8a:2d:3f:8b:05:6a:
                    17:c7:39:fb:43:28:80:3a:f4:99:2d:e2:34:ed:42:
                    ac:a8:e3:2f:b8:2c:94:51:7e:bb:b4:71:a6:a3:16:
                    90:80:34:dc:fd:3b:d9:8c:af:47:95:02:9c:a6:92:
                    7e:56:ac:c0:c6:4f:67:94:3e:61:f6:12:ac:b6:50:
                    82:b5:18:76:92:8c:c3:87:ca:48:73:ce:d8:58:7f:
                    a5:d8:2a:79:04:24:e1:60:af:d8:1d:d7:27:15:84:
                    d7:c3:00:41:92:a5:a8:2d:f2:e3:e0:eb:0f:15:4d:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A4:D6:68:79:E1:80:3D:C2:AE:AC:0E:11:89:6A:FA:EF:1A:E5:D4
            X509v3 Authority Key Identifier:
                keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:89:b1:ef:12:ef:4d:36:67:29:5f:be:eb:19:a5:a3:08:99:
         76:a5:55:4e:82:37:08:77:58:57:d9:24:ed:74:de:19:c0:50:
         b3:9c:4f:9a:d3:85:f9:35:91:72:a5:a6:f8:5e:11:fb:d9:ec:
         3e:c0:c6:eb:00:b5:5f:bf:9f:78:12:11:b4:a5:b7:dc:7b:d1:
         7a:ef:ea:ee:cb:74:09:92:e3:e9:56:d4:93:d3:d6:d4:76:21:
         a2:b2:da:18:97:c8:0c:3a:7c:ea:b5:22:29:84:f7:ed:81:a6:
         9b:d1:18:d4:8b:6b:a4:7d:73:21:bc:5b:62:36:5d:27:15:1f:
         cc:49:ab:75:6c:43:67:99:9c:02:36:91:b8:25:df:23:dc:97:
         a2:10:48:02:e9:5a:44:6f:68:b6:7e:37:77:96:d7:17:00:38:
         61:82:73:9d:23:eb:27:7c:e2:39:d4:6a:6d:ac:f4:b1:42:7c:
         6e:01:b7:2b:7a:cf:a7:4e:43:ee:30:bd:98:a8:30:89:4f:88:
         2f:aa:5d:88:a3:95:e6:05:32:c6:e9:2f:e9:7f:e2:5d:79:ae:
         e0:d0:58:a9:43:e7:8f:4e:01:74:08:19:58:5c:81:26:85:19:
         3c:81:1f:87:1f:c2:16:b3:f9:b7:9e:da:2c:48:5f:78:23:14:
         0e:df:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----