Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
File:                     LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json)
Hash identifier:          XfHinGVKw2xNYfdPzIchJ5MS+PL9TIK7/3iGJ3EyprY=
Subject key identifier:   71:BA:AE:70:40:2C:26:79:09:7E:76:82:A6:53:89:96:B9:AD:B9:0E
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Certificate issuer:       /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial:       01962F0746542CD2AE434465365DA15D733F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
Manifest number:          12BF
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=)
                          2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=)
                          3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=)
                          4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=)
                          5: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (hash: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=)
                          6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 4aAwTGE82s6y1zLBGdKhXW00/DEyHJ2a8bpcSuKkKAQ=)
                          7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=)
                          8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=)
                          9: NZa0gIfmJGTWop9klB_kmws3bBk.roa (hash: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=)
                          10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=)
                          11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=)
                          12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=)
                          13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=)
                          14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=)
                          15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=)
                          16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:54:2c:d2:ae:43:44:65:36:5d:a1:5d:73:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=71baae70402c2679097e7682a6538996b9adb90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:79:9b:cb:7e:cc:ce:14:2b:55:41:44:80:
                    7c:31:71:1e:79:e9:09:a3:0d:5b:0d:9c:f8:f8:ef:
                    c7:e9:be:ca:3f:20:85:22:c3:d1:d7:96:88:6c:7d:
                    59:85:9b:a8:cd:c0:e9:39:a4:92:04:87:d9:31:db:
                    a8:56:ea:c4:d1:c8:45:a3:aa:f4:ad:de:75:5c:76:
                    98:0f:f9:98:55:13:c0:6a:87:b3:7c:fb:e8:a2:8f:
                    54:3b:37:bb:12:33:bd:17:cc:eb:7f:82:74:6d:af:
                    f7:be:72:99:4a:1f:57:50:29:03:3f:34:1b:dc:7e:
                    82:14:8e:f4:47:92:b6:9f:22:d2:84:fa:37:4f:7a:
                    95:cb:35:40:30:22:50:86:4e:98:e8:da:78:48:c6:
                    6e:d4:6e:2c:1d:90:35:1b:64:6c:77:a7:79:95:a0:
                    cb:d8:d8:1a:44:62:97:c2:2f:61:b1:a7:ab:76:0e:
                    de:a3:e1:ff:46:c5:06:bd:b0:1b:99:d2:67:9d:ae:
                    d4:b1:63:e7:0c:76:0c:8f:e6:c7:03:ce:74:e2:98:
                    c3:1f:12:0a:f8:a4:e5:81:96:b5:e8:4c:5e:82:67:
                    33:90:22:cb:8e:51:ea:37:f0:09:1d:a2:be:54:6a:
                    20:bf:30:54:46:0f:0e:6a:c2:26:75:c4:e8:bb:c0:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:AE:70:40:2C:26:79:09:7E:76:82:A6:53:89:96:B9:AD:B9:0E
            X509v3 Authority Key Identifier:
                keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:1c:e5:d1:8b:8b:0b:79:6e:20:3c:fd:3a:6f:00:cb:39:
         fe:e3:f8:28:c0:2a:3c:16:cf:e1:18:62:cc:88:c3:95:e2:99:
         68:36:e9:2c:e8:0e:1e:89:09:11:84:d9:29:bd:c7:3a:4a:b4:
         85:cc:34:ac:7b:69:db:28:29:d9:74:46:d0:26:a0:70:37:ba:
         94:c7:76:46:9e:a8:55:0c:9c:d4:1d:1b:c3:67:9f:d6:67:8f:
         61:c3:9e:b1:22:e1:fe:40:b1:0b:fb:26:e5:2f:81:d0:6a:5d:
         71:7e:ba:d1:f2:3e:5c:ee:fc:bb:9e:31:67:3f:93:d8:71:db:
         18:fe:af:93:c6:43:93:47:4c:98:7a:0e:9f:77:7b:6d:b8:ee:
         17:71:dc:a3:ee:e6:a3:e5:42:74:75:a0:b0:12:e0:9d:ae:28:
         7b:04:85:c2:ef:9d:e4:4d:b1:87:64:e6:ec:96:43:6e:d3:d9:
         eb:0d:c6:43:6c:30:3b:32:a8:01:5a:e3:5c:b5:dd:a4:23:9f:
         02:41:f8:94:ef:37:da:ad:d1:3b:c3:2b:2e:a4:2b:08:9a:f6:
         81:af:b9:45:61:e2:8e:e0:53:a2:8f:90:22:a6:10:67:9b:39:
         e9:ee:a1:70:6a:e5:01:40:d3:5a:6d:5b:fd:ad:6d:94:25:d4:
         43:ce:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----