Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File:                     LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier:          dLT7dDeLEz2oKXorFWt/P88VVCKuWCmcUB+2zgT5CEI=
Subject key identifier:   5D:75:B6:D5:1C:D8:8E:81:6D:12:70:32:9F:8E:3B:CE:F9:6E:E8:E5
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer:       /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial:       01962E61AA64014850F848B9728A81481C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number:          1450
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: yyJznDfe4ByglxTCu8xWcylEqtiCWVRqA5e8b7GRXlg=)
                          2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
                          3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:64:01:48:50:f8:48:b9:72:8a:81:48:1c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=5d75b6d51cd88e816d1270329f8e3bcef96ee8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:6b:23:ea:27:79:17:3f:d8:c2:4a:e0:89:
                    8f:c7:9a:b8:7b:c3:4f:22:24:c0:f9:83:1e:6c:93:
                    89:80:3e:fc:3f:5e:00:f2:36:ae:20:f9:13:df:2e:
                    35:09:74:6f:96:d4:ec:79:f8:ca:0c:e3:ef:31:36:
                    c9:78:4e:96:24:52:be:08:7d:97:d3:f1:5f:0d:19:
                    28:43:8a:05:83:6d:96:88:be:3a:79:f7:7b:5b:be:
                    7a:bd:e6:ea:fc:dd:af:68:2f:b1:50:d5:c8:d5:4b:
                    66:ad:e9:ac:7a:31:90:ae:a4:b2:ca:8e:93:57:27:
                    33:bb:94:9c:a4:d1:75:79:b1:6a:20:e6:98:e7:01:
                    35:ec:14:a6:75:1d:bf:70:41:55:ef:6f:ec:6b:9b:
                    e5:8a:8d:39:5f:34:ef:86:3a:cc:4e:e5:9d:66:04:
                    cb:59:30:be:7c:5e:ce:9c:e4:04:52:f5:5a:d0:79:
                    38:13:a7:89:0b:fd:b2:7f:4c:69:00:17:64:ac:68:
                    28:58:f8:b6:db:9e:3a:84:60:4a:42:17:2a:91:99:
                    5e:12:1d:12:1b:91:56:89:4f:9e:b7:f2:09:68:29:
                    f2:57:a8:c8:8b:94:e0:68:66:96:3f:74:9c:af:a9:
                    9f:b1:89:6f:8f:33:df:35:28:f5:4c:15:2d:6c:54:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:B6:D5:1C:D8:8E:81:6D:12:70:32:9F:8E:3B:CE:F9:6E:E8:E5
            X509v3 Authority Key Identifier:
                keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:88:95:54:5b:f0:82:37:16:ca:bf:95:89:46:d3:ec:5c:e6:
         f3:52:64:2d:a1:0c:2a:c3:db:c8:d9:b6:f7:d9:12:dd:3d:3c:
         62:d5:fb:a1:19:2c:55:b5:fe:3b:d3:17:d6:8e:65:53:17:ab:
         92:47:1c:12:11:11:20:3d:3c:f9:d5:39:b8:8b:58:d1:56:07:
         7e:b1:16:ce:11:30:d7:fa:20:69:92:ce:eb:d5:5a:c7:26:fc:
         9c:ac:61:17:d6:73:f1:3c:7f:35:59:dc:55:1c:f4:3f:0b:c6:
         e8:4a:98:49:4d:4d:43:74:33:99:83:d3:6e:d2:42:97:7c:7e:
         5c:c8:e3:88:1d:4f:4a:cd:47:9d:32:87:a4:9a:12:c0:df:46:
         3c:f0:e6:05:89:7f:50:c6:a5:86:23:e1:7e:d9:d5:ba:78:20:
         ae:ca:9d:9f:3e:7c:34:92:a9:9b:38:cf:13:4f:58:0f:59:59:
         a2:e0:3a:aa:31:d4:09:db:3c:30:4f:9e:1c:05:63:ce:4a:91:
         e2:9e:a4:69:c2:d9:3b:a6:4b:7e:9c:56:df:0c:5b:a9:15:fe:
         8f:1b:db:12:9b:fd:2d:0d:ba:99:ee:ab:f6:51:a5:b9:a3:74:
         e0:ed:75:20:c0:8f:99:9e:f7:b5:2d:76:09:94:d8:03:e7:93:
         b2:de:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----