Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File:                     lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier:          9fwxKlCD/S6xC/Fo1L5cYpG96X6oadiVMohiyROVu9I=
Subject key identifier:   45:41:C0:04:ED:84:1B:67:90:A7:1E:D3:26:11:4B:C0:63:40:B6:70
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer:       /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial:       01962F3D601078CD6A45577A59810B2F5AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number:          041E
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
                          2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: hRXc5jb+dcXZHc4dl55hX57fHWMTiTnQ6btDArDfRFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:10:78:cd:6a:45:57:7a:59:81:0b:2f:5a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=4541c004ed841b6790a71ed326114bc06340b670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:3f:0c:fe:d9:13:04:63:9b:14:db:f2:2a:
                    fc:61:e6:77:73:f3:72:4f:2c:9d:2b:c7:29:35:b7:
                    d6:9a:6d:d1:e4:77:14:ee:7d:4d:48:e6:e4:d9:70:
                    08:bf:57:e3:dc:cc:ea:40:98:9e:8a:07:68:9c:d0:
                    02:e7:da:22:99:31:6c:ba:1c:47:26:36:d8:d5:98:
                    7d:b5:2a:bc:31:de:8e:37:16:8e:25:7d:ca:ed:25:
                    09:f2:06:e7:77:e9:4d:72:cd:d7:f6:5a:6c:b9:11:
                    85:e3:48:56:c9:bf:13:cf:b4:ca:c8:31:29:a9:40:
                    af:c8:02:14:22:08:5f:c5:bb:48:cf:6a:a4:a5:82:
                    b8:f0:21:2b:c0:bf:53:1b:9a:9e:dd:7b:77:c5:ed:
                    a4:aa:7a:13:de:b0:54:96:83:41:2f:b0:2a:cf:0c:
                    40:47:e7:97:70:98:3c:ff:8f:95:81:a2:e6:58:de:
                    d5:ee:4b:26:49:9e:d3:67:f8:9d:80:90:af:29:43:
                    a7:ac:43:22:46:78:5f:99:a5:4e:8a:2e:45:ae:83:
                    97:47:bf:0f:61:4d:d4:53:53:65:7e:a8:e2:bd:08:
                    d2:02:8d:a1:de:33:7d:9d:ed:51:20:9c:92:10:b9:
                    3f:56:90:cc:b9:db:12:c5:c5:dd:89:c5:9e:57:f2:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:C0:04:ED:84:1B:67:90:A7:1E:D3:26:11:4B:C0:63:40:B6:70
            X509v3 Authority Key Identifier:
                keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:be:b4:12:b3:f2:53:8c:a0:33:66:ac:27:b5:8c:ea:54:
         f6:0a:d7:f0:96:15:ff:72:b1:c6:1e:6d:c5:da:61:b5:ba:90:
         4c:fb:42:5a:7a:fe:88:23:73:fc:fe:18:54:cf:89:54:e5:74:
         dd:59:26:43:5d:bc:dc:61:48:bb:71:30:c1:84:be:81:02:88:
         7e:1d:58:ed:cd:97:52:d8:34:01:38:d0:91:d4:7c:7e:cf:cd:
         d7:8f:9b:20:78:57:a6:fc:f8:6c:ba:92:d3:dd:9b:84:e0:7b:
         d2:01:49:5a:78:28:f6:b4:5c:b7:f2:95:69:59:fc:63:17:60:
         9d:64:b1:81:f4:6f:58:ca:b3:d3:90:c4:d8:fe:0a:10:d4:23:
         79:65:31:ff:dc:e8:bd:2e:c0:8f:c0:fe:bc:a1:bc:10:03:ea:
         01:46:05:a3:05:e1:e8:97:12:31:6a:81:69:0f:6f:52:32:b7:
         3e:a8:2b:a3:bc:b4:e7:50:16:24:0c:f4:62:01:59:1c:12:90:
         e9:0e:39:2f:9c:36:7d:57:ef:94:38:6a:3c:de:fc:70:3d:e7:
         b9:2a:af:f3:ed:c0:56:91:86:f3:ae:38:02:41:95:65:e4:6c:
         2a:bb:c7:65:5e:4b:ef:45:cd:e9:17:67:05:62:27:ec:43:95:
         86:15:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----