Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
File:                     lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json)
Hash identifier:          0GKg020A8Ke1F3YRCO9HHOuUMxELxF1gAEDlG3bp1bc=
Subject key identifier:   A4:40:3C:C1:F3:91:A7:3A:6A:6D:76:F6:2D:28:EB:06:15:10:27:0B
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Certificate issuer:       /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial:       01962ECFD66E8483BAD1D03803EF345DE08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
Manifest number:          0651
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=)
                          2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=)
                          3: HZRJn6Tle2sGNVjuC1VDO76X76Q.roa (hash: fXSmWLniv8nFMnfUppgyxtui2MfIKvJerwegHQDXicI=)
                          4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=)
                          5: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=)
                          6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=)
                          7: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=)
                          8: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: zjVN9gwTOPi8ebGOxSJGaUCMTjJHSpG7FGLZeqbCbDw=)
                          9: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=)
                          10: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=)
                          11: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:6e:84:83:ba:d1:d0:38:03:ef:34:5d:e0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=a4403cc1f391a73a6a6d76f62d28eb061510270b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:ff:d4:2e:d0:b9:70:f2:ed:40:bb:ff:dd:
                    ce:31:8d:4c:00:c3:05:3d:e9:cb:54:e3:57:a2:75:
                    96:55:ef:c1:ad:60:97:11:47:80:51:73:7d:63:6b:
                    d8:ab:f9:5a:ea:0c:0b:a7:e2:93:4f:8e:62:12:0a:
                    4e:18:92:81:32:78:44:f0:dc:be:1f:c3:8c:f7:42:
                    11:78:ec:30:6c:f5:ee:90:2a:7b:4b:4c:ca:fd:b8:
                    4a:f8:00:c9:f7:c2:26:0c:48:21:f8:aa:f8:e8:f7:
                    dc:7e:ba:06:7c:5d:bc:60:36:55:e0:8a:84:b8:35:
                    58:cb:92:93:40:0d:0f:f2:8e:b7:f1:a0:e5:f9:fb:
                    e1:ee:33:04:ac:0a:0f:9e:c4:43:2e:62:6d:94:3b:
                    70:49:4a:6e:5d:b2:a5:13:f1:86:d5:29:a2:09:23:
                    b3:f5:a7:28:10:af:a2:50:2e:0f:6e:c8:12:86:a8:
                    3f:3a:fc:0f:40:2f:86:79:3d:ec:35:a8:26:b5:15:
                    93:3f:ae:0c:5f:5f:bb:ea:bc:8a:cd:8d:46:a9:4e:
                    59:ec:86:da:66:10:36:9a:f3:d2:01:66:8b:f2:e4:
                    29:48:52:aa:c5:18:64:b9:af:e5:85:52:dd:d7:7b:
                    13:c3:a9:46:ca:50:42:99:dc:e7:77:76:41:cb:1d:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:3C:C1:F3:91:A7:3A:6A:6D:76:F6:2D:28:EB:06:15:10:27:0B
            X509v3 Authority Key Identifier:
                keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:8e:c7:06:0e:28:45:44:7c:40:a7:88:0d:17:a5:1b:31:
         ba:16:83:7b:d3:bd:ac:a8:7a:d3:d4:76:e5:f3:29:e4:73:e8:
         62:d6:aa:90:b9:5b:6d:5c:5b:de:4d:3a:d6:58:23:c1:73:e4:
         0d:35:f8:6a:47:1b:13:91:24:8f:8a:2f:85:8a:e3:33:75:8b:
         be:9f:11:37:2c:cb:f4:68:a8:4a:81:8f:55:43:f4:6b:c2:ae:
         b7:02:8b:77:55:e4:99:e5:73:d1:64:4f:10:0d:85:8a:b4:24:
         3b:69:d8:fd:a3:7e:30:36:88:76:f7:e1:aa:35:09:20:23:0d:
         c7:fd:95:e1:63:db:65:9a:e0:7d:4e:0c:ed:47:d4:5e:ed:61:
         e0:a2:ac:74:8a:2c:34:8d:2b:87:f3:ad:5f:34:61:39:b8:32:
         f0:f2:c9:bd:53:5c:cc:35:ea:11:e6:82:8b:d7:09:95:e3:0d:
         ed:e5:15:9e:4d:a2:c4:13:04:fd:51:0d:64:c0:5b:35:10:1a:
         8a:cc:85:15:25:7b:52:b4:32:06:f6:30:b3:85:d6:15:ed:79:
         3c:d6:3c:b3:9f:62:97:5d:57:2f:5a:ae:54:eb:25:11:84:7a:
         34:02:af:d9:5c:09:81:42:25:8f:9e:1c:fe:20:7f:fe:63:b0:
         2e:bc:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----