Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File:                     LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier:          RzBQCheEQ8i9KIfFgIDJqr+qTkh7hRtyXnSP9Xg1ooc=
Subject key identifier:   12:E9:20:4F:F5:78:19:FE:FC:27:E8:39:00:91:80:E0:8F:14:BD:B4
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       01962E98907DFD41A1C28DE536F70458EC7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number:          03CB
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: CZe+92snqYeBqJb7CqKeVqj/LN8DV4TsaG4c8U1LZlI=)
                          2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:90:7d:fd:41:a1:c2:8d:e5:36:f7:04:58:ec:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=12e9204ff57819fefc27e839009180e08f14bdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:21:39:ff:25:17:b5:57:9d:fd:0e:fc:df:
                    96:1f:63:c2:e4:5d:01:58:99:36:4f:f7:a2:b1:bc:
                    51:91:b0:fb:c1:56:ce:da:32:47:20:d6:6b:15:b6:
                    50:30:b9:98:02:0d:0b:bc:2c:b4:77:49:0a:aa:68:
                    b9:f8:e6:c1:64:66:38:c5:a8:e1:97:5e:50:7a:b5:
                    37:69:98:80:10:c2:67:93:de:75:9d:95:2c:8c:e6:
                    e3:0a:aa:ae:34:2c:20:41:76:60:05:54:50:77:9b:
                    a2:1c:f7:fe:89:28:d9:50:ce:df:51:bf:e1:74:b1:
                    d2:e6:c3:c0:19:f5:7a:c9:da:4f:65:13:45:56:44:
                    fd:2e:24:b6:e5:3e:9e:18:89:61:6a:a6:2d:81:26:
                    27:d4:ed:f5:6a:a6:47:4d:5f:7e:d0:11:cb:b7:bb:
                    be:3f:bf:06:93:4d:dc:28:2b:93:52:2e:6b:52:f6:
                    1c:9c:af:5f:e3:d0:fe:00:29:b3:9e:4f:d7:23:12:
                    47:37:1a:cc:fa:4f:4a:ad:f2:a1:35:ff:91:1f:83:
                    5b:14:9d:b2:47:99:0c:c8:64:03:98:a3:31:65:40:
                    04:eb:05:66:57:bf:e1:5e:2b:5d:2e:d8:4e:37:2b:
                    a5:1a:b4:de:0b:cc:f8:42:73:b3:ea:75:d1:c3:0e:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E9:20:4F:F5:78:19:FE:FC:27:E8:39:00:91:80:E0:8F:14:BD:B4
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:72:af:78:32:b7:66:70:67:01:fd:b2:28:3c:1a:75:1e:2d:
         8e:90:ba:61:df:fd:ee:b3:c0:52:06:39:06:c4:bd:d1:a5:32:
         a9:8e:67:6d:27:74:fa:f1:5b:30:e1:71:99:be:5c:c8:56:73:
         0f:8a:ad:a9:5b:39:b8:f6:df:f2:a7:06:cd:7e:49:d2:c2:c0:
         bb:14:23:8e:44:ce:40:4f:26:13:07:51:38:55:dc:98:70:2a:
         54:03:2f:bb:68:49:a3:5b:68:0c:75:24:91:42:dd:d4:a3:fb:
         01:dd:67:ff:76:4e:db:f7:e1:f0:58:82:73:0c:27:70:0f:0c:
         09:2c:2a:49:21:68:ee:1b:70:00:26:e0:c6:a8:4c:4c:ac:11:
         3a:c3:47:34:70:68:70:ef:c9:ac:41:c0:20:05:80:c7:f2:39:
         b9:b2:e1:96:0a:7b:38:c2:84:28:b0:de:bb:b0:c2:c4:98:35:
         f6:70:cf:17:11:80:6f:5b:6a:0a:6f:ac:aa:c5:6f:63:66:43:
         47:a8:d8:64:c3:de:dd:1d:cd:5e:1b:05:9f:23:d8:9b:dc:0b:
         e0:cc:e6:2a:2e:f5:f0:35:f9:ff:2c:64:0d:24:f6:39:6f:e0:
         3a:ce:0f:62:ae:78:e3:c1:ea:d9:9d:0a:91:1e:79:1e:b3:bf:
         68:82:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----