Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          vdD32WStGwubkJ3nOGApLEX/uGHEBfgqeCuWVPhYYyw=
Subject key identifier:   A7:6F:BF:07:C6:18:59:50:51:03:9E:2B:5E:6A:A1:6C:E5:21:0D:AE
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       01962E2B0E94DFABB1466E7828129FE96765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          1166
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: GGXhG4jYLlNwNhb_4jLsATV3sZ4.roa (hash: coSPb15gvXo5/kLV6jjcSbTa8zuHjiQZwBsQ1ZTodzg=)
                          2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: ONnWXUH79zKJljr0wJkG4ypFUhEGyKLMK/S8osVHsxo=)
                          3: ffIXUQgNnNxkun86gvscnN9T0cI.roa (hash: VW5SzImNSTB3Slsj3lqEAsmeeuKYUrnsLBc5k+WJ/m8=)
                          4: lVizdiQgX20fzcRSA4GIK4wJrtQ.roa (hash: XzPZ+5jYbipWydPDPeCQpQP8Pnh6Ui1fyKGQoWrzSvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0e:94:df:ab:b1:46:6e:78:28:12:9f:e9:67:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=a76fbf07c618595051039e2b5e6aa16ce5210dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:0e:09:a8:a3:f7:c6:0f:be:58:b5:ba:5e:
                    71:06:c3:26:cb:35:24:ae:d5:5c:11:ac:1b:bb:06:
                    59:8f:20:0e:af:62:ed:e9:33:00:7b:68:a2:eb:dd:
                    b3:4a:64:96:40:90:b4:50:96:b2:60:cd:d8:60:a3:
                    02:3b:5b:4f:b9:cd:75:eb:8e:01:1b:11:6d:03:20:
                    2f:c3:55:f7:ad:64:31:3e:7c:ae:b8:fd:bc:9c:c1:
                    4f:36:f0:e2:b3:f1:7b:04:cb:44:b7:c9:ef:70:b7:
                    0b:74:44:60:cf:22:96:3d:20:5a:68:09:7a:a5:80:
                    ed:aa:11:91:9f:b9:f4:f5:b8:fa:7e:5e:16:ce:6f:
                    d9:f5:61:52:62:2f:f9:b1:86:c0:e0:2b:4c:ec:e0:
                    c3:23:9e:2e:ae:33:85:80:f6:19:8a:50:7a:0b:c5:
                    d4:dc:d8:3e:63:54:51:06:aa:c7:03:43:52:7c:1c:
                    9f:07:2c:60:c5:03:a7:f7:d5:57:7c:9e:69:bc:09:
                    5a:57:b6:cc:35:8c:a8:b5:2e:83:9b:63:31:ee:2e:
                    84:da:2d:c6:28:6f:c1:a0:aa:9b:f0:f0:8f:90:a4:
                    d3:dd:d6:d5:52:cd:33:3b:63:05:91:ea:d6:5e:82:
                    77:67:8c:2b:d8:d1:ab:68:44:e7:5e:8c:90:fe:6d:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:BF:07:C6:18:59:50:51:03:9E:2B:5E:6A:A1:6C:E5:21:0D:AE
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:b1:16:67:c2:4d:d7:1f:77:87:6f:5c:2c:26:10:ab:84:
         77:7b:26:f8:12:2e:e0:ab:25:82:41:f7:60:99:e4:8d:7a:38:
         ae:2d:cc:a6:38:8b:81:17:e2:c2:25:b4:d5:1e:9e:5c:38:82:
         21:0f:85:c4:5b:ef:90:89:14:46:5b:46:ce:e7:5a:0d:5a:ed:
         b7:0c:36:51:d9:7b:61:59:d8:e9:0c:61:3f:99:16:49:c3:e8:
         06:93:75:85:50:cb:ce:c9:21:ab:2b:2a:db:c9:39:56:53:e9:
         5b:bf:00:65:2e:9c:e9:50:9b:d1:7d:84:62:87:d5:9e:ac:7f:
         eb:61:14:16:c7:46:7d:8e:94:a0:2a:e9:a7:f8:2e:ab:c4:63:
         8b:84:cd:5b:a8:9a:ad:59:28:19:46:bc:8e:49:a4:2b:6d:94:
         e9:d5:6d:6c:c0:f1:d5:0f:41:16:0e:df:f3:c4:02:89:0e:bf:
         4b:a7:c4:d0:63:76:53:a1:b4:96:f6:51:b9:57:6a:8e:e0:3c:
         01:5b:2b:e0:ef:be:77:66:ae:e3:4b:d4:9b:2a:eb:c3:6c:8a:
         9e:ac:0f:ac:f5:24:86:66:91:47:2c:f0:98:0a:93:98:2b:3a:
         ed:73:a3:f5:e4:7b:ac:09:90:48:60:ca:3d:8c:59:aa:e3:6e:
         94:c7:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----