Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File:                     lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier:          Q/HFR9dH9n93FwSNqlpFcwdP0GnN3h62iuwaMs09fmg=
Subject key identifier:   84:FF:23:8F:53:DC:12:12:6A:51:AF:3F:CF:95:59:33:7A:55:60:6D
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer:       /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial:       01962DF42B3320308DF898B0851BDF3F8E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number:          0334
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
                          2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: 5us0AMZO3hyGbPiuXHqi8GcQlMBpkZV+SQ1imAbdHrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:33:20:30:8d:f8:98:b0:85:1b:df:3f:8e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=84ff238f53dc12126a51af3fcf9559337a55606d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:2a:49:18:54:41:44:36:01:a4:ab:ea:04:
                    77:62:74:ad:b0:99:30:92:72:fd:d8:04:44:70:52:
                    64:74:80:e6:0c:dc:6c:8d:10:ce:37:07:32:c9:4b:
                    ba:d4:f4:a0:15:8d:08:fe:d8:47:61:35:ea:2c:b2:
                    83:68:ed:ec:94:d7:59:e7:17:e4:bf:5b:8f:7f:e1:
                    33:42:b8:38:2b:94:61:f4:c9:5c:80:9b:bf:d6:d9:
                    6e:15:c0:08:64:ce:58:df:63:c1:43:50:08:d2:02:
                    29:5b:cb:e3:ca:4f:6f:a0:94:b6:f2:2d:be:da:81:
                    d1:1d:03:9e:50:c3:82:5d:7e:49:a6:61:24:18:4b:
                    6f:6c:42:df:f4:f0:71:98:2d:30:aa:0c:37:d2:e1:
                    54:46:35:b5:e7:df:12:73:ec:fb:0f:d4:fa:3b:b4:
                    7f:2e:c7:21:a0:06:48:aa:8e:ea:8b:b0:74:25:7d:
                    3c:be:b9:d8:dc:61:4b:87:08:07:56:48:87:70:2a:
                    c2:53:a1:22:ac:a7:8b:58:d3:86:7e:66:7b:38:1b:
                    00:78:53:9f:a3:86:30:bb:cb:0f:a9:0f:c0:0d:01:
                    35:c6:df:d1:98:a3:38:74:32:de:43:ab:cc:ac:b2:
                    c8:5f:1a:51:e7:e4:d6:dc:83:1f:a0:3d:05:08:b8:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FF:23:8F:53:DC:12:12:6A:51:AF:3F:CF:95:59:33:7A:55:60:6D
            X509v3 Authority Key Identifier:
                keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:6c:65:bb:08:e6:08:26:68:f2:bd:82:4f:84:20:2d:02:
         a5:72:c1:92:64:f6:97:d4:e9:fe:0c:9b:ca:61:5c:a5:b5:fc:
         8e:8e:06:39:4d:63:27:b8:8d:85:16:6d:f5:55:31:55:6c:61:
         e5:65:f5:0e:c2:6b:b4:d0:66:50:87:db:27:1a:4d:6b:ba:25:
         13:bb:56:ba:b4:f3:86:3c:3e:f5:74:26:84:29:aa:7a:5d:09:
         fb:95:86:9a:42:54:e2:9f:43:69:6c:d9:5f:52:90:8c:89:94:
         4e:ab:fb:7b:58:d0:1f:84:e6:80:eb:bc:4c:b0:4b:29:c7:8e:
         6e:2d:20:50:51:f8:eb:c0:43:48:60:08:d5:2c:75:6c:cc:f9:
         1c:79:aa:07:f0:0d:fc:39:5a:9a:90:19:89:15:e0:f6:cf:38:
         ab:6b:b3:e8:96:95:a1:49:85:1b:db:f6:e7:38:ef:a4:2f:75:
         76:22:67:97:9c:d5:6f:59:dc:07:4a:3b:b7:15:cf:43:fd:7d:
         b1:63:58:46:eb:78:78:28:07:0f:2e:d2:7c:99:21:9f:22:af:
         d9:81:42:57:7e:87:74:2d:55:cb:52:72:40:7b:49:b0:48:6e:
         5a:ca:86:9c:da:61:3f:00:5f:98:c8:55:4d:5b:40:fd:da:94:
         a2:d3:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----