Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File:                     LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier:          bUpsGJDKeFQVRHDSMh6ndrNHAGuHP3iV4kqRe35NZBY=
Subject key identifier:   EE:05:A7:83:6A:CC:65:24:8C:4B:AB:F0:40:96:9A:F1:9D:34:58:0C
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer:       /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial:       01962FAB2533659B8665CC0C2DAA2F01027F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number:          04C4
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
                          2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: ExWa2IBu6YqyEk5ESPm53N+g//oFqVp9520RdHc2yao=)
                          3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:33:65:9b:86:65:cc:0c:2d:aa:2f:01:02:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=ee05a7836acc65248c4babf040969af19d34580c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:5a:5d:e4:d7:87:13:43:01:08:99:35:87:
                    e7:c9:33:c4:ad:c0:3d:f9:bb:05:45:5d:e9:b1:f0:
                    62:6c:1a:c8:91:97:d5:e0:a9:fd:c6:cf:f2:0d:aa:
                    9f:cf:61:b3:12:20:cd:d2:e3:b3:84:ba:2f:85:82:
                    24:d6:3d:c3:d0:8c:cb:bd:ee:2b:b6:34:09:21:f9:
                    a8:f1:98:39:8a:a8:13:02:16:78:ba:85:e8:51:cb:
                    f5:18:0e:67:fe:ea:80:12:ac:b6:49:e0:91:68:96:
                    52:ac:9a:e1:f7:86:f6:89:9c:0a:21:26:70:99:70:
                    bc:30:65:0a:a0:1e:23:40:ab:4d:3f:2f:ca:40:1b:
                    6c:14:72:ea:27:99:f9:fb:fc:72:05:a3:28:6d:62:
                    29:24:32:fc:3b:e1:7c:e4:50:f7:b2:e3:9a:6d:fd:
                    5c:0b:5a:91:9e:de:c6:cb:63:1c:55:5b:48:ec:d0:
                    c8:24:ed:2d:b9:ae:f9:39:e0:93:f5:9e:97:1e:ac:
                    eb:e8:8e:fb:31:84:c8:c2:b1:74:37:1a:46:41:5b:
                    42:a6:96:c1:ed:24:49:8b:80:6d:6b:13:1f:65:14:
                    9a:bb:e9:c4:d9:a6:f5:06:8b:e5:20:3d:c4:1c:d1:
                    14:18:75:e1:4d:00:d9:d5:ec:d8:93:b1:94:6f:88:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:05:A7:83:6A:CC:65:24:8C:4B:AB:F0:40:96:9A:F1:9D:34:58:0C
            X509v3 Authority Key Identifier:
                keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:9f:b6:c5:27:66:5c:1a:51:f4:81:76:b6:b3:e8:02:c0:
         8d:a1:14:5c:bc:e9:46:ef:6f:52:e1:de:b5:cc:4b:b6:f0:28:
         36:f8:0c:fc:3a:70:0f:a9:56:ff:8f:e2:63:4a:b0:0c:bd:86:
         13:97:a3:bc:7a:d5:d4:84:4a:9c:5c:52:25:ba:bb:fe:a2:9f:
         b8:6a:99:b0:ab:54:54:ec:3f:37:d3:3d:d0:99:f7:a1:74:c2:
         27:aa:13:d0:c0:6d:6f:d9:a2:24:90:4f:30:44:5f:44:37:ea:
         81:13:d4:a1:f8:8f:82:58:71:10:f3:41:56:34:e8:84:08:2b:
         a0:f5:ed:1f:b0:86:7c:3f:f6:ab:26:2e:d5:38:81:11:86:4c:
         6f:bc:03:a6:bd:f5:e8:cf:3f:9b:70:b9:f1:9e:8b:f7:5d:9f:
         c0:da:03:80:36:62:e2:be:70:b6:67:d5:ca:b1:fd:9a:1b:52:
         93:18:10:43:9f:a5:06:4e:c7:d2:73:47:84:e7:25:cc:d9:21:
         03:b3:9a:d6:c3:63:ce:69:f1:c5:4f:60:cd:70:11:be:56:6e:
         23:45:66:fd:07:28:c7:89:cc:25:72:72:71:81:76:69:04:39:
         00:8d:9d:14:2a:2c:37:24:23:00:a4:6f:b6:9c:f1:9c:b6:6d:
         58:3b:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----