Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File:                     lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier:          UNw4w2R+goLWz/3KeuBMaivQl2eGlTF0e/dCGCsy+i0=
Subject key identifier:   B3:11:9E:08:E2:C6:0D:AF:1C:86:47:24:DB:64:D8:5F:07:94:47:40
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer:       /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial:       01962F74F051F1D852E8C4B334A6F405BB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: /g5OqkoCXUbDKWOpz8NOMQiSRh9/mF9Lu3vQceY46+I=)
                          2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f0:51:f1:d8:52:e8:c4:b3:34:a6:f4:05:bb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=b3119e08e2c60daf1c864724db64d85f07944740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:ad:e9:dc:86:3d:66:83:84:46:31:c0:a6:
                    6f:7c:a6:28:35:64:73:e5:54:4f:89:81:2b:18:e9:
                    3e:df:24:5c:05:53:ae:b4:3e:a2:49:65:a4:e8:85:
                    e9:cb:b5:d0:11:31:f3:20:e8:7c:ba:bd:a7:67:b6:
                    d7:77:3f:9a:38:aa:8b:7c:5e:54:17:1c:26:a9:d9:
                    7d:e9:e5:cf:37:20:fe:9c:fe:10:b0:c5:b8:d4:d5:
                    ba:c4:b9:d7:fa:55:ad:d8:17:23:29:f7:29:2d:1d:
                    2b:e7:48:12:0f:7f:20:8f:ca:31:e1:17:47:2e:75:
                    0f:a7:4d:40:52:ad:38:60:1c:d0:a4:3e:91:06:03:
                    25:d3:ec:bf:c9:18:8c:58:00:30:d8:7c:0e:d2:02:
                    76:8f:e4:f8:fa:c5:a8:f6:c7:d4:3c:94:7a:2f:40:
                    4c:be:06:4f:cd:df:2e:ce:d6:9e:06:a8:e6:3e:f6:
                    3f:93:6f:bd:b0:d9:89:42:8e:c6:60:ab:22:e5:52:
                    5f:44:b9:d1:e3:d0:78:8f:39:61:c5:90:0d:63:b0:
                    b6:22:0a:5b:a7:72:e3:2e:d5:db:d0:c9:48:93:7f:
                    aa:6e:39:59:c0:c5:f8:70:19:ee:f4:30:6e:08:00:
                    fe:9c:e2:12:15:f8:32:d7:2a:ee:0a:4d:c4:0d:cc:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:9E:08:E2:C6:0D:AF:1C:86:47:24:DB:64:D8:5F:07:94:47:40
            X509v3 Authority Key Identifier:
                keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:cf:01:2d:cd:8a:7d:d3:0d:6e:e5:12:aa:be:94:0a:8b:
         f1:9b:bf:6b:da:f9:fd:ae:2f:f6:ee:8f:ce:de:6f:52:b7:ac:
         0d:9a:a2:9f:25:78:b2:ac:b2:33:82:76:a5:e3:32:34:33:b4:
         d7:33:03:9d:af:6d:10:e5:52:98:c2:70:12:61:ee:aa:79:a5:
         35:67:32:ac:78:f9:3d:62:06:c7:7b:ea:1b:33:ae:76:fc:4a:
         cc:26:84:00:9c:b0:5d:2d:8a:36:c8:f9:a2:a4:bb:fc:9c:75:
         e1:26:47:48:67:9d:cc:ee:48:74:4c:bb:75:56:2b:78:91:1f:
         fb:7a:1d:f7:80:5d:fd:83:db:d7:09:41:eb:e0:33:8d:eb:92:
         c5:58:24:e7:e7:96:fc:ca:23:1c:14:cc:e2:fd:e5:d7:33:1e:
         d8:39:08:f6:86:35:4f:3b:cb:37:5d:65:ad:28:e5:89:36:1a:
         e8:60:b4:0a:34:84:49:30:e3:3f:21:dc:c0:a7:e1:f3:b9:7f:
         6c:a2:37:22:79:28:ea:9b:4e:dd:f8:d5:2f:f9:19:63:a1:b1:
         81:16:27:e4:a9:7e:a6:e7:d1:b5:3c:34:08:d2:2e:99:2b:ee:
         54:01:b1:9f:c9:1c:c6:56:65:c4:9d:61:cd:e8:4f:bc:4a:7d:
         a8:20:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----