Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
File:                     LRGXVPwU_-eWimUWvUm9slYzuIc.mft (raw, json)
Hash identifier:          /cdeJXlgF1SQiJ9Gg9nL+u3/MgY8x06uatLoXcpYb0I=
Subject key identifier:   1F:58:F4:13:DB:79:A9:6F:DA:3B:A2:79:13:BF:83:87:84:90:40:7B
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Certificate issuer:       /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial:       019858D8A7403A42F39DAB9AFC653AF7B47A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
Manifest number:          0FC4
Signing time:             Wed 30 Jul 2025 01:00:50 +0000
Manifest this update:     Wed 30 Jul 2025 01:00:50 +0000
Manifest next update:     Thu 31 Jul 2025 01:00:50 +0000
Files and hashes:         1: LRGXVPwU_-eWimUWvUm9slYzuIc.crl (hash: AgmVPsnWTuFdqAPJTpMgnGMG24SOXVBNvxWAZIZRykA=)
                          2: Yq8p-Zl2UZI4Tb-nuCgzMSOT2M4.roa (hash: nZW2inX60+r3Vn2H9HqAa0liDQDWLVr6X/Z09+vg9g4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:58:d8:a7:40:3a:42:f3:9d:ab:9a:fc:65:3a:f7:b4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
        Validity
            Not Before: Jul 30 01:00:50 2025 GMT
            Not After : Jul 31 01:00:50 2025 GMT
        Subject: CN=1f58f413db79a96fda3ba27913bf83878490407b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:ef:b4:05:33:f0:e3:80:52:b8:a4:76:dd:
                    7e:4c:50:80:04:2a:f4:dc:31:eb:31:f7:6c:77:e9:
                    6f:88:62:f3:27:83:84:d0:5e:7f:aa:a9:02:bf:2b:
                    40:94:21:48:10:04:06:15:89:8c:f1:af:18:4d:2e:
                    48:c4:a4:78:97:a7:e3:86:df:0b:45:37:5b:9c:b1:
                    be:1e:63:b2:39:7a:87:b2:28:22:5b:ee:e6:c2:a6:
                    13:71:98:c6:88:31:08:74:9d:94:58:c8:47:e9:f6:
                    32:3c:8e:5f:a2:98:f3:e8:5d:d8:ff:f9:00:5a:72:
                    a2:e3:c2:ce:33:fd:e2:35:fc:57:7b:af:e9:1f:8f:
                    f0:24:36:fd:d1:01:c0:42:0f:4c:d8:5d:b8:0d:2b:
                    7a:3c:77:6c:ec:96:3e:99:cc:12:93:96:63:47:2f:
                    25:31:36:25:de:cc:fc:b9:af:56:15:d8:a7:94:17:
                    fa:c3:36:4e:2f:29:47:30:a9:0f:6a:fd:7a:dd:e9:
                    bc:fe:15:8a:ea:f8:d7:4c:b4:39:e3:81:a5:31:cc:
                    ed:44:d9:1f:e4:26:49:25:d9:08:13:d0:fc:61:ca:
                    32:39:c7:0b:72:0c:d6:86:2c:fa:ae:f1:ce:4f:9c:
                    d9:de:03:b9:58:c6:87:fc:66:f1:a6:b4:20:b7:fe:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:F4:13:DB:79:A9:6F:DA:3B:A2:79:13:BF:83:87:84:90:40:7B
            X509v3 Authority Key Identifier:
                keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:1c:39:5d:7b:b9:75:85:2d:fa:c8:4b:84:61:40:ba:c6:
         f5:69:a1:48:cd:1c:8e:60:5c:ec:a8:b2:1b:0b:c7:05:68:cb:
         e1:18:50:bf:fa:56:62:d7:17:25:f0:1b:44:66:4e:7a:53:22:
         cb:93:97:17:ae:97:25:23:64:c1:dc:68:a7:43:06:19:e5:e3:
         c9:ac:8f:d0:78:9f:d7:9f:8a:0a:bd:f7:4a:4e:29:a2:1f:18:
         e1:22:b0:c5:e1:3a:d5:dc:6e:14:03:71:2d:04:06:2f:e4:87:
         55:55:f9:56:ce:7f:fd:01:54:b9:b3:9a:15:7e:50:b2:f7:a9:
         a6:49:66:93:c1:69:a5:b4:bd:d8:f7:27:72:98:d9:f6:b4:b1:
         f5:6e:77:fc:30:33:eb:32:71:2b:bf:6d:c9:9f:d9:89:73:b5:
         83:a1:6c:a0:31:fe:3a:c4:d8:d8:81:e6:c3:1e:80:78:d5:55:
         0b:19:52:66:bb:d8:19:71:ab:2a:1e:cc:aa:8e:df:b9:c1:4a:
         d5:91:8d:59:f2:71:67:ef:e3:62:81:03:4b:14:2d:3f:6d:51:
         d0:fd:6d:62:85:40:5f:b9:fa:f5:64:5d:75:0b:4a:a2:22:ac:
         51:72:9e:52:51:7f:46:f7:2f:94:a6:4b:64:c4:50:60:fd:a2:
         fb:df:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----