Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File:                     Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier:          tAuljnyNAO76Ed+vyyMVrwwEsPJt7Bk+dY2MrLIOosQ=
Subject key identifier:   34:81:CA:17:3D:CD:F9:C5:12:2E:93:33:C9:8D:D8:6A:76:B2:B1:88
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer:       /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial:       01962E61DC14FBD1A7B65FB4675556F5C0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number:          14AC
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: BvmAX1jTVCATxtCOokw14Mk6vuFOxf/upYeyKzREb0w=)
                          2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:14:fb:d1:a7:b6:5f:b4:67:55:56:f5:c0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=3481ca173dcdf9c5122e9333c98dd86a76b2b188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:d3:59:00:af:a7:5b:fa:5f:1f:b7:13:2c:
                    90:bb:3d:32:a8:5e:7a:12:5a:29:38:5e:b6:6b:fe:
                    f5:cd:36:f6:af:d2:5c:f3:c0:19:17:b0:99:53:70:
                    c3:22:aa:45:fb:1f:ef:37:b5:3c:df:82:83:eb:99:
                    75:d6:9b:30:0d:d3:65:cf:0e:62:13:36:a7:10:d0:
                    d6:02:c2:71:c0:22:53:1e:67:ee:f0:38:d8:72:ac:
                    a4:11:52:91:ec:c8:ff:94:14:a9:c5:59:5b:f1:9f:
                    10:aa:ca:67:e6:f4:c3:93:96:8b:93:76:cd:ee:16:
                    88:c1:17:4b:7d:8a:a9:12:6e:f5:56:e1:a4:fd:50:
                    cc:7e:07:68:1b:8b:10:72:ca:9d:0b:86:93:d1:06:
                    df:47:d8:be:68:db:59:42:2e:99:88:eb:7f:a6:63:
                    26:ca:27:6a:f8:9b:72:e9:36:43:91:45:b0:d7:82:
                    76:36:d8:c5:c3:54:ed:e0:57:36:ac:68:61:09:18:
                    48:25:1a:c2:26:6a:94:22:7f:ff:03:8e:ee:40:b7:
                    68:60:4c:ac:55:a9:b0:bc:2e:1d:a7:d0:05:2c:23:
                    d4:75:5e:bc:2c:2d:ec:00:10:8a:7c:19:80:7f:1f:
                    ec:8a:74:1c:94:21:c6:a1:fa:b2:88:9c:4f:a6:96:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:CA:17:3D:CD:F9:C5:12:2E:93:33:C9:8D:D8:6A:76:B2:B1:88
            X509v3 Authority Key Identifier:
                keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:8f:3a:5d:0b:35:7a:ca:73:70:f5:5d:b4:9a:7e:a5:06:
         61:b6:81:dd:72:12:ad:81:43:1d:e2:86:fb:fe:9c:c4:b9:41:
         ed:a5:83:46:8b:f8:83:b0:0a:11:1a:b1:f3:1a:4e:10:1b:1d:
         a5:e5:36:14:b4:c4:7c:09:99:18:d6:ab:bf:8c:12:c4:0f:85:
         27:9b:ff:62:65:d3:ea:43:19:db:00:f2:73:82:b3:22:02:2d:
         ed:8d:52:de:1f:70:ed:ff:7c:02:e3:61:21:e2:77:e0:cb:0b:
         69:93:10:bb:b6:56:49:dc:3e:84:fe:ae:09:3b:17:da:90:ff:
         b5:ac:56:72:e4:5f:4d:0b:9b:de:e1:19:a0:20:2a:d0:f3:1d:
         b9:b1:d4:64:06:a5:fb:0e:a6:42:7c:9c:c3:15:19:d5:49:9a:
         ce:81:7c:72:6c:59:30:db:14:f9:a3:c8:6b:ab:80:07:1e:c2:
         71:a8:81:73:80:e9:8c:d0:b4:56:38:33:5b:51:24:80:25:0d:
         57:89:f1:96:58:c9:f8:05:f4:24:f8:fa:9b:65:b1:60:c6:3a:
         a0:2a:12:76:11:85:77:1f:a8:eb:83:84:f2:64:61:e5:87:4d:
         54:1e:9b:a4:c0:8d:45:38:33:f8:e2:2a:69:82:5c:10:85:04:
         ef:ce:e0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----