Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File:                     LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier:          k3QsVaDoi1n2zEEbb0y9/87/TwWP8hqgZlhUzTS6RHc=
Subject key identifier:   41:C1:D4:A5:D3:D4:D0:C5:24:5F:45:F5:DC:3D:11:B2:AF:39:CC:F8
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer:       /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial:       01962FAB329A792DC5511A74A704B45B3BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number:          0710
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: g2FuCUuUw3RYY0wuMGZh+ocKr/CfDyxu6WNuJF6xoWc=)
                          2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:32:9a:79:2d:c5:51:1a:74:a7:04:b4:5b:3b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=41c1d4a5d3d4d0c5245f45f5dc3d11b2af39ccf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:b5:4f:9c:db:8f:77:ef:b1:42:b5:a3:0d:
                    0c:cf:92:90:51:00:a8:d5:94:c9:9f:a9:83:1b:63:
                    97:97:f5:d9:9f:e4:1d:37:e8:f4:51:f9:ac:38:3a:
                    cf:dc:86:7e:97:01:ba:18:56:27:06:d0:e8:07:77:
                    78:2f:da:41:7c:a7:c7:af:2d:d6:b8:c7:83:91:3a:
                    72:09:95:01:0b:dc:3e:29:fd:86:75:d6:54:a3:a6:
                    66:29:a4:85:bf:11:2f:01:f4:0c:3f:99:6e:75:83:
                    60:a9:ce:7f:a6:d0:66:84:02:7c:12:09:ab:5e:09:
                    b8:3b:a9:04:4a:f5:b0:97:61:89:b6:cb:b0:06:9d:
                    f6:16:4e:5b:88:02:75:57:2f:fb:5a:88:aa:31:67:
                    c5:17:e6:d9:e1:e5:f7:36:03:71:a2:84:13:0b:05:
                    f6:7c:67:83:66:de:61:e1:ea:32:17:e9:1e:95:d8:
                    5f:9f:ee:f4:77:d7:5b:6f:36:30:64:67:76:43:fa:
                    18:90:62:0d:8b:88:9c:63:02:57:95:a0:60:d7:bb:
                    63:46:3d:e9:db:45:7c:f3:0f:33:5f:7d:11:f9:7d:
                    1e:03:40:18:5d:14:6a:2d:5c:4c:5e:9f:41:c5:74:
                    22:76:3f:3b:33:d4:69:66:8b:f8:6d:95:5c:d0:36:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:D4:A5:D3:D4:D0:C5:24:5F:45:F5:DC:3D:11:B2:AF:39:CC:F8
            X509v3 Authority Key Identifier:
                keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:3d:6f:fc:11:0d:20:5e:05:f3:20:98:56:79:5d:8c:07:
         c8:c5:de:16:8f:c4:89:c2:28:b3:88:cd:c1:df:0c:4c:a5:84:
         61:68:ce:58:19:a8:f6:46:94:45:fc:ec:be:c6:3d:64:64:59:
         ca:47:b9:e2:61:69:f2:33:a6:d6:1c:e7:c2:b5:d8:97:28:d0:
         43:9e:ac:c9:1f:8d:2c:8f:bf:64:61:c8:1d:46:b2:d1:e6:1d:
         fd:d6:5a:e9:8f:8e:2c:4c:f9:b8:a8:01:75:46:9f:11:7d:9b:
         30:93:46:ec:af:fd:9b:ba:09:21:ed:69:e4:ae:b9:36:41:21:
         fc:c7:03:8f:89:9e:62:cd:71:ae:6c:47:d1:75:56:90:64:b1:
         90:fc:28:e8:68:6c:1c:e3:54:28:54:23:74:c4:cc:e4:1a:a0:
         9b:ad:53:81:76:0d:85:33:b0:53:c6:b1:66:a8:7c:a2:ff:8e:
         d6:9e:1f:c2:71:77:4a:b7:e4:58:a0:15:3f:b1:c3:fe:5a:a4:
         56:c4:9a:6e:6a:68:78:c7:c3:f9:26:a4:fb:96:44:e6:90:1a:
         13:35:68:a3:c5:62:b8:61:ff:c7:b4:0c:ae:ed:e4:4b:5f:29:
         b3:8d:92:76:b5:d8:12:81:7f:30:74:df:35:27:7a:1c:c8:40:
         b4:3f:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----