Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File:                     LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier:          h11RBY+ksva2dMHqzMMtjordr2k6W9iQXxH2CCqSNOs=
Subject key identifier:   3A:7C:04:E1:39:38:64:B3:1C:FB:EE:F5:13:77:BD:8F:A7:19:5B:89
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer:       /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial:       01962FAB36318D6627B7CC57892110E9E563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: osTmmIdS9Kx4yoGEhcqA4NS5H1g1nmP8Y/5AITJtANk=)
                          2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
                          3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
                          4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:31:8d:66:27:b7:cc:57:89:21:10:e9:e5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=3a7c04e1393864b31cfbeef51377bd8fa7195b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:b7:dc:45:d9:68:02:2e:a6:81:a5:37:24:
                    9a:f3:0a:32:23:ca:88:78:13:68:a0:c0:4b:d2:65:
                    d0:30:a7:d2:0a:c0:d2:f8:9c:3d:fe:af:9f:49:02:
                    55:8f:e4:bf:4f:33:0c:ea:63:08:06:57:8b:ce:d0:
                    41:c7:f1:12:1a:18:f5:5c:7a:ad:2b:8d:ce:26:94:
                    a1:80:20:49:92:12:0d:8d:0f:94:94:78:f7:82:8b:
                    e0:e0:5d:cc:00:3e:63:a2:60:49:f4:18:6c:02:c0:
                    a1:b2:d7:39:ff:c4:d9:68:cc:25:9c:a8:3c:26:76:
                    b5:ae:8f:7e:83:56:b2:9b:ac:da:a7:f9:c3:5c:f6:
                    0e:ea:9a:2f:3a:84:6a:5a:28:09:1f:24:1d:a0:c5:
                    98:2c:31:4f:2f:ac:c9:dd:7e:13:1b:1a:5e:e6:6e:
                    fa:34:25:89:37:f3:28:4e:37:3c:fb:ed:f9:69:40:
                    d4:dd:73:13:c6:bd:bc:27:aa:c0:64:8c:1e:e2:55:
                    8a:05:14:16:b4:40:69:37:b0:25:d1:97:8a:58:39:
                    28:b3:e9:da:88:e7:1e:63:a3:1a:f8:64:50:3b:d6:
                    9c:36:50:c5:82:d9:95:d7:24:85:be:3f:3e:00:50:
                    03:bd:e2:a9:7e:71:53:42:0b:fe:b9:35:74:15:10:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7C:04:E1:39:38:64:B3:1C:FB:EE:F5:13:77:BD:8F:A7:19:5B:89
            X509v3 Authority Key Identifier:
                keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d3:52:ae:72:05:8e:17:d3:4a:86:b5:87:a2:29:96:62:9b:
         11:8f:74:71:e2:15:e5:ca:a5:fd:b4:9e:62:d4:cb:20:1f:37:
         06:5a:9f:f2:4f:3b:93:5c:f3:bc:13:06:25:d0:b7:36:ff:99:
         7f:ab:da:0b:18:e9:79:7e:49:f3:ce:0b:ee:55:4a:77:eb:b2:
         a9:71:f0:ec:52:f8:dd:99:c7:4a:55:e8:2d:9b:12:97:dc:08:
         43:b3:3e:ff:4d:76:a1:e8:8b:4b:c1:17:a8:7d:cb:29:5b:97:
         70:3e:d9:dc:13:c1:8f:6d:08:36:a0:a9:17:14:e8:85:08:6d:
         e5:ed:fb:d1:07:2d:a7:86:d5:05:88:7f:52:94:c7:8b:33:c3:
         e7:bf:f7:e5:6b:b9:e6:be:d5:95:4b:63:76:f7:ba:3d:61:15:
         9e:6c:9b:d8:f6:ea:7d:14:bf:eb:2b:21:6e:e9:69:88:03:fa:
         d5:d5:12:fc:d1:f0:4b:07:30:41:1b:df:ab:ae:25:e1:8d:c6:
         38:84:a2:62:70:fd:ba:17:04:23:8d:18:a0:b9:39:9f:95:73:
         55:20:c4:51:5b:71:ab:0b:e2:9b:8e:76:d5:c4:c6:06:51:ec:
         00:b9:2b:6a:60:c6:c3:f1:83:2f:7b:08:25:9f:14:a8:21:af:
         08:34:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----