Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File:                     LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier:          kE8KGetsQEQ+2X+IW9UoF8FgbM1A8j6POJWBA97a55w=
Subject key identifier:   F3:8B:8C:69:3B:23:9C:61:29:34:3F:11:1D:65:4D:00:06:02:19:75
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer:       /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial:       01962EE286C8AB6CE3A3185508C41EE819D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:21:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:21:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:21:59 +0000
Files and hashes:         1: 2BM9QIgRxE_2RcNn9hahHozcEmo.roa (hash: 3yXUEMFWg/c9hZJEpu11jBt9UvzPYALdkLQvaRnOdJg=)
                          2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: 6h0RKnm4E8pPe+rSQshZhNCovDldOQkau8IxZ9LWQY8=)
                          3: r_5d7ThCv4Vhv8YC1BU6003bgwY.roa (hash: P9T8vj8+Q2LopXTSLJaRKiIagzilgVpc+FYXPQ5RHYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:e2:86:c8:ab:6c:e3:a3:18:55:08:c4:1e:e8:19:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
        Validity
            Not Before: Apr 13 11:21:59 2025 GMT
            Not After : Apr 14 11:21:59 2025 GMT
        Subject: CN=f38b8c693b239c6129343f111d654d0006021975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:c1:dc:8b:bd:c0:eb:ed:c9:39:e0:e1:f1:
                    08:e2:0f:79:46:d0:ca:6d:af:11:1f:2d:60:ef:0b:
                    87:db:fa:44:a5:8d:d8:98:82:52:bd:2e:2e:88:c8:
                    a9:da:f6:4f:bd:c7:ec:ac:57:fe:f7:16:c0:db:cc:
                    38:01:d0:e7:21:89:ed:e9:02:e7:5e:c0:7a:7c:35:
                    98:47:bc:69:86:41:eb:0d:74:d4:80:d8:4a:ef:e7:
                    ab:1a:d3:bf:b9:7b:32:af:e1:5e:35:40:a0:07:69:
                    40:d7:de:66:33:fc:30:91:9e:7c:2e:ca:18:5d:42:
                    18:f6:aa:90:f2:06:b0:94:0a:07:9a:e0:e6:16:c3:
                    8e:f7:90:e4:92:2c:e7:ad:0c:2b:44:20:89:ba:9c:
                    85:63:92:c5:05:ef:12:73:77:b0:37:5c:1e:b9:ab:
                    91:a0:df:d7:3e:ed:d3:f8:13:cf:84:21:da:9f:1c:
                    e0:a2:8c:6f:9f:aa:51:f4:88:a4:a2:f4:97:5c:28:
                    75:f4:c6:0e:a2:90:b0:5f:09:17:68:03:96:28:b4:
                    3b:22:25:69:83:47:bf:4c:67:fc:10:9d:b2:d9:19:
                    3e:64:86:f6:46:b7:67:0b:cf:44:95:b3:9a:d1:9a:
                    ad:e6:90:97:c8:6b:25:17:d0:dd:22:92:7c:b5:c5:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8B:8C:69:3B:23:9C:61:29:34:3F:11:1D:65:4D:00:06:02:19:75
            X509v3 Authority Key Identifier:
                keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:9f:36:a2:fe:b7:14:5a:a2:7a:5f:12:b3:ca:54:e9:8d:
         b0:c0:63:a8:61:16:60:59:95:43:7a:f4:21:6d:d5:8f:c3:e9:
         9a:50:20:f7:e0:29:ed:08:58:c8:41:a7:d0:82:10:22:01:c4:
         55:86:3d:a4:f5:cc:9b:e9:a0:ae:93:2b:e0:07:3b:5e:56:b4:
         ad:81:38:86:2d:e8:ae:69:40:7b:f2:e0:0f:ab:cf:38:80:24:
         70:e2:37:8a:fc:59:8e:c7:2f:9c:5f:a3:76:79:42:e6:1f:44:
         69:e0:00:b4:57:dd:2c:8b:57:a0:64:03:e9:ea:6e:0f:d4:b9:
         c2:a7:1d:c0:d9:6d:df:ec:08:22:49:5b:99:6b:a7:f6:17:b6:
         44:84:53:87:44:02:e5:e7:57:3c:83:09:4a:56:3f:e6:d0:e4:
         b5:03:b9:16:e4:da:66:2b:67:19:09:65:79:6d:00:ee:b8:08:
         b6:9e:51:03:35:b8:d3:93:6c:4a:02:5f:21:3d:07:52:9f:ff:
         f4:b6:2e:10:04:17:3f:a1:be:84:2b:b4:b7:15:9f:a1:be:db:
         5b:59:1a:a9:c8:66:c0:0c:97:42:ea:c0:5f:b5:38:f7:fa:a8:
         b8:dd:74:3c:00:3d:b1:f5:66:3f:15:2d:eb:c7:f1:dc:8c:70:
         c6:ac:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----