Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          Zk+DPWbGFqPDmxpd0sZqGrijB9ruR1OTBRXyR9V5N7A=
Subject key identifier:   4A:7A:63:92:A7:83:34:EC:4E:58:F9:48:55:82:57:1D:3D:82:3C:24
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       01962F0735EDB621E09399B656355D278BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          058B
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
                          2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
                          3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
                          4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: bfEoXG3fISIRIUta6Z3eMOEEuVUG7EvBPKqpxd8ZMbg=)
                          5: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:35:ed:b6:21:e0:93:99:b6:56:35:5d:27:8b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=4a7a6392a78334ec4e58f9485582571d3d823c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:53:38:f6:6d:e6:37:4b:ee:42:02:ef:19:
                    77:a3:6e:cd:e1:b2:4c:ad:b5:d0:de:4c:25:5b:1b:
                    99:95:b3:b6:24:aa:39:e2:ad:26:62:46:d2:b3:1e:
                    c8:33:c7:94:be:7c:ed:85:74:2d:8d:e7:72:ae:36:
                    30:6d:78:18:10:9c:3e:09:ee:75:ae:03:04:af:e2:
                    7e:f5:70:90:50:c2:8a:6b:c3:09:e4:80:08:f5:6b:
                    dc:56:3b:e4:12:29:00:fd:67:e5:d9:36:bd:8e:d7:
                    90:52:48:90:cd:38:23:dd:3d:f3:67:c3:9e:67:92:
                    c4:3f:16:48:b7:fc:1f:8d:a6:b5:c9:74:d8:1f:b2:
                    12:ba:a0:b4:be:0a:09:23:d4:5d:6d:45:4a:64:4c:
                    c1:8c:87:e9:fb:7b:38:69:47:d6:a5:b2:78:65:d7:
                    18:ff:14:e2:8d:0b:54:c2:60:82:3b:1c:64:45:0d:
                    0f:24:da:cb:d0:28:b3:68:3a:80:5c:88:4d:05:ef:
                    1d:f2:65:19:19:51:87:b2:07:86:8a:a0:05:18:7a:
                    e8:14:46:4d:f8:48:f7:1a:1b:f0:0d:16:a4:4a:95:
                    2b:ec:f7:c2:cc:3a:85:9d:d0:92:52:bb:e4:95:7a:
                    25:e0:52:fa:ed:6f:41:cb:f5:dd:dc:cd:18:36:ae:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:63:92:A7:83:34:EC:4E:58:F9:48:55:82:57:1D:3D:82:3C:24
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:2d:7a:18:eb:a7:5f:95:da:de:ff:2a:6c:6f:4d:cd:e4:8c:
         76:a7:1c:eb:c5:89:66:c4:c8:ac:8c:b3:3c:a1:cd:de:78:6b:
         1d:71:c8:b1:0d:fb:80:9c:e2:e6:4c:97:31:35:25:d1:54:7a:
         b5:c0:83:75:cb:46:60:34:09:6d:a2:14:40:b1:78:f6:5c:ff:
         d8:cc:29:90:20:c6:c1:cb:36:8c:70:c0:3a:c3:d1:d3:fb:81:
         c5:1a:94:90:a1:d8:47:8e:a4:10:ff:92:98:31:89:49:9c:2f:
         aa:b0:50:92:40:66:51:27:8c:69:12:f7:fd:52:ba:18:ef:bd:
         42:ee:3a:0c:26:e0:a7:e9:86:6c:23:aa:af:e5:3a:c4:05:99:
         a8:e2:4a:e0:40:6f:ec:f9:75:5d:ef:e3:90:7e:aa:ec:5a:e2:
         22:47:5f:7d:78:6b:0d:4a:19:12:cb:fd:dc:9e:7d:87:10:80:
         7f:ae:7a:dc:de:35:10:1b:ab:e4:cd:5a:40:b1:82:04:44:d6:
         43:27:2f:db:ac:de:a3:37:26:a9:02:9e:29:38:05:04:9f:50:
         71:38:51:fe:75:0d:32:da:45:14:7e:cd:9a:95:50:21:44:bf:
         84:51:d2:37:20:f4:43:5a:de:5b:a3:bd:e4:1e:8e:9f:bc:74:
         1c:cd:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----