Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File:                     lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier:          yMK0AIlFWuTZWO3StOJPv/RVZwy899Al0P6os0xmK18=
Subject key identifier:   4F:1C:7A:84:30:86:DC:23:B5:5C:75:4E:6A:7E:2D:A6:EA:82:F1:8C
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer:       /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial:       01962E61D87906B421623E42B7C4405D8C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number:          01CB
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
                          2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: pSDIJ2B4uxOh+w4esoiy8rDZ5cVli7/U4j6RoEbEk6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d8:79:06:b4:21:62:3e:42:b7:c4:40:5d:8c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=4f1c7a843086dc23b55c754e6a7e2da6ea82f18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:35:1b:69:8c:bc:3d:1b:3c:81:c6:ae:68:
                    41:1b:f8:aa:3c:ad:dd:7b:c1:48:d0:b5:6f:bf:4a:
                    b9:61:0c:c6:4f:65:a6:a7:71:65:2f:a5:29:ca:95:
                    e9:07:9d:fc:92:d6:ec:79:ee:9c:ad:39:45:78:17:
                    21:14:04:1c:f2:b0:01:8c:d0:d0:09:27:51:6a:dd:
                    26:b0:e6:c8:9f:95:33:76:db:93:6d:4f:16:2d:85:
                    ac:96:fe:8f:5d:2b:68:86:cb:ee:d8:b9:87:f8:cf:
                    9a:24:45:38:27:80:8a:d9:5d:c9:5e:df:a3:63:d7:
                    5d:d9:c0:8d:17:ae:68:47:34:9a:60:96:dc:c7:cb:
                    c9:e6:f8:b3:60:7f:30:6b:2c:ab:b7:55:98:9d:cf:
                    31:be:64:ed:90:e9:b9:f5:a0:84:09:6b:7b:ba:6c:
                    19:ec:18:e0:a5:b9:3f:80:b3:f9:2e:aa:13:53:0a:
                    6b:4c:f3:f6:f2:a8:fd:e7:a8:b2:3d:01:22:da:cd:
                    13:d7:54:86:31:5c:97:82:c8:de:1b:da:6b:2e:08:
                    db:d2:2e:e8:1e:23:18:62:0e:7a:37:2d:7c:54:af:
                    a3:87:98:15:c2:82:84:84:47:34:59:b6:89:36:54:
                    a6:ab:af:84:63:5a:ae:38:c1:bd:c7:12:32:81:7c:
                    e9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1C:7A:84:30:86:DC:23:B5:5C:75:4E:6A:7E:2D:A6:EA:82:F1:8C
            X509v3 Authority Key Identifier:
                keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:59:9e:1c:78:39:78:b9:67:5c:1d:90:3c:95:6c:b4:a1:cb:
         a3:a3:60:98:b1:04:22:ae:f2:82:7c:f7:0c:81:f8:68:01:0d:
         67:ce:29:4b:08:15:56:ce:9f:a4:45:94:41:f1:34:83:4e:05:
         78:c6:26:ee:48:1e:7f:a3:4c:69:6a:8d:ad:f6:6f:55:84:8c:
         e2:a2:86:3b:f7:af:3c:c3:03:23:c0:04:43:0f:ee:0d:b2:78:
         1f:a6:f3:ad:a3:3e:7a:8c:01:d0:cc:81:f1:d5:58:8d:13:0a:
         56:1d:53:34:96:e1:0d:7d:70:02:77:b2:49:c8:91:53:34:db:
         44:69:ae:b9:ad:af:4a:4e:b6:6d:45:7f:93:d1:11:81:72:15:
         5d:d8:4a:d5:b8:4f:7a:c2:fe:47:4b:23:80:a8:db:d6:31:54:
         b4:47:b4:14:72:23:9b:13:a5:15:31:b0:37:18:54:30:dc:d4:
         fb:bd:3c:4c:3c:8b:89:cb:68:d3:bc:b7:78:1c:b7:01:5e:09:
         ba:44:ee:b1:2f:29:b8:c4:a5:a9:ea:9b:35:57:42:a3:64:cf:
         27:94:60:80:05:73:18:83:57:20:cf:7d:64:03:2c:e4:7b:cc:
         9e:71:a5:82:d1:39:8b:b4:44:7a:f7:dd:99:a7:03:95:32:87:
         62:27:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----