Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          GNORzFxHK1Bv/12lYX6NZ5+zFpzSLFskkNyN7oVSq/g=
Subject key identifier:   8D:E2:0C:4D:79:F7:32:5B:FF:04:EF:2B:7E:9F:10:8D:CB:6A:04:B4
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       01962FAB3BBC8ED96F7178F200D3F9DBDF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          10B4
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: DS67R8FUDW+MSNtjRCFEZUDg7dSBQ358ysq/wgvcrU0=)
                          2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:bc:8e:d9:6f:71:78:f2:00:d3:f9:db:df:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=8de20c4d79f7325bff04ef2b7e9f108dcb6a04b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:95:57:94:7d:04:4d:2c:64:60:6b:bf:1e:
                    54:83:e9:4d:c9:be:af:bc:09:5d:7e:9d:50:3a:bc:
                    fb:37:d1:e6:5d:c1:e1:0f:3f:d0:38:68:33:2a:c4:
                    92:8a:0a:cf:b3:48:6e:76:89:e3:f0:16:3c:bf:eb:
                    ea:88:7c:a2:ef:35:c5:95:3e:88:b1:75:fe:0d:1b:
                    7b:5f:1a:4c:ce:ee:5b:ca:d5:a8:73:e7:ff:a5:6d:
                    1a:6a:1c:a3:0b:a6:7e:b3:28:83:e4:80:71:83:d2:
                    60:e8:45:c1:89:48:4b:bb:b9:02:18:2b:61:d1:c3:
                    e3:d9:66:5c:ee:5c:6c:48:ba:11:25:cb:31:50:e3:
                    48:7b:17:b5:d7:a1:55:b4:32:26:87:f0:00:51:93:
                    30:44:d7:40:39:44:b4:dd:04:03:46:5d:91:99:e5:
                    90:54:00:f4:3f:35:48:72:e1:a2:46:36:bc:dc:7a:
                    73:77:f9:df:c8:4d:15:22:ee:6c:c1:ba:fd:c1:d5:
                    59:e2:93:7e:8e:41:c0:fc:47:98:b3:d6:f3:c9:d9:
                    e2:b6:8e:65:67:6d:d3:d1:56:db:32:51:69:01:cb:
                    f1:ea:2c:86:35:f0:82:6b:8d:ae:4a:25:65:a8:0f:
                    35:79:05:9b:87:04:cc:e2:39:ff:03:54:19:5b:ae:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E2:0C:4D:79:F7:32:5B:FF:04:EF:2B:7E:9F:10:8D:CB:6A:04:B4
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:da:f4:62:68:59:c7:3e:7c:8d:6f:79:63:66:18:b1:b7:
         92:e1:bd:70:5c:05:76:5c:4d:e9:1e:fa:4a:9c:1c:51:2d:75:
         36:a7:c6:70:82:ba:14:4d:8c:02:86:9b:fa:30:ae:35:1e:ce:
         e7:23:93:04:ca:08:a9:5a:b7:03:25:5c:a0:83:ea:5e:21:b1:
         b2:b9:41:34:f5:db:cd:c8:d1:b4:fd:32:b7:af:83:e7:dc:77:
         58:96:d5:52:bc:7f:99:b0:0a:c2:40:93:c3:1e:70:d9:2e:8b:
         c6:05:13:96:1d:8d:13:c5:08:21:2c:90:07:13:b6:52:09:88:
         b0:5e:5d:aa:4e:34:ab:c7:f0:b7:bd:97:cd:0d:be:c4:46:d6:
         1f:60:2b:a4:1b:f1:f4:e9:b0:11:8d:a2:3c:88:4c:30:da:c8:
         93:d5:2a:32:81:68:ba:93:f5:ca:e0:79:ee:54:3b:5e:0a:43:
         d6:1f:c4:2a:a0:d3:61:bd:64:de:71:7c:2d:84:38:34:83:0b:
         4f:2d:15:76:7f:54:b2:2a:38:0e:b6:aa:d6:d1:99:f2:d0:6f:
         03:8d:26:f0:1f:b8:4e:6c:c6:7d:ec:87:77:f2:25:1e:85:63:
         f8:02:32:a7:0b:da:d8:67:86:d9:cf:78:04:16:dc:58:f0:b2:
         a5:f3:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----