Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File:                     LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier:          6R//Yaz+TmytQ/srbcA1VzZVgZuLYWMmgzsAnXG01yQ=
Subject key identifier:   56:83:FC:A3:34:3A:50:28:14:D7:FC:28:8F:E1:B5:4D:17:7E:78:6C
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer:       /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial:       01962E999E14D31C707954E22E15B934E64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: lhss7f71UQ4PVJdxDCEKWh+Nk4kIHwf522OzG87VDr8=)
                          2: QG26uYioHVmhp2a5DlzMfuEJFvQ.roa (hash: QYW9l61NzSQ8p9p0VXIlshNNkTFPqxE5hMNyzeqT5Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9e:14:d3:1c:70:79:54:e2:2e:15:b9:34:e6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=5683fca3343a502814d7fc288fe1b54d177e786c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:74:07:a8:af:94:9e:79:e7:e1:45:16:09:
                    73:84:ea:b4:d2:5b:1b:41:91:ad:a4:bf:9a:67:3d:
                    2b:a2:36:14:5b:7e:61:c9:ad:e9:c6:0e:aa:74:76:
                    64:b5:18:d6:6d:b5:03:96:8b:47:f4:32:6a:66:27:
                    be:86:48:7b:f0:4f:f2:67:57:89:c9:1e:fe:b8:a6:
                    93:ea:7e:eb:37:3e:c4:b8:80:37:f5:8d:7f:3d:d5:
                    1d:15:3f:ce:cb:fe:e9:6b:28:5a:07:e8:1f:16:f7:
                    ba:cd:4f:71:4f:c2:84:ff:c7:8f:e8:b6:2b:22:87:
                    f8:6d:60:2a:f2:0a:27:0e:f4:48:4f:28:99:ea:a8:
                    28:57:f4:96:42:c7:21:bf:a7:7b:43:2c:e5:e5:e8:
                    b4:be:0f:c4:c7:d3:87:20:15:8a:fb:8b:3c:6e:16:
                    7f:74:1e:3b:e8:83:67:23:31:8f:ef:88:1f:52:4e:
                    06:40:a3:26:ce:ac:45:f4:ae:fb:80:a2:f2:e6:75:
                    04:44:78:e3:c1:c8:3d:d4:c7:9f:c2:21:75:65:46:
                    d2:8f:f7:e6:46:82:3b:b6:a3:5e:86:77:13:7c:c3:
                    4b:24:2e:96:85:55:97:fc:5b:d0:9c:7f:f4:38:a8:
                    09:10:b7:13:54:d4:bd:5a:5b:83:dc:8d:fd:74:03:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:FC:A3:34:3A:50:28:14:D7:FC:28:8F:E1:B5:4D:17:7E:78:6C
            X509v3 Authority Key Identifier:
                keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:27:62:26:75:79:6e:84:28:64:56:82:41:64:01:dc:e5:
         c1:9c:eb:b9:dc:88:f4:d5:dc:ff:82:b4:07:3a:bf:dc:6f:82:
         6f:4b:de:16:a7:03:4a:46:a4:12:8d:c1:ab:10:e2:70:c1:13:
         d9:eb:ea:91:a9:2f:1d:c5:c4:07:ba:12:95:a3:f0:f1:8c:12:
         58:eb:8e:aa:e3:26:0d:88:66:07:ac:31:e3:bb:f1:b4:cb:08:
         49:66:b1:d1:04:58:e4:70:b2:b3:95:d7:3f:d2:a0:6f:32:91:
         3e:63:cd:93:c1:d5:78:19:62:88:95:65:45:6f:6a:ef:ec:9d:
         6c:ba:62:29:ef:37:3e:35:a8:86:cc:74:8d:2c:2f:8a:9e:0e:
         11:34:43:35:01:47:81:07:2e:5e:a6:35:65:62:e2:85:32:f8:
         9f:03:44:24:62:c4:36:e6:27:9e:22:97:e3:31:ec:51:9a:33:
         68:37:05:18:40:59:54:dd:5b:be:7e:cf:6b:ab:9f:e9:42:e3:
         6e:03:df:86:0f:2d:2c:a8:77:63:42:36:fe:83:c1:84:87:cf:
         57:44:38:e1:2c:eb:84:d6:98:a7:2a:fc:42:c1:fc:ed:2e:be:
         f9:15:b3:53:c2:bb:43:ab:87:99:05:f5:84:58:a9:a2:6a:ec:
         a5:0d:8c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----