Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File:                     LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier:          f9+wBWi5HKh//G3BNmOX99pZYQsKv6t8z4d2KWfgHU4=
Subject key identifier:   6F:09:C1:9E:A3:F2:D0:D7:9A:EE:25:67:96:D4:CB:11:B4:61:7B:07
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer:       /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial:       01962F3D435D3E97D2EE75C2D9B64FDCA75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number:          0D01
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: FpgI6LnvhzDK1pVQ9z1yShZNjFgiZdYFkzmV6EwXcNA=)
                          2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
                          3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:5d:3e:97:d2:ee:75:c2:d9:b6:4f:dc:a7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=6f09c19ea3f2d0d79aee256796d4cb11b4617b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:3b:28:d9:6d:76:79:3c:a0:66:fc:c4:10:
                    ba:3f:3c:4f:f9:7b:a1:0d:ee:f4:86:81:83:16:e1:
                    35:21:17:04:83:c5:42:6c:0e:cc:23:e3:39:a1:fa:
                    92:f4:f8:9b:8f:61:b5:a7:f9:89:e8:83:e7:24:be:
                    0c:b1:d6:9a:86:44:fa:1b:9a:d7:4d:cd:5d:a9:80:
                    56:37:4d:44:97:09:4c:6e:dd:50:ef:14:a0:7a:ed:
                    da:61:b0:97:b3:9b:ec:f7:90:c9:52:9c:6d:1b:86:
                    60:4d:e5:0d:c2:d5:9a:de:55:76:59:37:43:13:b9:
                    d9:c6:f5:8f:a7:e3:9a:d4:f3:bc:8b:c9:ad:13:0c:
                    63:17:dd:93:6d:e8:33:84:9f:32:87:5b:69:e4:23:
                    46:16:6c:c7:d9:fd:0d:5f:90:18:3d:a0:bd:54:94:
                    10:d7:f9:19:84:8f:e2:6d:28:db:c5:3d:22:8c:94:
                    b3:16:d0:44:de:53:20:90:45:ac:f9:17:b3:7c:e9:
                    58:a1:b8:7a:e1:1a:e7:b4:e4:0b:47:18:30:e6:3a:
                    42:e8:70:99:8b:a9:6d:37:b8:e5:bb:84:44:ce:62:
                    d3:ab:57:a8:5e:fc:a4:96:e3:df:a6:20:a6:27:11:
                    24:f9:41:14:77:bb:88:52:5e:40:a6:ef:24:2a:df:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:C1:9E:A3:F2:D0:D7:9A:EE:25:67:96:D4:CB:11:B4:61:7B:07
            X509v3 Authority Key Identifier:
                keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:06:b1:a8:bd:e2:cd:e7:20:0c:3b:f1:5e:b1:9a:02:b0:5a:
         cf:9a:cd:9a:fd:aa:bb:de:d6:a1:09:58:9f:1c:20:b2:aa:d5:
         32:bb:5e:17:d8:ac:36:f6:a5:74:5c:8e:2d:2c:49:d7:14:be:
         27:32:37:8e:71:34:95:73:f8:ec:6d:f1:6a:90:b5:36:de:06:
         92:02:b8:81:07:00:89:2d:64:0c:5d:73:38:4b:d9:68:25:24:
         c1:53:71:99:02:93:0e:dc:5e:cb:3a:60:a0:01:64:2a:83:d7:
         f4:a4:cb:3b:37:ea:de:c6:29:bd:9d:0b:15:34:06:75:37:97:
         6a:0c:0f:16:ff:f6:c2:72:32:76:df:f7:52:e5:1f:f1:03:42:
         64:59:aa:1f:9f:18:14:0b:89:42:2d:bf:29:4b:0d:e9:3f:af:
         fe:a6:9a:d9:da:dc:16:d5:56:0b:69:22:ec:e4:5b:ca:93:c4:
         79:c5:0f:50:2a:83:b9:fb:a6:de:a6:d3:74:19:fd:46:71:13:
         94:a4:37:2d:f4:45:d8:e3:4a:97:3d:d1:91:58:4f:b8:c2:93:
         10:5d:46:8b:5f:2f:b4:5a:1b:7f:b6:ac:f5:d7:78:c9:ba:bb:
         ba:a2:6c:be:a6:d7:1e:cf:bb:3e:15:63:8d:2c:f5:be:44:ea:
         e6:70:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----