Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File:                     gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier:          giNDUygtQrQ6h6F3P/FFkVycxhWdhVwQi+Uk7hmbVnQ=
Subject key identifier:   DE:B6:FB:29:3F:11:61:25:29:E5:5F:E7:07:A4:08:64:AF:16:88:AF
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer:       /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial:       01962E2ADB4946F19330073BB25869AD582D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: VCdkKqxgtLIUx/leAb2+lLXdsCBm0/Wf27164DgfNa0=)
                          2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:db:49:46:f1:93:30:07:3b:b2:58:69:ad:58:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=deb6fb293f11612529e55fe707a40864af1688af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:fa:23:d6:51:f8:e7:82:82:d8:08:d4:98:
                    a1:9a:cf:04:8d:eb:1d:b5:6b:86:9e:52:d7:bd:4a:
                    d1:b5:5d:29:21:79:6f:ae:a1:43:32:44:80:93:d3:
                    f6:2d:46:1a:9a:5b:b0:09:73:da:6b:d5:18:07:bb:
                    e6:15:d5:0f:f7:38:46:48:c7:7e:68:3b:2d:22:92:
                    fe:c3:3c:2b:12:64:fc:0a:4c:da:44:39:9f:f3:02:
                    38:68:70:bd:9c:f6:7e:4b:3a:f2:5d:56:01:88:f1:
                    c4:fe:11:18:d8:cc:2c:c0:8f:06:91:18:9b:42:80:
                    60:72:6c:7d:ec:6f:31:e7:ef:3e:63:71:41:24:3e:
                    ca:68:fb:6e:ef:e9:1c:f8:bc:5a:86:c3:96:05:8e:
                    3d:1d:2c:d4:3a:ca:bd:48:c0:f6:eb:89:ce:67:c9:
                    b4:7f:8e:27:3c:6d:3f:dc:3f:0c:7b:02:79:2a:b4:
                    ce:20:54:92:f0:c0:57:17:11:32:48:9f:2a:ce:79:
                    14:31:28:34:fb:88:e8:dc:0c:7e:a3:6a:9f:a3:98:
                    d5:4c:c2:ba:fc:c7:fd:5d:19:24:ae:e0:3a:8c:82:
                    50:54:36:32:17:91:75:1f:9e:1b:3d:4e:c9:a7:8b:
                    87:f3:7d:7b:47:18:23:ce:28:69:7e:cf:fe:a8:9c:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B6:FB:29:3F:11:61:25:29:E5:5F:E7:07:A4:08:64:AF:16:88:AF
            X509v3 Authority Key Identifier:
                keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:62:8e:49:91:ca:cd:e7:35:de:54:f0:e0:e3:9b:bd:13:db:
         dc:15:d2:76:0e:c7:9a:6e:3a:38:2d:fe:70:2a:e5:2c:57:4f:
         58:4f:13:8d:90:48:e3:64:1d:d7:9a:8b:a1:5c:3e:42:c7:60:
         68:43:6d:87:18:d0:ab:f5:17:48:a9:c0:5f:4c:6c:04:a8:cd:
         6c:0f:44:4e:bf:c0:e9:f1:87:3e:be:91:0d:66:83:79:17:45:
         be:29:10:1a:f4:cf:66:77:70:45:d3:ef:8c:7a:8a:36:8e:3c:
         77:2a:80:b0:df:41:72:32:96:89:7a:a3:08:a7:57:6f:5c:bd:
         f1:2d:18:ab:af:d8:b3:3e:97:e5:b3:84:18:eb:ac:6f:aa:77:
         f3:85:87:07:c6:49:83:c7:97:8b:9e:f0:13:10:d3:bb:6f:43:
         64:cc:39:85:95:c5:da:5b:f2:46:40:b7:7e:2f:7c:b3:6b:ca:
         e9:d4:03:17:1e:f9:b5:b7:1d:ff:5d:a4:69:e3:61:b2:66:f9:
         36:71:1b:28:20:f0:8b:ad:d5:15:3a:7b:e7:9f:02:e1:a4:6d:
         b3:0a:10:27:30:1e:6c:da:7a:05:76:87:3c:7b:eb:9f:ff:8b:
         c4:9a:cd:53:fb:10:bf:12:1a:9a:fc:86:d0:a3:eb:fa:c3:70:
         c8:6d:f1:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKttJRvGTMAc7slhprVgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTRlYTNjZWQ0ZjEzNzEwZDM0MDQ0Y2ZjYjNkMWQ1NmM1
NTA4NjIwHhcNMjUwNDEzMDgwMTIyWhcNMjUwNDE0MDgwMTIyWjAzMTEwLwYDVQQD
EyhkZWI2ZmIyOTNmMTE2MTI1MjllNTVmZTcwN2E0MDg2NGFmMTY4OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6D6I9ZR+OeCgtgI1Jihms8Ejesd
tWuGnlLXvUrRtV0pIXlvrqFDMkSAk9P2LUYamluwCXPaa9UYB7vmFdUP9zhGSMd+
aDstIpL+wzwrEmT8CkzaRDmf8wI4aHC9nPZ+SzryXVYBiPHE/hEY2MwswI8GkRib
QoBgcmx97G8x5+8+Y3FBJD7KaPtu7+kc+LxahsOWBY49HSzUOsq9SMD264nOZ8m0
f44nPG0/3D8MewJ5KrTOIFSS8MBXFxEySJ8qznkUMSg0+4jo3Ax+o2qfo5jVTMK6
/Mf9XRkkruA6jIJQVDYyF5F1H54bPU7Jp4uH8317Rxgjzihpfs/+qJwobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN62+yk/EWElKeVf5wekCGSvFoivMB8GA1UdIwQY
MBaAFIGU6jztTxNxDTQETPyz0dVsVQhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDIt
MjM3MjRiYWIyMjI3LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDItMjM3MjRiYWIyMjI3
LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWKOSZHK
zec13lTw4OObvRPb3BXSdg7Hmm46OC3+cCrlLFdPWE8TjZBI42Qd15qLoVw+Qsdg
aENthxjQq/UXSKnAX0xsBKjNbA9ETr/A6fGHPr6RDWaDeRdFvikQGvTPZndwRdPv
jHqKNo48dyqAsN9BcjKWiXqjCKdXb1y98S0Yq6/Ysz6X5bOEGOusb6p384WHB8ZJ
g8eXi57wExDTu29DZMw5hZXF2lvyRkC3fi98s2vK6dQDFx75tbcd/12kaeNhsmb5
NnEbKCDwi63VFTp7558C4aRtswoQJzAebNp6BXaHPHvrn/+LxJrNU/sQvxIamvyG
0KPr+sNwyG3xZg==
-----END CERTIFICATE-----