Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File:                     LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier:          HNm2YsdlUw64rh+wW8ZSjlhSNORmq998X7C8m+ZEn4Y=
Subject key identifier:   44:9D:BE:1E:B6:AB:96:81:42:22:C6:B8:80:BD:86:BE:D5:D8:EC:90
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer:       /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial:       01962F0668E921BDF48F7A5021FF4EF984BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number:          0FDD
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
                          2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: I4bdqyjLsJugkozjcwV2Q5k1hL2F7BkXHu4qIvZmS/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:e9:21:bd:f4:8f:7a:50:21:ff:4e:f9:84:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=449dbe1eb6ab96814222c6b880bd86bed5d8ec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:55:eb:b2:c6:1f:0b:f6:21:c7:ac:29:ad:
                    89:27:3c:0d:13:bf:6e:d9:3e:c3:7c:70:a3:4b:6d:
                    66:e8:fe:f2:53:f0:69:75:1d:74:88:45:06:2c:dd:
                    af:25:26:89:13:ff:f3:04:27:47:d1:f9:fc:86:c2:
                    88:01:f7:9c:34:26:79:74:a1:74:56:41:c5:0f:82:
                    43:d3:b0:85:cd:73:d6:93:fc:b6:80:f6:05:07:88:
                    18:af:d4:c0:bd:09:96:2b:bd:f1:68:fa:82:90:f1:
                    b6:87:96:d6:ea:9d:52:3a:38:30:a4:b4:d6:60:2a:
                    8e:9f:5e:b0:a6:1d:c6:e7:04:fa:c2:23:d7:15:bb:
                    fc:18:f9:a8:6d:c9:5b:be:c1:3d:ee:0b:6f:20:24:
                    a8:46:a1:00:34:be:85:e0:a3:5d:0f:90:a6:8c:b9:
                    2f:9d:44:cf:46:5f:9e:ac:b3:23:a0:7f:a7:f4:f6:
                    be:48:2d:3e:b9:87:6f:86:04:ac:a4:91:71:65:29:
                    4b:c8:5a:55:2a:28:cd:ab:3d:27:e2:15:fb:22:35:
                    29:93:08:f1:7a:5f:2d:9e:65:58:6f:aa:0f:95:69:
                    bb:27:cb:14:3a:fe:ec:4f:b1:2a:9c:29:aa:f8:87:
                    02:99:f4:0c:eb:cc:11:b5:5a:2d:6e:d2:66:98:22:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:BE:1E:B6:AB:96:81:42:22:C6:B8:80:BD:86:BE:D5:D8:EC:90
            X509v3 Authority Key Identifier:
                keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:5b:b2:ce:a5:59:c4:47:41:a8:9f:09:f6:5a:dd:f8:dc:
         89:66:73:8e:f5:e5:7e:0a:30:08:6a:7b:95:66:47:8e:d5:5f:
         25:4b:ca:d0:05:ed:0a:e4:15:25:1d:86:7f:88:f5:42:e0:f2:
         a9:e3:ee:0d:b9:c4:8d:e7:c9:7c:e7:47:43:d5:2b:bd:de:84:
         4c:6e:8c:f8:14:1a:28:53:59:95:df:a8:1a:7a:ad:c6:e3:fb:
         bf:b0:ac:39:91:14:2b:6e:86:1f:a4:38:22:65:4b:44:ce:a7:
         99:33:77:43:b5:bf:e6:0a:df:02:7c:b2:57:b2:b1:21:f6:fa:
         9c:24:45:b9:ee:38:e7:3c:e4:1b:9d:8d:9f:1b:4c:b6:14:62:
         86:d7:1e:50:60:f1:75:96:d6:9f:56:9c:f0:bb:76:51:d3:c6:
         bf:12:40:92:ed:fc:7b:ac:71:e3:a3:97:a7:f2:e0:64:6b:44:
         7f:59:ed:85:1a:1f:b6:99:b2:48:6d:3d:98:bd:e1:4e:96:e9:
         2a:b7:bb:40:37:2e:83:d6:68:59:85:e9:95:d6:45:75:bb:5c:
         1b:b3:41:e6:bc:75:d7:00:5c:a1:ac:0d:83:45:44:1c:e4:d7:
         1b:54:00:8e:22:41:25:4e:9b:47:11:b2:43:0a:35:27:93:b7:
         60:94:9a:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmjpIb30j3pQIf9O+YS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw
YzgwOGEwHhcNMjUwNDEzMTIwMTExWhcNMjUwNDE0MTIwMTExWjAzMTEwLwYDVQQD
Eyg0NDlkYmUxZWI2YWI5NjgxNDIyMmM2Yjg4MGJkODZiZWQ1ZDhlYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwulV67LGHwv2IcesKa2JJzwNE79u
2T7DfHCjS21m6P7yU/BpdR10iEUGLN2vJSaJE//zBCdH0fn8hsKIAfecNCZ5dKF0
VkHFD4JD07CFzXPWk/y2gPYFB4gYr9TAvQmWK73xaPqCkPG2h5bW6p1SOjgwpLTW
YCqOn16wph3G5wT6wiPXFbv8GPmobclbvsE97gtvICSoRqEANL6F4KNdD5CmjLkv
nUTPRl+erLMjoH+n9Pa+SC0+uYdvhgSspJFxZSlLyFpVKijNqz0n4hX7IjUpkwjx
el8tnmVYb6oPlWm7J8sUOv7sT7EqnCmq+IcCmfQM68wRtVotbtJmmCL8RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESdvh62q5aBQiLGuIC9hr7V2OyQMB8GA1UdIwQY
MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt
OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0
LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekhbss6l
WcRHQaifCfZa3fjciWZzjvXlfgowCGp7lWZHjtVfJUvK0AXtCuQVJR2Gf4j1QuDy
qePuDbnEjefJfOdHQ9Urvd6ETG6M+BQaKFNZld+oGnqtxuP7v7CsOZEUK26GH6Q4
ImVLRM6nmTN3Q7W/5grfAnyyV7KxIfb6nCRFue445zzkG52NnxtMthRihtceUGDx
dZbWn1ac8Lt2UdPGvxJAku38e6xx46OXp/LgZGtEf1nthRoftpmySG09mL3hTpbp
Kre7QDcug9ZoWYXpldZFdbtcG7NB5rx11wBcoawNg0VEHOTXG1QAjiJBJU6bRxGy
Qwo1J5O3YJSaRg==
-----END CERTIFICATE-----