Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File:                     lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier:          6+BwNxdiUsXx1p42aDHHLK81sCeC05U6RkTU8FDaTm8=
Subject key identifier:   F1:87:5D:00:B7:70:DB:A0:8B:70:2B:FF:34:70:CF:73:E0:45:75:DD
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer:       /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial:       01962FAB7E5B24DC871B28DDE74013DA890C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
                          2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
                          3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
                          4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
                          5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
                          6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
                          7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: bmLaZr0Bp/LeuL1gvKLeJmvRCm/Rz+L2YX9ZMGIDAvI=)
                          8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:5b:24:dc:87:1b:28:dd:e7:40:13:da:89:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=f1875d00b770dba08b702bff3470cf73e04575dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:4d:09:6f:d4:fd:48:47:4f:07:2c:1d:b0:
                    57:c2:72:92:2f:e8:af:c0:6c:72:c4:8b:8e:ea:34:
                    f2:fd:50:2e:01:61:e9:28:a4:97:6f:cc:8a:a6:fd:
                    5a:28:36:df:0f:b5:ef:55:e5:eb:e1:87:4e:b7:78:
                    85:cd:07:16:d7:e5:29:05:38:56:7e:5a:f6:4f:d6:
                    67:47:1f:8d:08:22:05:20:fd:b2:dd:9f:2b:02:f3:
                    a2:04:ac:94:8f:c5:4e:2a:10:5e:f4:a9:85:c3:a2:
                    3e:2c:30:12:bd:6e:38:76:b7:f8:d1:d2:fa:0d:14:
                    31:8e:ac:cc:af:10:47:9d:3f:14:9b:c5:f3:89:47:
                    d3:5f:9a:22:0c:7c:19:8c:41:84:7a:13:74:df:3c:
                    93:22:7d:19:d3:ce:51:57:a3:4c:c0:49:11:00:14:
                    ba:f5:9d:03:77:c0:3f:7e:75:54:72:06:bc:6c:1d:
                    5b:27:db:e6:e3:22:3d:82:f0:c4:35:1f:d3:c1:3d:
                    0b:a8:a6:c0:4d:39:30:66:72:c2:2e:16:10:eb:ce:
                    4b:28:35:0d:f3:8e:4d:84:8d:80:25:9a:67:60:3d:
                    e0:ca:c7:a0:30:ad:f7:60:a8:27:f1:e2:8f:a0:85:
                    d5:ce:ab:f0:b4:ae:cd:3f:28:37:66:85:4a:48:bb:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:5D:00:B7:70:DB:A0:8B:70:2B:FF:34:70:CF:73:E0:45:75:DD
            X509v3 Authority Key Identifier:
                keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:7e:72:0c:a0:3c:ed:72:f2:03:11:c9:19:03:9e:44:dd:
         10:f6:c6:14:0a:81:b4:1b:8f:17:3c:29:42:99:ff:4a:da:48:
         ea:ec:91:09:d0:7b:3e:82:b5:0f:da:d4:c5:6a:bb:57:3e:1b:
         af:e1:e2:63:fe:88:fa:a2:94:d5:fc:b8:c7:6c:66:5a:3a:65:
         0e:5f:ed:05:69:7e:17:47:75:0d:9f:8d:f3:29:03:3a:f6:7e:
         1a:08:1c:c3:4e:07:0e:0a:f6:6c:fe:2c:b4:b9:5b:2a:30:47:
         af:3e:67:f6:5b:20:70:40:2b:09:5c:8b:d2:d4:59:91:ae:48:
         36:38:27:eb:67:72:e4:4b:9f:c7:e7:50:25:c4:98:7a:c7:29:
         b3:e3:6a:ac:52:0c:3f:95:07:f2:9e:c8:2d:d6:09:f2:13:22:
         e4:5e:f1:31:08:a1:fe:3c:71:8c:b5:29:09:0a:88:1b:b0:57:
         bb:7a:71:2c:29:07:66:1d:83:5b:41:2e:5e:4c:50:1e:0d:29:
         99:d4:67:1b:4e:5c:fb:4a:c6:9f:b7:4f:f4:d3:46:87:f0:d2:
         a9:19:7b:cc:cf:d6:ae:8f:3e:19:b4:e1:6b:df:9e:28:d5:8e:
         31:62:ca:8d:ba:6c:72:eb:1f:c5:2b:ce:fe:d4:42:28:b1:d9:
         94:04:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----