Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File:                     LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier:          ggrn7ChuL/Cu0wviH821pSHrL5k1ojsZeEZt2zrnQs8=
Subject key identifier:   4A:CB:34:4D:FB:88:8B:4F:94:30:F0:91:15:BD:A2:94:53:DD:42:3D
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer:       /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial:       01962DF4276E3C59328A438DDE78DA2DA03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number:          1338
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
                          2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: o1TjGcguDvDbNpfXGWXE3XoeOTE/9MQHmR4FKdRHh30=)
                          3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:6e:3c:59:32:8a:43:8d:de:78:da:2d:a0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=4acb344dfb888b4f9430f09115bda29453dd423d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:f0:32:03:17:ca:ae:9a:8e:89:05:9c:60:
                    ed:61:a1:25:98:8f:36:78:05:bc:73:69:07:cb:c0:
                    af:63:3b:0d:86:57:f0:e3:11:fd:51:3e:a8:c7:1c:
                    00:04:c6:a4:7e:f9:5c:84:1c:aa:1e:d9:c0:87:94:
                    c5:51:16:7d:7d:38:f5:86:2a:ad:0e:e1:19:d0:73:
                    94:b2:95:22:1a:0d:f6:64:1e:06:88:6a:3d:e0:95:
                    ad:b0:c3:fc:a8:6b:0b:95:53:e3:60:88:bf:d2:ca:
                    21:a1:36:00:87:c9:db:1a:ed:47:75:d9:bf:bd:29:
                    1b:5a:7b:b8:4e:34:ce:93:f5:2c:1a:f8:51:39:cc:
                    e5:40:fb:10:a6:77:45:9e:69:1c:af:c2:ef:fe:6e:
                    4f:35:35:02:1f:e3:5e:81:93:60:ed:d7:62:23:e0:
                    dc:0b:c5:76:49:b7:a5:b7:4c:e8:bd:02:42:98:95:
                    4f:35:b5:1d:c2:45:3d:a1:ed:6a:46:12:e6:23:62:
                    7b:49:3b:b3:06:b6:45:5d:61:12:e1:4b:0e:0e:9e:
                    29:86:bb:70:ba:65:aa:a5:58:5d:e3:54:d0:6e:be:
                    b6:a0:c7:f8:1a:39:35:08:5d:9e:5b:34:7b:17:47:
                    97:8a:ec:eb:80:3e:01:23:d5:df:37:24:1f:03:bb:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:34:4D:FB:88:8B:4F:94:30:F0:91:15:BD:A2:94:53:DD:42:3D
            X509v3 Authority Key Identifier:
                keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f2:b8:71:68:cd:bf:74:56:2f:bd:d1:bb:6f:2e:8b:72:d3:
         09:72:64:3a:3b:96:f8:4f:37:40:f2:48:dd:0f:df:76:de:cc:
         1f:cb:c9:5b:c7:ed:f1:b4:0b:e8:98:41:f5:29:d8:92:f2:01:
         59:5f:97:ac:32:db:e2:bb:ae:52:a6:22:ae:8c:75:be:26:c4:
         9a:74:d5:07:73:da:e7:21:e8:b3:88:a1:52:d2:30:c5:69:10:
         fc:69:ae:c1:9c:c7:51:0f:bd:9b:ed:30:45:c3:5e:76:26:58:
         e6:2e:03:98:f0:03:7d:72:40:43:25:30:e8:cd:57:4a:1e:bd:
         8d:7c:35:d7:e8:d8:2b:4f:58:11:10:3a:ee:36:44:71:5b:b4:
         70:df:96:eb:52:f7:3c:af:fe:d8:7d:5b:c0:77:b0:2c:3a:a2:
         a5:af:69:ba:ee:ff:c8:59:03:8f:e2:ba:53:20:a4:89:6d:81:
         91:97:90:f5:d7:89:96:0a:70:d7:9e:51:38:cd:e5:bb:23:eb:
         c1:2e:02:4e:24:74:a8:a6:22:1a:f3:e3:b4:c1:4c:fc:de:d9:
         99:29:85:4c:5b:17:47:f1:b1:f1:7b:32:ff:03:a9:31:46:6a:
         f3:30:88:fb:ea:d4:b1:c9:e1:c1:f3:cc:6a:00:33:59:c7:1d:
         0e:42:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----