Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          0L3jzkOTOIFDFQtxxg4+VBjlQPc2styn5pjSIHWnsc0=
Subject key identifier:   95:A6:39:A0:7A:25:5D:8D:AE:EF:9E:C1:D1:38:38:04:8D:59:C6:F5
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       01962E61BD8C46041F4408D55B296757353A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          0305
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: 6scffzQY1gXcuPFBH6r1KAeEwr8rZvK8zOBG5STzXbM=)
                          2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bd:8c:46:04:1f:44:08:d5:5b:29:67:57:35:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=95a639a07a255d8daeef9ec1d13838048d59c6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:50:73:5c:1e:34:ba:e3:f9:8a:94:f6:55:
                    51:b6:0e:5b:11:33:c9:34:8c:3b:62:21:e2:90:54:
                    74:bc:2a:f2:48:eb:1a:bc:07:d1:99:aa:76:09:1d:
                    83:06:a4:a9:f1:75:c7:97:00:42:18:c0:f0:61:be:
                    89:87:6d:99:32:c9:b6:2f:a1:bc:c6:1b:3e:93:c4:
                    34:c7:b5:8b:c1:a1:79:43:48:18:31:59:2f:ef:72:
                    d6:a8:82:c6:48:f8:2b:42:c1:82:4b:a7:20:14:40:
                    80:29:9b:84:e7:48:ba:69:12:43:8e:76:9f:65:e7:
                    3a:62:a5:41:5d:20:3f:08:9d:9f:d0:00:5e:39:a8:
                    b9:e5:0d:fa:65:03:0f:c7:ce:66:1c:1a:e8:a8:c6:
                    96:46:1a:13:5c:2f:1c:81:28:6b:90:1a:4e:23:b4:
                    30:db:97:dd:3f:90:6e:65:99:75:d6:33:1d:d4:d5:
                    29:28:c8:de:31:39:5e:d2:70:4d:51:ca:45:5a:7e:
                    d4:12:16:eb:a6:f7:bd:80:40:47:01:ac:27:6b:93:
                    17:26:a1:96:6b:53:64:71:df:39:8e:b3:3d:80:93:
                    e9:79:60:e1:38:eb:41:28:6c:b4:f7:f5:1f:86:92:
                    6a:f1:ca:5d:88:a2:ff:55:bb:21:9c:4f:a2:79:8a:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:39:A0:7A:25:5D:8D:AE:EF:9E:C1:D1:38:38:04:8D:59:C6:F5
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:35:57:0a:c0:cc:55:ae:75:8e:56:22:c6:b0:0f:d9:0b:
         0f:98:bf:0d:3f:40:c1:9a:71:db:00:0c:3d:08:0a:1e:be:9c:
         73:44:8c:17:1c:37:44:f5:ad:83:1d:0a:31:1b:2b:c2:a2:06:
         93:5a:9e:b5:0c:e4:82:bf:6b:2f:d5:0b:f8:ed:f6:76:3a:42:
         74:a0:85:f0:4a:6e:cc:a0:f5:86:64:03:0a:24:ee:5e:09:9d:
         96:87:a1:2c:f4:4d:23:cc:46:5d:60:9e:75:22:9a:9b:cb:ce:
         43:fd:fe:d2:f6:16:2e:23:26:51:98:5c:e2:81:37:9b:ee:a4:
         64:88:8c:a8:c8:69:8f:3c:87:e4:01:a6:04:d7:51:2a:cf:10:
         36:bc:da:36:8d:85:72:c8:d6:4b:f0:80:03:59:95:84:19:d1:
         2f:91:29:2f:53:88:84:c4:c7:f2:40:66:58:f5:20:2e:e0:20:
         8e:7e:5f:7c:d1:43:f9:b8:cc:89:7f:ff:d1:80:7a:b1:c6:51:
         4e:86:28:b5:db:88:79:f1:24:a8:b0:cb:f5:17:e5:47:45:08:
         98:0e:37:e9:4f:ee:80:a5:22:ae:aa:76:47:59:f1:a1:53:de:
         45:4b:c4:72:9e:df:2e:25:24:47:9f:75:21:21:27:0f:51:82:
         2a:d3:3d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb2MRgQfRAjVWylnVzU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj
NGUxY2EwHhcNMjUwNDEzMDkwMTE5WhcNMjUwNDE0MDkwMTE5WjAzMTEwLwYDVQQD
Eyg5NWE2MzlhMDdhMjU1ZDhkYWVlZjllYzFkMTM4MzgwNDhkNTljNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AlQc1weNLrj+YqU9lVRtg5bETPJ
NIw7YiHikFR0vCrySOsavAfRmap2CR2DBqSp8XXHlwBCGMDwYb6Jh22ZMsm2L6G8
xhs+k8Q0x7WLwaF5Q0gYMVkv73LWqILGSPgrQsGCS6cgFECAKZuE50i6aRJDjnaf
Zec6YqVBXSA/CJ2f0ABeOai55Q36ZQMPx85mHBroqMaWRhoTXC8cgShrkBpOI7Qw
25fdP5BuZZl11jMd1NUpKMjeMTle0nBNUcpFWn7UEhbrpve9gEBHAawna5MXJqGW
a1Nkcd85jrM9gJPpeWDhOOtBKGy09/UfhpJq8cpdiKL/VbshnE+ieYpDwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWmOaB6JV2Nru+ewdE4OASNWcb1MB8GA1UdIwQY
MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt
NDczYTI5YWMzMzYzLzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz
LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY01VwrA
zFWudY5WIsawD9kLD5i/DT9AwZpx2wAMPQgKHr6cc0SMFxw3RPWtgx0KMRsrwqIG
k1qetQzkgr9rL9UL+O32djpCdKCF8EpuzKD1hmQDCiTuXgmdloehLPRNI8xGXWCe
dSKam8vOQ/3+0vYWLiMmUZhc4oE3m+6kZIiMqMhpjzyH5AGmBNdRKs8QNrzaNo2F
csjWS/CAA1mVhBnRL5EpL1OIhMTH8kBmWPUgLuAgjn5ffNFD+bjMiX//0YB6scZR
ToYotduIefEkqLDL9RflR0UImA436U/ugKUirqp2R1nxoVPeRUvEcp7fLiUkR591
ISEnD1GCKtM9Lw==
-----END CERTIFICATE-----