Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File:                     LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier:          kEAx2dLwrLsZDtlZ3/KO55EjK12kStIkGY1K68+Ef7c=
Subject key identifier:   03:40:36:E7:9E:99:6A:F3:8D:07:2B:F0:F3:8A:E9:07:8E:1A:6E:EE
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer:       /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial:       01962E99BF660DCD513852480B700C6DF21D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
                          2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
                          3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: eLbYuyivRFFeVVRKWaIJdhIeLmUTM5hL6c91cXueAPs=)
                          4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bf:66:0d:cd:51:38:52:48:0b:70:0c:6d:f2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=034036e79e996af38d072bf0f38ae9078e1a6eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:68:fd:52:68:59:48:81:5e:33:69:fd:a8:
                    87:a7:9c:9e:51:2b:77:01:08:4e:39:10:21:08:f5:
                    34:bc:fb:b5:d5:fa:f3:62:4d:45:61:64:eb:d7:16:
                    8d:1e:a5:c6:9a:ff:ec:77:a9:7a:f2:c5:a9:c7:60:
                    79:55:31:22:12:a2:9f:5c:0f:93:ef:45:93:6c:60:
                    d5:51:7a:bd:81:c9:26:25:51:05:8a:76:6d:99:56:
                    56:49:9f:7e:91:15:d4:bd:fd:54:63:f0:fb:3b:d8:
                    c1:c2:11:a5:d8:85:e0:50:0e:c1:1a:6e:2a:bc:8c:
                    f5:24:55:53:ce:d7:c8:55:31:e2:2c:c3:c5:e5:d2:
                    6a:e0:8f:1f:b6:63:3d:90:a6:ee:18:02:ca:bb:74:
                    e7:97:c7:45:d4:07:62:f1:e4:f0:80:85:3e:6e:bd:
                    fe:cc:c5:55:c0:3e:64:e6:da:f8:ff:86:04:a3:df:
                    f4:d1:3c:4c:8e:fc:17:8f:75:5c:c9:dd:d4:ad:39:
                    9b:43:93:ba:61:36:ac:d4:78:86:52:04:25:7e:4e:
                    29:35:49:7d:18:3a:1f:97:20:b6:53:6e:87:11:cb:
                    33:92:0e:b5:d3:11:66:91:e6:d5:50:78:a0:c1:04:
                    b0:ce:e4:47:ab:eb:9a:4f:1a:22:be:14:0d:55:1e:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:40:36:E7:9E:99:6A:F3:8D:07:2B:F0:F3:8A:E9:07:8E:1A:6E:EE
            X509v3 Authority Key Identifier:
                keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:d5:15:cf:19:14:d6:20:1e:66:46:9c:3f:8e:54:70:db:
         61:c8:2c:98:a0:5c:e8:87:f1:89:b9:66:62:cb:63:28:59:e5:
         c4:c3:26:58:35:ec:ff:da:37:f3:3b:48:3b:8a:fe:dc:5c:8c:
         8e:c2:f1:36:e7:19:4b:0a:a7:e3:df:10:0f:51:a3:d8:4f:2c:
         83:b2:16:4b:f2:44:8a:c4:4f:51:a7:3f:17:31:4a:fd:e6:f9:
         d3:5f:7e:4e:3b:3e:9a:d6:62:38:a7:c2:e1:e1:2f:81:8c:17:
         66:a7:dd:2f:79:1d:f4:64:1f:0b:19:65:81:d9:bf:ef:13:2d:
         aa:da:d8:14:0d:f1:0c:56:e9:3b:77:7f:80:09:86:6a:e5:d2:
         ae:9b:39:48:5b:e8:73:86:0b:2e:15:b1:93:a3:c3:90:7e:34:
         0c:6c:e8:56:81:d3:47:37:09:7b:b7:81:02:6e:11:cd:a7:43:
         f9:33:1d:6f:c3:1b:2e:e6:cb:46:99:02:db:aa:3c:fc:27:ca:
         0b:7b:dc:f0:e3:ba:ec:cd:d3:bb:35:1b:db:47:5d:a5:0c:d3:
         da:a5:7f:31:08:90:47:7a:e5:a5:ab:28:1e:c3:32:81:49:45:
         ff:24:0f:9b:9d:bc:66:60:07:37:73:22:76:9f:fd:fc:ed:3c:
         f5:43:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----