Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File:                     LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier:          kMlCWzm4LSTJ0RoKgw4lLkgtdaLplhLsqu30KRxDm+w=
Subject key identifier:   B4:72:00:9E:3F:7D:81:99:33:D4:07:DF:1F:98:FA:50:52:03:A4:AA
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer:       /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial:       01962ECFC11CFB49EC256B2CC7ADF8C52CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
                          2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: yk+joy5g0B6Kx+VCHhGejCzWpPYEQs94O1RY6HWPIic=)
                          3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
                          4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c1:1c:fb:49:ec:25:6b:2c:c7:ad:f8:c5:2c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=b472009e3f7d819933d407df1f98fa505203a4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:ab:8a:d0:db:50:ad:92:bb:05:f0:b3:f3:
                    f0:56:2e:8e:78:bc:b1:75:08:e7:9a:37:3d:36:5e:
                    a4:86:b2:5d:cd:97:64:62:c8:89:d0:97:f1:5c:55:
                    1f:7c:54:40:48:0d:28:00:c4:c7:bb:2e:fa:cc:9e:
                    a9:30:1e:76:cf:9c:90:e6:6d:31:6d:22:4a:42:2f:
                    e5:08:51:2f:0f:18:78:dd:41:bc:47:63:f7:2a:b3:
                    aa:c3:0f:cf:47:55:12:3b:70:b8:38:ff:31:94:ad:
                    0a:22:97:64:9c:a0:85:44:e1:c2:70:b0:80:08:e0:
                    d4:dd:93:27:6f:a5:af:9e:c4:ee:de:a8:fc:0c:1d:
                    b6:ab:6f:60:9c:cc:f7:9c:d3:cd:9a:34:cb:49:bd:
                    77:44:7b:f9:e7:42:8c:3d:ed:ad:59:8b:90:a4:c2:
                    b7:a8:72:cc:11:5f:8f:c4:03:18:70:ad:38:38:4b:
                    d5:24:3e:59:b2:eb:06:7a:d3:57:83:31:fe:fb:d1:
                    24:3c:91:e3:7c:8f:6b:ff:e1:0c:3e:87:82:c2:2a:
                    6e:9a:df:4e:da:43:40:33:3a:72:6e:88:da:d9:a4:
                    08:9f:84:a4:04:9d:a7:7e:10:30:ca:c0:43:4d:b2:
                    92:ae:65:cd:82:9e:23:30:60:0f:ee:8c:65:f5:38:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:00:9E:3F:7D:81:99:33:D4:07:DF:1F:98:FA:50:52:03:A4:AA
            X509v3 Authority Key Identifier:
                keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:9b:8d:f4:d3:8b:33:76:83:df:b0:22:b5:64:7e:13:c5:
         2a:b4:00:ba:37:b2:8f:00:da:4b:f0:33:f9:ab:32:5b:04:3b:
         85:4d:f9:f1:16:57:00:42:64:b8:70:e0:b8:92:c4:89:40:e1:
         96:1c:48:f1:30:dd:46:35:b8:8b:88:f2:31:22:44:64:31:dc:
         83:8e:9f:56:f6:f4:47:0c:a2:81:ed:1a:e3:07:7a:cc:20:48:
         61:6f:bc:fd:da:2c:74:bc:7a:fa:1e:e7:ad:31:84:37:d8:a0:
         3a:de:ba:9d:c1:8e:8e:c4:06:c7:63:ad:16:5b:ac:40:1c:47:
         a3:0d:a7:31:bb:02:39:7d:c1:b5:3d:25:52:fe:3d:18:14:fa:
         6d:7a:ee:f5:ad:02:0d:75:7c:bf:82:eb:32:2b:ca:78:5e:e2:
         17:a3:25:57:f3:14:05:fc:f5:a6:aa:9b:a2:23:c3:9f:e8:fd:
         9e:0c:7e:a4:c8:49:35:38:69:b9:7a:bd:4c:d6:ba:21:09:d0:
         e2:0e:53:47:a4:1d:cd:d1:8a:30:80:1f:c8:37:15:94:60:75:
         ee:51:ec:1e:36:e1:a8:89:78:7c:f3:20:4b:d9:d2:59:86:f4:
         0c:b3:12:7f:e9:b9:d6:4c:45:93:51:f2:6e:8c:7e:5f:3a:81:
         46:fc:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----