Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File:                     luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier:          e0GyfnYzITbzVNAtls2/75pkcHAMBXYtmUnGhVaWWiw=
Subject key identifier:   9C:D9:D2:6E:16:9C:34:F3:0D:AE:40:7D:2C:56:42:7D:73:7D:DC:72
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer:       /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial:       01962F06D270667ED4DF0B3B247716EDF50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
                          2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: PLSHPShzLxst5qIH/Lvy+YD91n0MzC4eQ55gLrTNqk8=)
                          3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d2:70:66:7e:d4:df:0b:3b:24:77:16:ed:f5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=9cd9d26e169c34f30dae407d2c56427d737ddc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:9a:54:61:4e:b0:99:a2:55:38:4c:3c:6b:
                    26:91:6b:cf:84:3e:bf:1b:c5:23:c3:78:d3:c1:b9:
                    be:d3:e9:47:2a:a5:10:73:4f:e2:56:c9:26:95:e0:
                    71:a5:5a:a4:29:a4:cf:f0:18:ae:d5:c5:01:14:1d:
                    e3:45:cb:2a:40:9b:d3:9a:46:ea:e1:b7:69:4e:5c:
                    d8:3a:64:fc:9a:b0:86:0c:37:9d:0b:c5:9f:91:20:
                    be:0f:f8:9f:9d:62:a6:ea:0b:15:22:68:18:a2:7a:
                    39:95:be:ea:17:1e:1b:c7:ab:03:ac:2f:e3:52:ce:
                    5e:9f:43:b9:ae:00:51:fc:da:4c:5b:f5:f8:c1:d5:
                    3a:3e:60:b6:81:63:0c:2a:a8:07:6e:5b:22:7e:42:
                    b9:d6:8a:71:f1:62:e0:8b:e9:f6:d2:1f:8c:0e:e4:
                    54:91:d0:bf:11:43:e1:80:d2:c4:71:11:1e:5c:8f:
                    b3:04:0f:aa:bc:84:87:3b:8a:14:8a:47:ba:49:f3:
                    8b:c3:15:d2:bd:04:86:3c:6e:5f:7d:5d:f8:cf:44:
                    c4:cd:4f:78:7a:24:a0:83:63:fa:f2:8f:05:ac:21:
                    fb:ee:d7:f4:c6:01:69:c3:8d:1c:63:97:9e:23:9b:
                    fc:52:ee:eb:cc:2c:46:30:9c:ed:19:32:62:fe:c6:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:D2:6E:16:9C:34:F3:0D:AE:40:7D:2C:56:42:7D:73:7D:DC:72
            X509v3 Authority Key Identifier:
                keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:89:7c:49:13:32:3f:0f:24:e5:1f:9c:5a:e0:cc:df:16:
         b7:7a:ed:8d:1a:29:ee:21:74:c2:d6:11:02:58:e9:f6:17:d4:
         b5:03:ed:1e:95:72:84:9e:71:42:b1:bb:c4:a6:64:45:12:57:
         71:ab:ab:c5:45:e1:bf:99:42:f5:f6:42:ff:97:8d:57:0e:83:
         45:6b:61:23:ee:68:e7:37:4f:4b:5f:4e:ce:f2:c8:32:6a:9c:
         86:41:11:ed:ba:2d:ba:d3:59:3b:26:c3:96:a2:58:a6:36:eb:
         91:77:c8:d5:e2:7e:40:a0:9d:d9:4f:a6:2f:f3:48:6b:c8:b9:
         29:67:82:12:fd:38:59:4c:92:46:7e:f2:26:12:11:ea:06:a7:
         77:31:69:b7:e6:51:b9:6b:43:f2:14:9c:71:15:3e:93:fd:39:
         31:6d:dd:31:09:bc:2e:4d:b1:90:f7:2c:57:4a:17:dd:09:50:
         df:15:e1:73:20:ad:9b:a7:5e:54:12:72:95:09:79:72:e9:7a:
         c7:18:c1:1b:82:bf:c4:d3:08:90:65:93:5a:cd:44:37:0c:3b:
         b3:f3:37:7a:ce:b6:68:9b:41:eb:94:da:21:82:03:f5:eb:d1:
         65:e3:28:94:10:4d:9a:19:1a:38:4a:a7:9c:4d:22:ae:d1:de:
         9a:5e:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----