Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
File:                     LTX2XfLLPqFuURUvrHWUf6nDC_c.mft (raw, json)
Hash identifier:          r6cGXaXIrCgL5oLUdi3OySW68QZecv1u+nha9GSgFRY=
Subject key identifier:   14:CD:34:20:B5:AE:5C:0F:2E:4E:1B:4F:64:24:B0:36:55:18:DE:8E
Authority key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Certificate issuer:       /CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Certificate serial:       01962F06585EC3AD3FE9EFA40E0A506C3DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
Manifest number:          0880
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: LTX2XfLLPqFuURUvrHWUf6nDC_c.crl (hash: QHOYlPM5AcuI5JY00KUNnXlO4Q5V852FyokcsLMxdRs=)
                          2: Ocmt4jUZ7mV3GEDP4V_J5USsmhQ.roa (hash: FYS5oyulHe5jFBDp8cQAU5FujX28XBCqFxC7ytK6HbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:5e:c3:ad:3f:e9:ef:a4:0e:0a:50:6c:3d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=14cd3420b5ae5c0f2e4e1b4f6424b0365518de8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:f3:18:f6:b3:7a:8c:d2:cc:99:69:03:e2:
                    3c:d7:b5:39:44:49:99:b4:2a:78:d1:8a:66:1b:a8:
                    c0:4b:3e:19:30:49:6e:74:6f:e0:9e:c5:a1:76:e2:
                    58:d1:aa:a0:8a:59:e2:34:68:62:02:a9:d9:23:91:
                    26:fb:fe:eb:ce:4f:1c:47:af:d1:6c:bb:cb:65:06:
                    52:87:28:94:16:0b:2c:f9:cf:8e:fa:af:92:e0:de:
                    7f:9e:b8:77:7a:af:95:fb:6f:b4:b7:50:c4:c7:96:
                    c3:e2:8a:14:13:06:67:52:07:46:48:bc:f0:db:5d:
                    59:29:a6:b2:c3:25:30:14:ac:cd:45:28:47:7c:97:
                    6b:3a:1a:61:77:16:cf:41:2a:9e:2e:5e:5a:70:e8:
                    d3:69:6e:56:c8:45:98:2c:ef:ca:02:8c:bd:05:3a:
                    f9:69:dc:d1:e1:49:c4:a2:d1:b7:6e:c5:30:94:8b:
                    75:bf:b6:4f:6a:09:08:d5:0d:fb:e5:21:56:88:ad:
                    e0:e1:18:5c:2e:10:ad:07:e3:99:42:96:a0:35:09:
                    08:75:e9:07:3b:ea:76:5a:48:96:0d:0f:d4:ed:b3:
                    22:f7:0f:31:cc:35:89:b1:42:50:36:15:05:1e:c5:
                    9a:53:fc:00:dd:09:ee:4a:d0:13:b2:50:1d:a6:95:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:34:20:B5:AE:5C:0F:2E:4E:1B:4F:64:24:B0:36:55:18:DE:8E
            X509v3 Authority Key Identifier:
                keyid:2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:0e:7a:70:e6:36:a8:2b:cb:a1:c0:e2:51:98:b6:34:53:
         9d:b1:de:e5:03:82:d8:b3:7c:87:1b:66:3d:b4:3f:26:f7:f7:
         95:d5:50:ef:c9:cf:66:90:0a:ef:48:fd:df:fe:a2:7f:73:96:
         e9:e1:bd:16:0f:bc:50:1e:e8:c0:49:4a:de:01:85:7d:6d:bd:
         0d:df:07:6a:49:59:6d:1b:d6:70:fe:f4:5e:81:42:87:35:87:
         67:a8:e4:60:1d:89:b8:c9:1c:c7:c0:94:f8:06:84:5b:58:fa:
         3f:88:e1:dd:52:43:10:08:37:8c:0e:e6:e6:70:aa:6b:ca:18:
         20:6e:5a:18:42:37:03:97:ec:8c:78:76:d6:26:09:ac:ec:2e:
         fd:53:83:88:7d:ce:31:62:16:de:57:5d:77:34:00:75:1a:bf:
         3a:3a:17:eb:1e:00:d1:64:b3:be:e6:e1:82:ee:ba:5c:9d:82:
         15:57:89:20:08:15:54:a8:40:aa:44:4a:fb:ab:5b:ab:62:a9:
         90:23:56:f6:21:7f:4c:3e:92:13:e4:06:d5:08:e9:a0:0f:85:
         9e:d0:53:bb:aa:21:79:d9:c4:76:4f:4e:1e:35:24:9e:b5:69:
         75:4f:30:2e:35:40:64:a8:89:7b:ea:72:9d:b1:93:75:da:d4:
         dd:0c:11:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlhew60/6e+kDgpQbD2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzVmNjVkZjJjYjNlYTE2ZTUxMTUyZmFjNzU5NDdmYTlj
MzBiZjcwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EygxNGNkMzQyMGI1YWU1YzBmMmU0ZTFiNGY2NDI0YjAzNjU1MThkZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx/zGPazeozSzJlpA+I817U5REmZ
tCp40YpmG6jASz4ZMEludG/gnsWhduJY0aqgilniNGhiAqnZI5Em+/7rzk8cR6/R
bLvLZQZShyiUFgss+c+O+q+S4N5/nrh3eq+V+2+0t1DEx5bD4ooUEwZnUgdGSLzw
211ZKaaywyUwFKzNRShHfJdrOhphdxbPQSqeLl5acOjTaW5WyEWYLO/KAoy9BTr5
adzR4UnEotG3bsUwlIt1v7ZPagkI1Q375SFWiK3g4RhcLhCtB+OZQpagNQkIdekH
O+p2WkiWDQ/U7bMi9w8xzDWJsUJQNhUFHsWaU/wA3QnuStATslAdppUxwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTNNCC1rlwPLk4bT2QksDZVGN6OMB8GA1UdIwQY
MBaAFC019l3yyz6hblEVL6x1lH+pwwv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFRYMlhmTExQcUZ1VVJVdnJIV1VmNm5EQ19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mY2M4YjMtZmRkMS00YWJkLWFjYTYt
ZTdlMjVjYjk4ZTYzLzEvTFRYMlhmTExQcUZ1VVJVdnJIV1VmNm5EQ19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mY2M4YjMtZmRkMS00YWJkLWFjYTYtZTdlMjVjYjk4ZTYz
LzEvTFRYMlhmTExQcUZ1VVJVdnJIV1VmNm5EQ19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkUOenDm
Nqgry6HA4lGYtjRTnbHe5QOC2LN8hxtmPbQ/Jvf3ldVQ78nPZpAK70j93/6if3OW
6eG9Fg+8UB7owElK3gGFfW29Dd8HaklZbRvWcP70XoFChzWHZ6jkYB2JuMkcx8CU
+AaEW1j6P4jh3VJDEAg3jA7m5nCqa8oYIG5aGEI3A5fsjHh21iYJrOwu/VODiH3O
MWIW3ldddzQAdRq/OjoX6x4A0WSzvubhgu66XJ2CFVeJIAgVVKhAqkRK+6tbq2Kp
kCNW9iF/TD6SE+QG1QjpoA+FntBTu6ohednEdk9OHjUknrVpdU8wLjVAZKiJe+py
nbGTddrU3QwRAg==
-----END CERTIFICATE-----