Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File:                     LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier:          aBrHPvNM7YlqF0vOts1919Aa/gkuM8+P/529DwATFpM=
Subject key identifier:   03:F8:E2:FD:EB:AF:1F:65:A0:F9:E5:2C:FD:08:93:8B:0F:62:8D:6D
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer:       /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial:       01962DF3B05A860379D3F456CA23A1A8AF78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number:          0E92
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
                          2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
                          3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: oDuB0mlLqPwYjIe4HVR3RoQ38SmdDGXkfXPU5LzNZpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b0:5a:86:03:79:d3:f4:56:ca:23:a1:a8:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=03f8e2fdebaf1f65a0f9e52cfd08938b0f628d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:b1:db:61:6d:4c:b9:3a:23:99:b1:5f:07:
                    0a:bc:80:eb:6f:41:96:fe:dc:df:1e:ed:0e:25:c8:
                    3c:85:1a:8e:f1:f1:c6:c6:38:6e:d9:7d:b5:19:e2:
                    7f:76:1d:a6:7d:64:04:5a:eb:af:1c:ea:4a:21:93:
                    fd:c6:c9:f9:30:54:97:58:ef:90:38:31:c8:a7:45:
                    07:8c:f1:fb:53:52:50:aa:ed:19:d0:3c:68:96:a8:
                    8a:7a:8d:d0:b6:3b:43:36:37:30:ad:87:bf:67:4c:
                    2b:07:89:de:a7:d2:08:4b:8d:d1:15:ea:1a:c5:b4:
                    9c:9a:3a:35:ee:ae:ca:c2:a8:8a:11:24:e0:0d:40:
                    2f:3a:e9:2d:57:cd:8e:9a:f3:5a:5f:c5:22:78:fc:
                    3a:ab:e6:a8:c6:2d:93:68:a7:5a:b7:9a:10:6c:fe:
                    a1:f7:fd:58:c8:10:27:31:2f:fc:d9:f9:60:f8:2b:
                    ab:d8:f2:a9:cb:4e:84:f2:4e:d2:63:80:3c:20:96:
                    38:25:0e:27:6d:02:8d:ed:7f:1e:d9:51:3b:e5:01:
                    85:b8:e3:3c:e7:b4:12:41:14:1d:8c:0e:a0:b1:ae:
                    2b:18:5e:de:89:ef:09:64:c8:ef:ec:d8:60:b2:ff:
                    6f:e7:3e:e9:9b:c9:10:14:ce:f1:e3:75:d8:75:8b:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:E2:FD:EB:AF:1F:65:A0:F9:E5:2C:FD:08:93:8B:0F:62:8D:6D
            X509v3 Authority Key Identifier:
                keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:33:6f:67:f6:ee:93:5c:be:fd:15:ba:26:b3:69:5f:2e:99:
         34:d1:19:9f:d0:af:b3:f4:54:4d:5d:ba:cf:ed:00:28:b4:22:
         42:43:60:11:f3:e2:fe:0f:45:8b:1f:27:26:ff:44:65:54:35:
         7c:04:69:85:82:68:c1:ee:f6:42:34:b7:21:47:de:05:72:86:
         06:fb:9f:2d:a5:d5:dd:94:66:18:c0:2a:c9:96:97:55:50:47:
         36:3c:c5:49:87:3c:c9:85:ef:f1:36:4f:34:32:b6:33:23:8f:
         58:2e:66:fa:98:de:73:ef:3d:6a:a0:5e:00:12:44:2c:c0:23:
         37:c5:04:d3:a5:63:53:72:4b:28:43:bb:73:24:7b:0d:7e:86:
         20:0d:0f:c9:79:23:e7:47:90:95:dc:c4:4e:e6:5c:5b:29:14:
         23:28:d4:5c:5a:a3:2c:5b:c5:d5:04:99:7d:95:df:d9:3e:98:
         60:13:62:82:e4:e9:3d:06:bd:a6:fb:47:ab:29:5b:cb:89:a1:
         e7:ce:d9:44:62:61:0c:e8:68:61:4a:88:16:17:e2:51:f5:e9:
         1f:e5:85:49:5e:70:03:b1:22:5b:14:dd:53:02:37:2a:82:64:
         fe:64:12:2d:d1:f0:0d:85:74:b6:21:99:75:13:0f:84:2b:b5:
         95:62:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----