Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File:                     LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier:          odk+1YbQvAd507UfQeGq0le6sx5+P+gM+k8HCklZftY=
Subject key identifier:   A4:56:FC:E4:74:51:23:44:E6:0E:95:F2:06:54:21:E7:B8:72:58:7B
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer:       /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial:       01962ECF7A608B46BB70CF90842BBAF3C6EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number:          0C9C
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 57uU1mBBwf2NTWvRUYQ88syCG_0.roa (hash: 29c5vB9J3vlsLvhEYhn9hPcXbpkgWlHiPuRjoYcpg3A=)
                          2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: hBbvfa942+BicFxNYakv6EvsrUAcMDdGr0QQMJcw21U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:60:8b:46:bb:70:cf:90:84:2b:ba:f3:c6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=a456fce474512344e60e95f2065421e7b872587b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:c6:0e:56:3f:20:9f:76:8f:55:8e:94:66:
                    22:84:b3:c7:2e:1b:97:6c:09:b1:dd:06:21:f6:28:
                    f6:97:da:b0:f1:73:25:5f:e5:7e:99:96:b6:09:83:
                    21:54:0f:72:3a:3e:c6:30:f4:1a:bb:e2:cf:ee:02:
                    77:91:6d:a8:3d:18:cf:fc:21:92:1e:73:bf:10:3e:
                    17:a9:ba:ab:51:3f:af:5b:2c:62:14:af:8d:93:03:
                    9f:6a:87:24:13:fb:ed:5c:91:ea:b7:97:05:23:52:
                    69:c9:a4:14:18:64:c5:ce:5c:e5:83:cc:f8:39:99:
                    91:3b:ef:7e:12:c8:81:2a:ae:30:4b:39:99:f1:a4:
                    d7:12:8b:5e:13:69:2f:f7:7c:f1:69:fa:d8:e8:84:
                    13:3e:62:72:ff:8e:40:a5:70:93:bb:ee:51:9f:b5:
                    a0:07:b7:29:ad:2c:82:c7:e9:34:8d:e8:0b:b7:76:
                    8c:9a:d7:3c:3f:67:3e:8d:00:b5:d4:c5:ba:f4:2c:
                    c4:1c:aa:e9:7a:43:31:c6:e4:77:6c:56:09:84:45:
                    a1:24:79:6d:b7:fe:9e:27:2f:fc:19:96:c4:3b:94:
                    7d:75:65:6b:71:d1:0d:11:a4:d1:fc:2f:ad:79:42:
                    af:7d:41:46:aa:6a:15:71:fc:e2:ee:64:6d:af:63:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:56:FC:E4:74:51:23:44:E6:0E:95:F2:06:54:21:E7:B8:72:58:7B
            X509v3 Authority Key Identifier:
                keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:77:54:e0:e4:8d:d6:2b:df:69:85:bd:a7:08:34:19:f7:
         c9:16:e5:cf:63:92:bc:d2:1e:43:f1:38:81:97:b5:46:ff:4e:
         ec:64:12:25:a6:7c:74:7b:46:cf:54:79:31:bc:4e:8d:23:4f:
         63:0f:c5:45:75:42:4f:35:ce:44:71:09:61:2c:9d:4e:89:e0:
         dc:64:a1:80:51:fe:55:3f:11:78:ce:71:49:4f:68:87:2e:6a:
         89:51:68:db:f9:2e:91:76:60:fb:6d:19:dd:6b:49:e6:68:80:
         b2:3b:26:35:d9:f6:03:7a:36:f6:f9:26:d5:ac:fe:dd:1b:54:
         dc:09:03:7f:e1:6b:8b:2b:5e:50:23:a6:3d:9c:9f:38:39:71:
         2f:a1:9e:97:b9:95:96:d4:b1:d7:87:05:c0:2b:0d:8e:bc:38:
         b3:bc:fe:7e:63:08:b5:17:df:a6:e8:10:28:1c:84:8d:c2:a4:
         dc:1e:20:70:15:8a:6d:9c:3c:17:04:aa:d8:0c:36:1f:97:f4:
         90:63:a9:fe:84:92:ee:95:6c:cd:74:61:62:97:a8:3b:31:7e:
         18:41:a4:92:c9:92:5a:08:79:02:56:b0:92:7b:98:6b:d1:8e:
         35:fd:c0:7f:93:0d:f3:cc:79:af:61:85:7a:bd:f8:38:c3:a4:
         10:99:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----