Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File:                     Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier:          xE2sX1hF01w9giHG8fU9DLyYoLxt2yCv8KaUHg0/um8=
Subject key identifier:   5B:87:15:FB:90:8E:3A:E1:0F:FB:43:70:20:F1:AB:60:E0:7A:A5:55
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer:       /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial:       01962F06F3408595B4068C2CC4AB05346582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
                          2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: Bp/yjg1ghyZMlC/irGGll1sW1457rV6KxRIzdILHzDE=)
                          3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:40:85:95:b4:06:8c:2c:c4:ab:05:34:65:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=5b8715fb908e3ae10ffb437020f1ab60e07aa555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:2b:37:97:2a:5a:2b:7b:43:b6:36:22:cb:
                    3f:19:48:36:1c:59:63:8e:ed:e9:4b:3f:dc:b9:98:
                    b3:64:eb:74:94:8f:14:c3:74:77:a5:88:08:ae:8a:
                    3f:47:d1:d1:b2:92:07:e1:96:01:c5:5f:25:00:21:
                    87:17:a1:64:cd:e1:ff:fa:c9:8b:73:d9:9c:25:56:
                    6c:60:db:bf:1e:cd:ef:9e:56:22:93:4b:c1:88:6f:
                    33:5c:35:5e:29:d9:cb:ec:d4:91:c1:06:88:a3:f8:
                    7c:83:82:d7:65:70:2c:c3:ae:97:88:7b:9f:36:1d:
                    30:2b:3d:3f:b9:49:b6:3e:df:8c:5b:b7:f4:cb:b4:
                    86:b7:a3:48:1f:69:62:a3:2c:14:74:dc:7c:3d:7b:
                    6e:a6:a2:e2:8c:84:54:dd:8e:35:f4:ee:ec:af:c6:
                    47:de:55:24:e1:5a:48:b1:97:c9:df:2d:98:a7:b6:
                    f0:e1:ea:87:ee:ab:cd:e9:ec:da:a4:ec:72:65:da:
                    2c:c3:93:6d:b4:78:11:8b:83:c5:1c:b9:9a:58:48:
                    1a:40:a5:41:ee:de:85:d2:3b:26:c6:63:d4:65:ec:
                    db:b8:ef:f7:7e:7c:42:a8:66:d5:ee:a7:8e:53:06:
                    8b:af:2e:1b:ea:fb:a8:cb:6b:8c:b5:26:26:cb:cd:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:15:FB:90:8E:3A:E1:0F:FB:43:70:20:F1:AB:60:E0:7A:A5:55
            X509v3 Authority Key Identifier:
                keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:8c:b3:ee:87:ce:83:75:d6:43:94:b8:19:e5:cc:7c:d4:
         1e:35:72:a1:a0:2c:f7:46:2a:50:83:e1:2c:85:2e:07:67:85:
         ce:8e:be:ef:e6:58:c8:3d:73:34:01:c8:df:2a:f8:28:48:a9:
         3e:7b:a8:ef:df:54:44:06:ef:dc:30:e2:5b:d1:eb:43:61:76:
         30:2b:8b:1a:c3:5a:62:db:b0:52:7f:4c:6c:8b:f6:e7:0c:81:
         b2:88:05:2b:30:0d:89:d6:8d:0e:e7:07:6c:f4:31:f7:c4:87:
         47:c4:1e:62:16:b3:fa:33:32:22:42:e6:3c:ae:83:d5:f0:7c:
         3a:a5:bb:a7:c9:e9:2c:c4:82:d1:a7:29:33:4d:5c:ea:9b:11:
         cc:86:43:a9:7c:db:36:fa:f6:97:fa:ca:71:cd:82:ac:2f:c2:
         8a:af:e8:34:dd:fe:ae:bd:27:40:e8:6e:4a:27:e1:ac:f6:75:
         48:28:42:31:d2:f8:10:7e:94:cc:40:54:0e:50:03:98:bf:bb:
         dc:1e:f6:a9:33:85:99:7b:d0:85:d8:45:19:e4:cc:af:f3:12:
         23:47:2e:93:53:f8:fd:ef:c3:69:c8:84:64:87:ee:8d:93:3f:
         df:cc:a4:f9:79:e7:e5:7a:be:6a:be:0a:1d:bb:e8:eb:a4:c7:
         77:92:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----