Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
File:                     LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft (raw, json)
Hash identifier:          YrK7XxYqFwoDgoS8IV5iLXQffHuOKfcdTqo7xXhRQ+g=
Subject key identifier:   2D:13:2A:63:CE:66:DE:61:8C:AA:47:A6:33:FF:36:D1:D9:02:DC:49
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Certificate issuer:       /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial:       01962F3D34EA1B4AC0BEC2C72E2A42999005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa (hash: Bmj7Dd8JxoYoJUgJkT98vzeeRsbATtejXxg70Xp0XBw=)
                          2: LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl (hash: sZk7WBnAZ0D0BueP5WtdEjkEzcHaBZt15oLQ7SDjBWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:34:ea:1b:4a:c0:be:c2:c7:2e:2a:42:99:90:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=2d132a63ce66de618caa47a633ff36d1d902dc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:1f:61:01:de:f1:a6:56:7d:ef:50:f2:cc:
                    b2:a1:21:9d:5a:e3:70:4c:6c:99:fc:28:7d:07:b5:
                    f1:4a:2d:ca:4c:61:55:6f:1d:21:9b:78:ab:16:0b:
                    3a:37:b4:3b:49:da:b4:91:30:81:64:a6:6e:dc:51:
                    ac:6d:75:9f:8a:a1:b5:7a:5d:d5:61:79:f0:be:3f:
                    57:f9:d5:45:72:07:4a:10:ba:81:3d:43:85:53:ec:
                    ef:a1:f2:96:17:fb:c9:a1:29:de:b6:b8:10:23:8c:
                    2a:71:7b:2d:3a:3d:8e:7c:f2:69:a7:73:17:85:ff:
                    b2:04:76:4d:4a:8e:bd:d6:41:65:d0:4f:6a:f0:ab:
                    02:ae:5d:52:bd:64:dc:74:0d:4e:da:60:99:c8:94:
                    ef:af:68:e0:80:27:7e:37:a3:8c:14:9d:fb:50:53:
                    7c:a8:e4:52:4d:13:14:15:0e:ed:08:02:87:1d:2d:
                    5f:34:d6:2d:e7:0b:7b:c5:a7:9f:41:17:aa:2a:eb:
                    9d:1c:a3:fb:72:34:7c:12:06:63:91:d4:62:63:28:
                    5c:f9:17:43:45:0a:fb:b5:e9:3d:53:f7:8f:31:bf:
                    c4:5d:34:1c:95:dc:87:38:cb:8c:84:c1:45:ad:61:
                    ff:b8:c8:b6:40:b3:30:85:a2:ce:af:2b:0b:44:24:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:2A:63:CE:66:DE:61:8C:AA:47:A6:33:FF:36:D1:D9:02:DC:49
            X509v3 Authority Key Identifier:
                keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:ba:cc:70:a7:38:80:15:bf:c0:20:01:12:9a:32:62:a7:
         bf:90:5e:2a:11:9b:e7:86:ef:65:9c:6e:da:00:0d:ca:2b:18:
         1a:8f:4f:40:1d:40:4d:98:c1:45:07:bb:c5:88:6e:9c:13:f5:
         ed:51:95:87:56:83:0c:9a:98:65:30:00:87:9b:6b:4c:1f:c2:
         f4:ae:6a:7b:d6:53:7b:d9:f2:df:62:e2:42:67:2b:57:e9:ee:
         a4:b9:8f:fd:9c:a6:a4:fe:60:7a:b8:5d:b0:39:27:dd:e6:55:
         ec:31:a0:48:7e:8a:54:ac:4e:50:02:d1:ca:e4:fc:77:ce:57:
         a3:07:bc:98:5e:d7:9a:09:2d:71:ae:48:e7:db:9f:d0:d4:ef:
         7d:9d:76:5a:28:31:68:cf:78:12:ce:f7:8f:b9:5e:65:ec:46:
         d3:56:d1:6f:e3:be:c0:91:b2:95:43:85:91:d3:88:67:78:24:
         01:66:00:64:8f:52:e1:05:42:e6:a9:00:af:3d:81:e3:98:b1:
         1f:29:ca:23:dd:1b:42:86:7e:68:2a:ed:68:5f:6e:74:9a:fe:
         7b:ff:b8:97:da:8b:21:0f:e7:66:7b:80:4c:7a:66:50:da:69:
         d2:7b:49:fe:2a:7b:b3:83:57:e7:85:cc:cf:18:f6:13:99:63:
         e1:7c:be:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTTqG0rAvsLHLipCmZAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNmY5YmRhZjY5ZGNhMWNkYjllNDQwYzk3YzEwYTA5MmVj
MWIzOWMwHhcNMjUwNDEzMTMwMTAyWhcNMjUwNDE0MTMwMTAyWjAzMTEwLwYDVQQD
EygyZDEzMmE2M2NlNjZkZTYxOGNhYTQ3YTYzM2ZmMzZkMWQ5MDJkYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw64fYQHe8aZWfe9Q8syyoSGdWuNw
TGyZ/Ch9B7XxSi3KTGFVbx0hm3irFgs6N7Q7Sdq0kTCBZKZu3FGsbXWfiqG1el3V
YXnwvj9X+dVFcgdKELqBPUOFU+zvofKWF/vJoSnetrgQI4wqcXstOj2OfPJpp3MX
hf+yBHZNSo691kFl0E9q8KsCrl1SvWTcdA1O2mCZyJTvr2jggCd+N6OMFJ37UFN8
qORSTRMUFQ7tCAKHHS1fNNYt5wt7xaefQReqKuudHKP7cjR8EgZjkdRiYyhc+RdD
RQr7tek9U/ePMb/EXTQcldyHOMuMhMFFrWH/uMi2QLMwhaLOrysLRCSNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0TKmPOZt5hjKpHpjP/NtHZAtxJMB8GA1UdIwQY
MBaAFC1vm9r2ncoc255EDJfBCgkuwbOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFctYjJ2YWR5aHpibmtRTWw4RUtDUzdCczV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80NDY0ZjItNmMxYy00MDk2LTk2MGIt
ZTM5YjNhMzAyY2VkLzEvTFctYjJ2YWR5aHpibmtRTWw4RUtDUzdCczV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80NDY0ZjItNmMxYy00MDk2LTk2MGItZTM5YjNhMzAyY2Vk
LzEvTFctYjJ2YWR5aHpibmtRTWw4RUtDUzdCczV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclq6zHCn
OIAVv8AgARKaMmKnv5BeKhGb54bvZZxu2gANyisYGo9PQB1ATZjBRQe7xYhunBP1
7VGVh1aDDJqYZTAAh5trTB/C9K5qe9ZTe9ny32LiQmcrV+nupLmP/ZympP5gerhd
sDkn3eZV7DGgSH6KVKxOUALRyuT8d85Xowe8mF7Xmgktca5I59uf0NTvfZ12Wigx
aM94Es73j7leZexG01bRb+O+wJGylUOFkdOIZ3gkAWYAZI9S4QVC5qkArz2B45ix
HynKI90bQoZ+aCrtaF9udJr+e/+4l9qLIQ/nZnuATHpmUNpp0ntJ/ip7s4NX54XM
zxj2E5lj4Xy+6w==
-----END CERTIFICATE-----