Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          N82sdHzKSUTfnIpyZI0igdx33lqzCzaXfoGyBQ4lbhE=
Subject key identifier:   0F:6D:D9:30:97:A9:C1:B1:E8:1E:5A:2B:48:02:B3:2B:57:D6:20:AF
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       01962F74538AD2B998EAFDFD7BBCEB0D09BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          02EF
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: TfWjrGcflYOQqZpLGbjj/XY7t2bJGJVbwLHo4b0Ko1E=)
                          2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:8a:d2:b9:98:ea:fd:fd:7b:bc:eb:0d:09:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=0f6dd93097a9c1b1e81e5a2b4802b32b57d620af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:d4:f1:23:6e:d7:14:b8:39:b4:92:50:df:
                    1b:08:0e:dd:10:4a:7d:6c:e6:df:9a:ec:d1:29:f7:
                    8d:14:27:4f:fb:32:30:a7:de:45:4d:40:9e:b9:5b:
                    cf:44:f3:ee:f6:1c:38:fc:5a:61:aa:d2:d3:e5:58:
                    fd:ac:cf:03:0b:d3:b2:a5:2d:90:fe:3c:45:d4:86:
                    e3:87:32:49:11:0c:29:d8:63:23:bf:3a:0d:c8:a0:
                    f5:2d:86:70:63:93:de:02:58:db:73:f0:9a:9b:2f:
                    3c:bd:9c:43:15:26:67:7b:73:50:dd:e7:26:ea:25:
                    df:55:4a:f9:d0:fc:6a:50:1b:64:34:b3:90:75:e6:
                    df:26:21:aa:77:62:95:9b:f6:53:32:e9:b4:8c:6b:
                    2e:48:c8:a4:68:01:83:14:a8:a0:c9:3f:9d:77:f0:
                    3c:b9:95:c1:11:7b:d5:a4:29:65:b7:f1:95:36:e7:
                    98:5d:cf:4d:53:2c:9a:f1:b7:e3:56:40:c0:e1:e0:
                    ec:11:20:8b:1f:f9:aa:eb:81:d7:ec:cb:5d:f4:f4:
                    ec:97:1f:a9:15:2a:20:6c:74:e8:76:98:f4:77:7c:
                    87:40:74:55:93:aa:7d:84:e8:86:23:77:f3:ab:b6:
                    94:e0:ef:11:c0:bc:89:e6:ed:4c:ea:4a:0b:b9:4b:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6D:D9:30:97:A9:C1:B1:E8:1E:5A:2B:48:02:B3:2B:57:D6:20:AF
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:d6:22:1e:d2:95:76:2f:e5:18:c9:27:fe:f5:15:61:6a:
         01:b1:b9:f4:d6:09:dd:b6:8d:e9:72:55:bd:c7:46:19:78:1d:
         f4:4c:78:f2:7c:a8:72:f4:88:f8:07:e1:af:d8:1d:ed:1e:d0:
         0f:a4:5a:4d:ad:4d:b6:68:3a:40:2c:f7:91:22:57:a2:18:77:
         c8:0b:a8:b6:02:3b:cd:8d:ba:5e:84:86:8d:09:2a:52:40:0f:
         7a:8c:da:b1:01:f0:f6:e0:2e:7d:98:8b:b0:d0:ed:b0:fb:43:
         56:58:13:2b:4e:40:10:ae:6f:15:47:02:03:35:64:2d:4b:9e:
         a6:73:5c:4a:56:f1:e0:0a:c3:57:90:30:76:cf:8a:b0:f0:05:
         8e:4f:09:b2:14:c4:b3:1f:fe:aa:0b:ef:b0:24:a9:7a:05:d5:
         b3:04:ae:50:98:d4:fc:ec:bf:13:4b:41:0c:ef:ed:33:61:fb:
         8d:0b:90:b6:8c:c0:8b:8f:ff:60:2c:4b:f8:4e:da:aa:5b:ee:
         73:15:d7:44:77:95:17:06:2b:fb:a4:91:04:ea:74:ed:4b:12:
         20:af:0d:cc:cc:50:3c:53:d0:fe:29:bd:7a:9f:e5:50:9f:8d:
         aa:07:a5:78:bf:2f:bd:ae:95:8f:b0:ef:2f:9f:1b:08:1c:bd:
         2d:63:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----