Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File:                     ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier:          K2h3OPoo8whmonnDZJb49NuTDlSfzbut8lMrqiXfYoI=
Subject key identifier:   86:37:B8:7A:1C:25:3C:FE:26:E4:1A:ED:DA:39:81:59:EC:0D:E3:53
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer:       /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial:       01962F7467A5141F1917B5F204F20FAEB412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number:          0A26
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
                          2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: 2JCub0MAtaYIC781D7J9g6XW6+tZ0uiab7gkwtBLHS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:67:a5:14:1f:19:17:b5:f2:04:f2:0f:ae:b4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=8637b87a1c253cfe26e41aedda398159ec0de353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:be:5f:c6:e6:b7:c0:0a:80:83:d0:58:33:
                    dc:f1:3b:21:79:3a:23:a8:bc:c1:a1:9c:c1:4e:af:
                    da:c4:79:db:2e:b4:0e:aa:75:68:4d:78:f6:d7:c5:
                    55:e3:d6:e4:31:98:00:8d:5b:f2:da:09:26:c3:f0:
                    86:64:35:ce:00:d0:8a:2e:61:59:51:11:f6:e8:b3:
                    96:bd:eb:2e:d8:90:ed:b5:13:0c:43:9e:47:0d:1b:
                    92:0a:1e:0f:b8:dc:4c:8a:57:ae:ca:3a:32:18:d6:
                    38:c5:9d:3e:a6:b3:30:cf:b0:e1:68:d8:a6:bf:2a:
                    e0:1a:cc:30:41:92:ea:3c:38:f8:fa:29:a7:c4:f5:
                    3d:ba:04:9c:b2:c9:5d:71:9a:e0:07:e7:78:7a:d5:
                    d9:fe:bf:be:13:17:4a:42:9e:73:c3:7c:8a:bd:14:
                    f2:87:c2:cd:ac:97:9d:7e:7c:64:41:b7:1d:3d:18:
                    dd:1d:32:6a:42:f7:18:52:bb:2d:03:61:a0:bd:07:
                    45:ef:da:31:69:c6:01:5f:a2:9d:46:ef:4b:a1:9e:
                    46:ec:bc:8e:b1:5f:94:6a:72:17:e8:0e:26:19:6c:
                    9e:41:28:66:d2:22:7b:53:25:58:17:84:9a:29:ca:
                    8f:50:5f:a4:23:54:9d:b2:d8:22:2f:10:1f:b3:d0:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:B8:7A:1C:25:3C:FE:26:E4:1A:ED:DA:39:81:59:EC:0D:E3:53
            X509v3 Authority Key Identifier:
                keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:fd:db:8f:62:ec:0d:88:21:1d:c5:bf:f7:5a:08:82:64:1f:
         61:cf:92:57:8a:ae:0b:08:84:37:7e:fb:09:d7:c6:40:d4:a7:
         4a:7d:11:94:2f:25:30:01:3b:2b:0c:f4:64:bb:3f:e4:a7:b3:
         e9:a2:32:07:66:74:a3:ff:c8:d5:52:1d:80:e1:67:9c:38:71:
         fc:43:93:ae:3b:74:ed:5b:40:55:d7:22:59:91:13:61:ae:26:
         48:f2:f6:4a:fe:6a:69:67:78:81:39:ac:55:2d:3f:19:05:9f:
         4a:ef:1d:d1:e8:e0:ab:a9:74:2e:48:23:30:1d:2f:9d:7f:72:
         5b:43:84:df:a7:98:56:a7:b7:4d:37:b4:e8:48:b8:c6:20:65:
         58:06:77:e3:9e:87:ca:af:70:70:33:90:4c:b7:33:ca:6f:ef:
         de:83:61:27:c6:3a:34:9a:77:82:7e:02:2b:2b:bc:77:eb:a9:
         4a:aa:37:ee:fa:5e:75:b6:dd:75:93:47:54:12:d5:80:80:e1:
         79:a3:1c:87:21:b6:33:6e:ef:a0:20:d6:18:d6:22:b6:1c:45:
         10:e3:cd:43:5e:d0:21:e1:ba:6f:a6:7c:d0:40:97:f6:57:7a:
         61:e1:57:c2:24:f6:00:0c:00:55:01:13:f8:86:1a:b5:3a:18:
         b7:df:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----