Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          AelhXKJXqJ4C2h9NhehrtiGkzvfhEHqsMwT9lmiIaMg=
Subject key identifier:   FE:DD:00:2B:43:14:82:9C:72:C8:8B:07:88:CE:84:EB:7A:F4:7C:F7
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       01962ECF5EBAF274BA23693544E753FA739F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=)
                          2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=)
                          3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=)
                          4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: 569DorBKd6cexnuRKzGCmWOMMRhgIk9W5yzVsxx28nU=)
                          5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=)
                          6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5e:ba:f2:74:ba:23:69:35:44:e7:53:fa:73:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=fedd002b4314829c72c88b0788ce84eb7af47cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:cb:fa:48:ae:f4:18:b6:3b:03:64:97:20:
                    b3:a8:9b:72:dd:63:ae:ec:a9:e1:8e:3a:46:a6:1e:
                    dc:cb:7b:f1:37:ce:a2:42:b6:68:83:b5:78:8b:4e:
                    2f:61:0c:d4:69:60:0d:18:90:ff:45:ea:70:32:6d:
                    23:aa:f6:fa:a1:a6:51:06:85:52:27:f6:05:1a:40:
                    03:f8:e2:1a:0a:78:cd:29:36:e8:24:2d:22:54:ea:
                    a5:41:ec:e2:44:07:77:67:10:19:b1:f9:75:d8:c1:
                    56:95:24:ab:72:ff:7e:c9:22:02:70:44:c0:c0:1c:
                    95:da:60:a8:45:00:47:38:d7:3e:9f:6c:8c:15:74:
                    f7:87:6c:27:fa:63:5f:a1:16:b5:cb:30:a8:3b:67:
                    af:44:ff:f0:00:32:dd:c6:9c:36:dc:a5:ef:08:1d:
                    1a:0f:31:fd:9e:c4:27:8a:31:92:d3:fc:4b:ac:51:
                    55:8c:e0:db:a1:d9:74:c1:1a:28:c4:96:74:02:19:
                    01:03:db:30:10:a0:8c:7d:dc:12:5b:68:6d:d8:c7:
                    43:71:b8:23:a5:af:4c:15:d1:4e:bf:30:e2:60:a0:
                    07:56:f8:93:8b:60:dd:4d:e9:a3:65:93:6d:0e:95:
                    74:78:5e:7e:ec:f7:c8:fb:1b:1b:91:9b:7e:9f:b7:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DD:00:2B:43:14:82:9C:72:C8:8B:07:88:CE:84:EB:7A:F4:7C:F7
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cb:37:f2:5b:81:92:2e:cb:70:c9:9c:a5:d0:63:5b:78:44:
         5c:80:85:84:28:cf:4a:70:5f:47:fb:bb:a3:54:21:9b:ad:8e:
         fe:41:7d:0c:fe:62:bb:91:3c:1f:71:ff:2e:2b:a3:3b:b3:4d:
         b7:50:1f:a3:f6:63:2f:4b:95:e7:68:b4:bd:eb:ef:d2:a1:ea:
         c2:55:cc:26:78:e7:6e:af:d3:a3:67:d1:ec:60:50:ef:94:35:
         c9:6d:ca:83:0b:72:53:c3:d6:b6:25:c5:23:e8:95:11:7b:b5:
         7f:39:27:fe:51:5e:46:d2:5b:ab:05:d7:e6:66:c0:a8:e1:99:
         5a:2a:8b:bf:78:3a:7e:2f:90:c9:47:cb:ed:e1:1b:de:0e:76:
         da:54:9f:db:d3:dd:8e:38:5f:69:5a:f1:13:fc:c6:97:16:4f:
         f1:5c:ac:14:ee:ec:81:2b:5f:f2:7c:bc:e9:6a:83:89:18:65:
         e2:23:de:c1:fc:b0:d9:69:40:02:ff:69:f5:1d:83:ef:c8:4c:
         18:74:76:e8:9c:c1:d9:2a:66:0a:78:2a:d9:d4:80:5e:58:b3:
         20:d9:17:64:39:5e:0d:e6:d0:ec:b0:51:da:34:46:d4:bb:16:
         c4:48:07:d3:12:51:5c:ac:37:df:fd:50:a9:c4:1a:7e:d5:7b:
         2a:3d:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----