Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File:                     LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier:          ihIRyHTLAEXlMyCS/PYeu3WTkaFOHDeJSIkuAz8fycA=
Subject key identifier:   74:01:8E:EB:34:83:C9:74:64:39:A6:80:CF:D0:62:B8:64:94:2D:4A
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer:       /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial:       01962F3D6FC663A683F38B21B2A7BB6B600E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
                          2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: HBs0Ishprao55QSM/FBfpYbwCNSOv9c2UVVx/l6vCps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:c6:63:a6:83:f3:8b:21:b2:a7:bb:6b:60:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=74018eeb3483c9746439a680cfd062b864942d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:ec:7d:d4:b3:d5:12:28:5c:af:ba:8c:5b:
                    73:9c:30:b7:ff:9b:e7:cf:af:f3:1f:c4:f8:8a:73:
                    8d:b9:1e:fb:bb:96:6b:2d:c5:d5:ba:23:33:1d:53:
                    88:d2:15:d8:a7:18:17:72:f2:90:87:dc:42:80:ce:
                    22:92:52:a5:0d:f0:8b:14:a6:c5:7b:53:b1:9e:eb:
                    97:98:f6:2b:56:ee:57:a8:f4:b8:83:b9:b7:3e:ea:
                    ae:0b:1b:af:17:13:37:18:bc:04:42:56:86:7f:55:
                    7d:19:3b:97:48:66:13:ee:f1:f1:89:2b:41:74:41:
                    6e:8a:78:77:e4:3c:56:1f:1c:6a:24:d0:d8:b2:fd:
                    1d:54:99:42:d9:01:d3:2f:82:36:45:61:90:5c:ab:
                    61:fa:ae:e6:25:96:3d:23:38:0b:2e:7d:98:fc:0b:
                    e1:f9:08:04:b6:6d:be:d9:de:b4:43:6c:ed:36:1c:
                    88:fd:ea:61:7d:e6:ea:df:aa:41:1f:14:65:10:df:
                    0a:7e:b6:7f:2c:a3:b6:70:d0:78:27:6e:23:d3:2a:
                    af:2d:60:de:c4:0d:c7:ef:85:37:b1:f5:43:55:f6:
                    7c:57:96:32:90:5c:61:0c:37:2b:e0:b9:0b:c3:48:
                    4a:bb:bf:ed:91:14:00:59:46:8e:8c:08:32:38:8d:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:8E:EB:34:83:C9:74:64:39:A6:80:CF:D0:62:B8:64:94:2D:4A
            X509v3 Authority Key Identifier:
                keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5e:6a:94:02:8d:f2:5a:a3:9a:66:8f:ce:9e:f3:5b:17:a4:
         9e:19:27:75:54:45:67:62:c4:63:3d:f1:96:f1:f3:be:30:c3:
         89:76:83:7a:53:a8:cd:ea:62:b6:73:f1:e1:76:59:d2:1c:7c:
         af:e0:c8:ea:14:87:f6:9a:c0:16:47:2f:bb:b2:a4:3b:12:01:
         ee:ac:13:47:24:1f:6d:05:40:af:0f:d3:8e:0c:a1:13:32:02:
         8c:62:3c:b6:b8:04:39:fa:5f:b2:d4:12:3c:d6:9a:43:8a:e8:
         58:c6:33:08:31:d2:35:f1:2e:47:bd:6a:50:16:bf:01:cb:84:
         3a:16:5e:79:a2:44:f1:50:87:0c:31:44:3c:57:51:d3:4d:33:
         5c:5a:08:db:e9:2f:04:b2:f2:a8:f9:ae:82:67:cb:0d:ad:94:
         5e:18:59:7c:c4:f0:10:b4:7b:d4:b5:f2:b6:ba:5c:83:7c:88:
         b8:e6:6e:5a:c9:4e:7e:8b:46:ca:17:5e:19:5d:46:71:25:13:
         1f:ad:d6:f6:df:ff:47:b4:79:65:d8:a4:b5:da:5c:34:f1:84:
         b5:b2:c8:53:89:90:fb:78:7f:d4:9b:7a:3e:41:bf:8f:09:02:
         a1:85:7c:54:9a:a6:28:1d:a4:f4:3f:4f:74:93:05:64:44:59:
         e1:89:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----