Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File:                     LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier:          R40+BoHJ43ORLDVKszjykd/40Rsc5OXSbcJc6MyumIw=
Subject key identifier:   C5:E4:FD:88:03:BB:74:36:34:0D:57:6A:10:18:4B:F2:B3:E1:34:81
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer:       /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial:       01962FAB976AD4078A9426625867F7930B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number:          04CC
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: ZntyENNse09snaX5yoO24Xkte07+5M7TRSwXRN64/uI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:6a:d4:07:8a:94:26:62:58:67:f7:93:0b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=c5e4fd8803bb7436340d576a10184bf2b3e13481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:16:7e:4f:f0:54:82:06:be:94:17:58:cb:
                    e0:ea:c7:90:ab:e8:e5:9e:f3:18:6c:1c:1a:65:f8:
                    a0:44:d4:55:b4:b6:ae:f8:5d:36:6b:af:42:51:9a:
                    ae:c8:44:54:7c:ad:10:dc:51:03:7b:1f:2c:36:84:
                    23:23:a3:d6:e2:b4:6b:9c:4c:bc:71:d0:d9:55:da:
                    2c:17:54:fe:f7:9c:30:6b:40:d2:85:08:7e:cf:85:
                    c5:bd:fa:04:aa:27:dd:5a:fe:7b:de:34:ad:54:2f:
                    93:b7:b2:93:0e:d0:05:87:83:5e:e9:29:ce:76:3e:
                    b1:4e:70:ca:65:ce:d6:fb:a7:77:9d:19:06:4e:fc:
                    1a:82:4d:a2:e6:a6:8a:b2:a1:3e:8c:91:a9:f7:5d:
                    0a:3d:3d:26:5b:a6:a6:2a:55:b4:07:8e:34:2b:dc:
                    97:b8:d4:ac:1a:a8:08:15:3c:2b:48:49:f6:fb:50:
                    eb:c0:40:96:e8:66:28:37:fc:29:21:6b:b2:a8:44:
                    5e:6c:54:b7:2e:6e:7d:23:b3:2b:0c:77:1a:8c:38:
                    1b:0d:0c:54:d5:94:7a:e9:24:f9:d0:f3:12:71:6d:
                    bb:e5:1c:c9:19:9c:c8:20:a1:98:d8:67:fc:93:c8:
                    b2:85:06:04:0e:f1:2c:5a:72:32:f3:9f:12:4f:54:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:FD:88:03:BB:74:36:34:0D:57:6A:10:18:4B:F2:B3:E1:34:81
            X509v3 Authority Key Identifier:
                keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:2a:fc:da:33:98:3b:ee:e2:29:54:a0:df:1c:30:31:b3:
         99:1e:8d:42:6a:f5:b0:3f:51:ec:7f:f2:49:83:20:3c:8d:b3:
         cc:16:e0:bd:d4:07:72:9a:a4:34:e8:68:9c:ac:55:c8:9d:56:
         03:cb:ab:d5:8c:e9:72:4e:62:bd:54:82:6e:dd:05:e2:b2:64:
         e9:ae:85:7f:a7:98:0f:03:f1:35:d3:0d:d9:bb:f9:3d:26:8e:
         66:18:24:4b:8a:2d:40:58:c5:3e:46:72:ee:61:f1:10:e6:9a:
         7d:08:ff:40:e7:55:a3:17:4d:dc:68:46:4f:bb:60:44:36:65:
         a8:23:3e:35:c8:05:97:39:9c:11:57:a4:d4:3d:24:93:2e:f4:
         5c:f2:1b:1c:77:46:c5:f0:0e:d8:1b:83:f5:76:c6:d8:c8:ba:
         4a:f3:fa:47:ce:8c:8d:d4:48:48:e4:cc:f2:c9:c8:a4:7a:eb:
         76:38:44:61:be:e6:a1:64:01:d4:27:5a:f6:4c:1c:d5:96:da:
         56:d0:be:a3:db:41:1f:61:08:0c:06:63:70:d9:59:cb:78:d3:
         fe:8f:94:fb:5f:6a:8f:e0:80:4b:d5:bb:89:e9:99:cc:e5:31:
         99:62:79:60:c1:dc:c8:52:dd:b7:b6:27:f5:36:9a:a4:69:92:
         59:4c:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----