Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
File:                     LSNrVIulmiq7JYI0HVYMqJP0l2M.mft (raw, json)
Hash identifier:          hLAIlbi4Al08+lzALjIUVhe/oyOucb+6ah7EHBsbp9Q=
Subject key identifier:   90:9B:1B:66:60:AE:22:03:11:AE:DA:99:66:7C:E1:26:99:57:4E:74
Authority key identifier: 2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
Certificate issuer:       /CN=2d236b548ba59a2abb2582341d560ca893f49763
Certificate serial:       01962DF3E463037AB817E07447A9EDB49B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
Manifest number:          1288
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: LSNrVIulmiq7JYI0HVYMqJP0l2M.crl (hash: wzPvpD7Tu99qtJt5QogBYzDizf64FxNRnaMPkGte4T4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:63:03:7a:b8:17:e0:74:47:a9:ed:b4:9b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d236b548ba59a2abb2582341d560ca893f49763
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=909b1b6660ae220311aeda99667ce12699574e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:c0:0f:8a:62:d3:7d:88:4b:76:16:cb:ec:
                    b0:27:61:9c:24:b3:ad:9a:78:46:c2:de:e9:bb:de:
                    eb:33:d5:dd:ea:3e:6c:b3:6c:75:9d:19:87:00:10:
                    f1:34:de:32:fc:b0:40:bc:bb:b5:7f:a5:9d:3e:d1:
                    05:4d:54:16:43:80:9b:5c:0f:4b:41:0c:e7:b1:73:
                    22:ac:f4:fe:64:5c:de:a3:1a:22:63:b3:e2:6b:d7:
                    b3:e7:d5:0a:7e:4a:71:c6:84:4e:31:a1:07:d9:b4:
                    24:79:7a:ca:11:d4:aa:8b:95:ef:bb:d2:d1:14:dd:
                    87:0f:d4:bd:ca:ca:35:20:9e:49:39:7d:2e:2e:b1:
                    e6:df:58:45:23:b3:0d:4a:84:22:4c:65:b0:04:2a:
                    6d:eb:1a:d1:8b:8f:9d:52:cf:17:2e:16:86:6e:78:
                    75:3a:8a:6f:2e:76:b7:22:50:7d:1e:7f:b0:c4:eb:
                    72:b4:3b:83:5d:b0:b9:50:ac:17:22:74:79:c4:f1:
                    6f:e2:2d:77:6e:f9:7e:c0:58:c0:7f:ad:d3:43:02:
                    09:ac:42:8c:99:0a:51:ef:2a:e8:91:4d:fb:16:cd:
                    a3:a6:6e:af:f7:3c:c3:6f:84:6c:91:e1:a1:b1:5c:
                    c1:c0:f8:09:85:df:1c:88:ed:3b:6e:df:c2:2b:d0:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9B:1B:66:60:AE:22:03:11:AE:DA:99:66:7C:E1:26:99:57:4E:74
            X509v3 Authority Key Identifier:
                keyid:2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cf:d6:e0:ec:5f:51:65:26:4f:63:99:66:d7:45:06:d0:b5:
         6c:15:fe:15:49:bd:8b:b8:50:f3:69:f9:b3:d1:47:5a:75:0d:
         5f:32:1d:62:f3:09:32:23:17:05:f9:f0:70:46:5d:77:4f:70:
         b3:da:46:a3:6d:44:cb:83:e2:08:68:6d:84:a4:b8:7b:5e:c3:
         86:e1:1b:39:92:a6:48:81:95:fc:a9:78:a3:34:5d:07:02:63:
         6e:b2:f6:3c:18:ac:22:db:e4:d2:aa:be:72:13:4d:c8:19:5b:
         58:3e:de:f0:91:b8:16:67:8a:53:bc:4f:50:52:c3:1d:f3:ad:
         31:ff:5d:9f:f7:94:70:c2:c3:fa:c7:8e:d7:93:eb:71:c8:c2:
         f3:03:cb:e9:1b:87:a2:a4:ae:91:38:04:d7:a6:df:2d:7a:c7:
         6f:90:19:18:da:e5:f4:e5:5a:98:df:49:38:e5:33:15:e1:ba:
         9b:7b:c9:90:70:f8:01:c5:0f:35:7e:f8:92:8a:0d:f6:45:41:
         ac:b0:ae:d7:73:29:8a:21:87:3a:4c:c3:e7:66:2b:c2:19:40:
         51:c8:4f:5a:a5:d2:e2:07:7a:ea:47:c2:c0:7d:59:81:27:e8:
         66:58:13:ee:26:f6:a2:24:c6:36:9c:64:0c:15:58:d9:e5:f4:
         59:5e:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----