Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File:                     lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier:          EE8IJ2z3/IxvU/U20NQ/lSBvJpL/CknzlV7dWxlu29c=
Subject key identifier:   98:21:5A:B1:A0:12:43:3E:AC:FF:67:2C:70:F2:41:04:05:A5:0E:72
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer:       /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial:       01962F3D99EE78F96F4CEA6AA86D6A1389BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number:          11BC
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 1jamJZhJQCxnBF2gQL6E1EEMOTA.roa (hash: kBKBG2m2NE0a6jTDEjeZmk4l4aHSEPbRY7SVjCst1XE=)
                          2: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
                          3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
                          4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
                          5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: f4wxZDrkGXWwn4OGIW6JnB9hgft9cjTTk8Qy1y9Tn/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:ee:78:f9:6f:4c:ea:6a:a8:6d:6a:13:89:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=98215ab1a012433eacff672c70f2410405a50e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:83:3a:0e:fc:05:1d:99:06:43:87:c8:82:
                    47:52:3f:ff:5e:ae:3f:6f:5b:4f:bc:d4:ba:c9:57:
                    03:05:02:41:66:4d:5d:89:74:27:2c:66:0b:85:19:
                    35:bf:08:96:b2:f8:41:98:f2:91:11:02:7a:8a:ae:
                    c2:41:de:03:dd:95:21:ec:8d:cd:98:56:7a:3c:98:
                    08:7b:23:9c:a5:12:3e:d9:dc:2f:42:bf:60:36:d9:
                    22:a0:f6:07:0a:86:26:0b:0b:96:50:76:ed:49:8e:
                    ca:a1:46:58:82:06:03:b5:a9:91:da:d5:44:cf:91:
                    bf:db:b8:e1:fc:5e:b6:0e:76:0a:90:1c:65:0b:21:
                    30:fc:6d:54:78:b9:8b:9f:1b:93:5d:96:61:7e:93:
                    c1:52:b4:67:bb:5c:f5:a5:61:5e:85:f5:09:b2:9f:
                    55:97:ac:5e:9a:23:14:7c:f1:66:1a:53:ef:a9:c5:
                    52:b6:9a:87:67:d8:b1:ee:9d:2e:90:3f:b3:da:c7:
                    bf:67:59:33:e4:b8:a1:8d:80:45:4b:14:1c:20:3e:
                    16:28:73:63:6b:e1:38:0b:c1:bb:67:d9:7a:a6:1f:
                    43:68:ed:04:ba:fb:05:8b:85:52:94:b3:f1:3e:7f:
                    b4:a5:97:2e:5d:93:0d:e2:ee:35:26:df:6a:08:3c:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:5A:B1:A0:12:43:3E:AC:FF:67:2C:70:F2:41:04:05:A5:0E:72
            X509v3 Authority Key Identifier:
                keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:f4:c2:5f:55:c6:3f:59:8b:6f:d7:e7:7c:6f:1f:ef:3d:
         b0:11:f3:14:55:71:ef:77:6e:9e:df:dd:42:dd:18:0f:cc:8a:
         e1:77:60:32:13:e9:f1:32:c8:6b:ce:48:42:01:4d:75:fc:68:
         9e:75:f1:4a:6a:5d:0b:17:83:b8:91:34:ca:f5:a3:82:f9:04:
         ca:e8:ac:e0:a4:4d:ba:4a:28:b4:20:af:14:03:60:8d:65:bb:
         21:eb:33:2d:c3:b1:26:05:a5:4a:c3:80:87:02:26:08:39:0c:
         d6:1f:3d:d3:1f:4b:05:ee:ba:16:3d:8b:3e:64:87:2a:b7:77:
         d4:43:a5:1f:06:c0:b9:1e:d5:9e:f7:9e:c0:59:d5:b0:33:60:
         da:82:e0:2e:00:4b:49:45:90:fb:02:45:91:70:a3:e9:33:15:
         12:96:6c:7e:46:f3:b2:32:50:cb:80:73:aa:03:28:c4:55:59:
         2e:33:1d:b6:63:df:02:f1:bb:72:65:84:d5:8a:81:30:f6:92:
         7a:1b:fc:63:2b:c6:51:5d:7d:0d:64:ce:85:3e:9e:9d:a2:da:
         d4:1c:6f:9d:6d:56:04:d7:f2:ca:ab:b1:a5:9f:ce:3d:39:2d:
         65:9d:42:9b:ff:83:6f:c7:79:b7:28:00:df:da:42:8e:c2:88:
         e3:33:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----