Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          eTSKHQ09LhFN7u/NS3Ab7Hl6g0vo1CI4VjvljLvl5vI=
Subject key identifier:   58:4E:B5:38:7F:84:5C:50:88:54:04:BF:07:FF:E6:C8:CF:43:B7:69
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       01962F06DC4946E5A02E0DEB14FDA33F05BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
                          2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
                          3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
                          4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
                          5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: /9TipvQhIqGninT+gyXcObVHbwqcNNG/gjO2HB40tL4=)
                          7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:49:46:e5:a0:2e:0d:eb:14:fd:a3:3f:05:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=584eb5387f845c50885404bf07ffe6c8cf43b769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:5b:ae:01:71:62:a2:4c:60:58:2c:2f:83:
                    8a:ea:dc:50:f0:0e:bc:b4:8d:7c:80:92:ab:54:74:
                    91:20:e9:3f:42:e6:34:9d:78:e3:61:2f:07:4e:ff:
                    ea:7b:56:4d:65:c6:de:32:f1:83:2e:7d:43:d0:17:
                    6f:b7:71:9a:b1:e8:7c:13:dc:fa:c8:a0:67:63:d9:
                    86:b2:10:8e:ca:0c:bd:e4:f3:52:7f:fa:49:af:d3:
                    96:3a:b1:d0:b7:de:a9:0a:26:da:38:ee:d9:73:49:
                    b1:13:b6:74:ca:45:46:b8:a2:ed:3e:06:5d:bd:fd:
                    ee:3f:f6:8e:c5:e0:ef:18:f6:5c:db:10:6a:ec:ac:
                    e6:e7:be:2a:0b:37:16:2d:0b:97:b7:c7:e7:73:e5:
                    66:7f:11:15:7d:09:3d:47:72:9d:39:fd:49:1e:45:
                    1a:68:66:06:90:3a:b7:64:4a:73:67:57:26:20:f3:
                    be:f4:e1:b9:aa:a2:cd:8f:f1:eb:d4:70:48:e4:ba:
                    80:c1:c6:c2:85:91:31:b4:78:19:fc:90:ac:fa:03:
                    b2:0a:14:34:5c:a0:7d:e6:ec:d9:54:ad:57:dc:d9:
                    1a:41:14:45:73:63:13:12:93:b4:e9:25:dd:a1:09:
                    8b:e8:e8:9b:08:91:77:91:8e:38:fb:1b:56:f7:4c:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:B5:38:7F:84:5C:50:88:54:04:BF:07:FF:E6:C8:CF:43:B7:69
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:d0:fa:5f:59:ce:ca:d9:23:82:4b:85:cd:8d:d6:26:95:
         ba:ba:21:52:63:d4:9a:c8:83:f5:1a:c4:5b:63:26:98:45:2f:
         40:cd:df:c9:79:bf:ee:a0:8a:fb:d1:d4:40:e6:53:b6:66:ed:
         a3:69:d3:65:71:b5:2b:8a:b1:7c:d6:af:6b:6a:ed:89:a8:8c:
         ce:8e:30:76:01:ea:d5:ac:fb:d6:06:d4:b1:5f:e8:2c:38:e5:
         bd:ad:91:9f:d3:74:70:cc:14:9b:aa:ef:db:bb:d4:a1:b6:f5:
         91:01:05:5a:d8:01:ef:02:4d:d1:d0:44:61:48:05:b1:24:74:
         4d:81:83:3f:56:8c:9d:85:1f:ac:dc:9a:bd:5c:b8:b1:17:ef:
         b6:c7:c6:01:5d:0e:75:e9:d7:bd:b1:54:0d:78:e5:86:c4:0f:
         88:18:e2:b7:3f:6a:4a:ed:bb:ca:06:c6:1e:03:fc:da:76:f0:
         b5:f4:3d:07:81:d5:fb:64:87:9d:c0:c5:b6:29:54:79:9d:af:
         ee:08:ce:a7:8c:f7:b7:57:44:cf:97:75:4b:49:d6:c3:28:ef:
         16:c5:3f:00:34:02:26:20:a7:3b:1b:0c:33:28:07:f2:40:59:
         e8:dd:72:ff:69:b1:0a:34:5a:15:6b:59:d0:96:fe:5b:e1:0c:
         c9:98:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----