Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File:                     lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier:          DIvu6PEnNlsLNzRglcaD1OqoAmcmebvj1pDJHqAsoyA=
Subject key identifier:   21:C9:04:A5:C4:5F:0F:2D:01:2D:16:BF:A9:1B:29:1C:DE:B8:F8:79
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer:       /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial:       01962ECFC42C5E76485D692892B9E21569B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
                          2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
                          3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
                          4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: hd13K+tKGTnIxOqk6Q5/gXeRgCyJb17PApb6QvHeSuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:2c:5e:76:48:5d:69:28:92:b9:e2:15:69:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=21c904a5c45f0f2d012d16bfa91b291cdeb8f879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:ac:7d:fd:66:f9:9b:f7:49:b1:ce:e5:28:
                    21:2f:00:5b:6f:82:0d:7c:c1:ee:ae:d2:f5:af:8f:
                    86:ad:64:4d:dc:1b:37:86:c6:8b:71:7d:6c:58:02:
                    96:bc:d9:45:42:f7:17:a8:8c:e8:47:10:68:29:43:
                    ff:6a:8a:9d:fb:8b:55:a8:7b:8b:e7:af:37:ed:c0:
                    05:9d:37:d5:61:0d:b5:1c:60:c0:99:8d:27:10:64:
                    8e:b5:cf:1d:b4:44:fe:e7:6e:51:81:ff:12:2a:e0:
                    4f:39:83:50:93:14:7b:ac:d9:1b:2e:15:a5:05:fa:
                    20:65:0f:03:4b:de:dc:a2:04:b0:39:c1:88:30:d5:
                    a0:9a:99:cd:61:44:74:66:43:1e:3a:be:54:0b:63:
                    f1:65:4f:5e:33:e1:5d:c5:37:07:f6:6a:9b:ba:07:
                    79:2f:15:43:9c:93:cd:2f:9b:8d:9f:50:d2:87:c2:
                    e0:4e:16:31:b7:76:b8:d9:83:da:45:2b:59:85:de:
                    f6:5f:56:63:6c:49:e0:a9:c7:f9:f8:54:7a:de:bd:
                    f6:30:64:9c:2c:14:8f:86:28:aa:99:a8:4a:8d:2e:
                    50:2a:97:63:88:3f:52:35:17:10:31:ce:62:d9:d7:
                    5b:f9:03:a1:78:ef:de:f0:80:6a:c2:3d:7f:8e:3a:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:04:A5:C4:5F:0F:2D:01:2D:16:BF:A9:1B:29:1C:DE:B8:F8:79
            X509v3 Authority Key Identifier:
                keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:dd:d2:c7:3b:e5:0a:b4:82:4a:06:4b:0b:6d:62:2e:28:
         4a:3b:88:a7:98:ca:90:77:23:c6:eb:72:1d:ce:5c:b7:e8:4d:
         d4:04:0b:af:c1:b9:46:57:05:92:c6:fe:f1:fb:60:97:9b:e9:
         91:ab:6d:80:47:c8:2d:0d:35:d4:4e:79:78:b5:4e:dd:be:0d:
         04:d4:b4:90:cf:3b:bd:2e:7b:f6:36:92:17:25:b8:bb:69:6e:
         5a:f7:58:b7:3a:45:bf:26:bc:3d:7f:a4:91:35:47:cb:31:cb:
         5a:23:06:78:ec:1f:f1:f7:c1:5e:cd:88:44:b3:ec:f1:f5:82:
         ec:ae:74:d5:bd:3d:92:93:3c:91:ae:84:21:0a:bd:77:fd:e1:
         c4:65:31:10:02:96:b7:01:bd:8c:73:4b:91:2a:16:00:e4:c4:
         68:83:8c:0a:3c:b0:72:3f:26:21:99:84:00:31:bb:2f:e5:7c:
         c1:3e:dd:81:53:7e:b1:ec:d5:40:e0:51:00:52:74:1f:61:98:
         ec:cb:5d:0b:a9:43:95:b7:6e:6b:d6:e4:71:a3:c0:af:48:f9:
         0b:33:46:24:9d:13:d2:02:89:da:f3:d4:1d:64:75:c3:dd:40:
         9e:5d:c2:1a:07:1c:e6:9b:d7:53:9f:97:51:32:14:83:55:37:
         11:17:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----