Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File:                     LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier:          f9E3o3C9Lv5IhksLmFR0A8ybkjGfSCGbAbnBLBYX31I=
Subject key identifier:   6B:7A:A6:D5:9B:69:57:93:92:C9:F1:6D:0A:21:6C:9E:82:39:31:F1
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer:       /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial:       01962F06F6668C2CD453E443629EB2330CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number:          07E0
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: mL7hjv2JfhdqG8ei4/1t7LTxJ65LqdYEmau9AwIRLoA=)
                          2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f6:66:8c:2c:d4:53:e4:43:62:9e:b2:33:0c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=6b7aa6d59b69579392c9f16d0a216c9e823931f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:ab:fa:01:8c:09:ba:05:c1:c4:7a:e8:db:
                    27:81:39:a1:a4:7e:b2:1b:11:da:ef:f2:3c:af:e7:
                    13:95:ed:9f:63:4e:70:a4:5b:e2:e6:27:2a:73:16:
                    56:52:fc:fe:7a:26:f8:7b:be:9a:b9:46:a2:30:de:
                    03:84:65:83:1a:90:fc:cc:ce:4e:5c:b5:f7:fa:27:
                    b4:76:e3:ab:d0:15:da:95:2f:3b:83:17:28:61:c5:
                    d4:b1:b5:17:99:b5:03:16:ab:04:fe:cc:0d:4a:de:
                    8d:7c:e5:a7:f8:e2:49:68:b0:be:4d:ae:70:31:a2:
                    87:d8:24:23:81:d5:4c:9c:31:d7:57:8c:99:9c:15:
                    e2:b8:13:7f:52:fd:ee:a8:73:86:47:a3:ec:7f:70:
                    1c:a5:90:ba:fa:81:02:56:bb:58:60:55:94:48:34:
                    5c:a9:36:88:8e:7d:ba:28:f8:8c:89:48:61:74:b3:
                    b8:0d:db:4a:9b:bc:04:dd:9d:d8:11:eb:7c:34:2a:
                    48:99:40:77:71:61:b6:5e:22:66:17:c2:ad:a8:22:
                    88:32:ae:0c:b1:4d:38:17:c4:c7:05:35:87:6e:dc:
                    e0:71:c0:af:01:a8:82:6d:e5:54:4e:cd:8e:45:89:
                    30:b0:b5:cf:9d:56:4b:85:0c:f1:36:d7:3c:9b:dd:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:A6:D5:9B:69:57:93:92:C9:F1:6D:0A:21:6C:9E:82:39:31:F1
            X509v3 Authority Key Identifier:
                keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:b9:53:c7:1e:4c:44:a9:fd:92:aa:c4:0a:b7:27:d7:97:
         d1:e0:93:82:fa:5b:5e:53:f0:f7:ee:8f:a5:4e:1f:8c:d5:f4:
         79:f8:7a:37:8a:63:6a:dd:24:90:84:71:f1:45:fc:e7:4d:28:
         df:f3:3c:a9:3e:90:f0:2f:d1:55:a4:0f:45:85:f7:cb:31:df:
         26:a3:df:0a:8b:89:90:b1:0d:19:c6:25:94:62:69:95:5e:c1:
         6f:ff:e2:2e:6b:8f:39:1b:e4:d8:d6:b7:72:cc:ce:ff:9a:98:
         37:44:68:fd:bd:d4:ff:04:f6:85:30:16:99:b2:5d:e1:20:57:
         80:d9:44:41:bf:d1:65:31:81:91:50:f0:a5:41:b1:51:9e:51:
         fa:71:e2:01:dc:05:b2:50:65:7a:09:90:a4:18:d3:bc:d8:1e:
         74:7d:e1:13:89:d7:b6:39:8e:98:0a:5b:80:66:da:ad:09:67:
         56:a5:89:53:ec:23:91:e0:36:82:3d:e1:64:fb:96:3d:44:14:
         62:fa:f0:1b:fc:c2:e9:cf:cf:6b:02:21:57:d4:1b:3a:4e:3c:
         19:04:49:a3:f9:31:a1:5e:68:b0:29:b4:3c:b3:74:9a:f3:78:
         95:5f:27:a4:30:2e:d4:30:10:95:45:22:58:6d:05:87:6d:5e:
         db:1e:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----