Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File:                     LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier:          8vFj6rabqvoiIMP28KRaQRVtprFSFtEFzRh1lVnSa3g=
Subject key identifier:   72:20:00:B3:39:92:35:28:23:C8:F5:F8:C9:A1:AF:1F:E6:86:00:EA
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer:       /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial:       01962E61CE9A83DE2715AE76120D52558675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
                          2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
                          3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: FBRnvNNTLE3pp9Rwe//w8RMtj/xLe5gNuWv9OS3FhxY=)
                          4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
                          5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:9a:83:de:27:15:ae:76:12:0d:52:55:86:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=722000b33992352823c8f5f8c9a1af1fe68600ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:9a:07:f1:21:8e:d5:99:f1:14:9d:cf:94:
                    0b:62:70:d8:dd:fa:e0:d5:35:b4:af:51:20:df:0e:
                    9a:74:b8:ed:52:f1:f4:6a:0b:40:b2:ee:74:95:4b:
                    ca:d5:a3:ff:a9:5e:66:c8:5e:6a:b3:0d:68:fd:94:
                    2d:1a:02:5a:1e:4e:82:09:a4:a4:73:19:3a:7d:a8:
                    7a:6b:f2:9b:f7:6a:ce:58:34:50:54:e2:40:8a:27:
                    93:b5:5d:42:c3:05:df:6b:04:7b:dd:c9:e6:82:49:
                    aa:ba:66:4d:bb:3e:f0:aa:12:05:b9:9f:ac:93:2a:
                    5e:1f:4b:d7:7d:24:88:77:6b:52:71:14:d7:cc:3b:
                    82:ac:40:8c:92:9d:02:88:6d:68:c9:2c:00:d0:33:
                    61:f9:3b:fe:b4:1e:19:8b:1a:47:01:97:84:3e:5b:
                    e4:71:d8:f4:92:58:48:7f:40:74:61:3e:4e:cb:d1:
                    12:d6:4f:9d:a8:61:d7:a9:6e:1a:03:cb:25:58:a2:
                    b0:4c:19:33:51:85:9d:da:15:c1:55:5f:32:bc:2a:
                    b5:12:4f:ce:95:91:46:d7:76:96:d9:b1:f2:e3:ab:
                    cf:1f:85:ad:28:d3:65:25:41:e7:4f:e5:32:fd:4d:
                    0d:a4:1d:1c:68:77:d6:02:02:d2:99:11:ad:87:84:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:20:00:B3:39:92:35:28:23:C8:F5:F8:C9:A1:AF:1F:E6:86:00:EA
            X509v3 Authority Key Identifier:
                keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:3f:21:62:00:f6:0a:4f:97:04:41:92:1e:64:ac:dd:17:
         df:6e:d3:94:14:bf:79:f9:3f:bd:6c:73:92:9f:02:89:54:87:
         ad:51:e9:2e:84:42:e6:37:cd:75:0b:9a:3c:d8:10:31:de:c6:
         14:80:67:76:52:af:35:a4:b8:bc:e6:d8:bc:cd:3f:a7:a4:6a:
         97:83:b2:75:d7:f9:01:c5:6d:80:b2:91:e7:ba:eb:e6:19:25:
         ae:76:b9:04:2f:b1:39:f1:f8:23:a0:8c:08:f8:5d:27:38:99:
         67:cc:e7:e0:b7:83:fa:07:c8:28:7f:b8:50:f4:bf:11:73:a9:
         73:9e:12:0e:0f:09:99:ff:c8:97:22:cb:75:10:f0:da:a9:1e:
         af:ae:36:55:5b:32:ea:c4:c7:0a:0e:cb:f1:e6:03:09:8e:81:
         9d:24:a7:60:57:b8:98:23:75:cb:b9:71:4d:96:91:7e:ef:bf:
         50:05:e5:4c:aa:70:fe:1a:67:c1:9c:8d:7c:6d:f3:d1:02:fb:
         9a:e3:a8:0f:d8:70:49:ba:8c:19:96:52:2d:c7:ef:64:77:f8:
         b9:ed:fb:89:24:76:47:cf:a4:74:ba:f9:9b:50:e4:ad:ff:c1:
         23:1d:cb:0b:6e:77:f7:00:50:39:5c:46:36:f6:63:10:ff:d5:
         b3:f9:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----