Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File:                     LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier:          9XoMs109EVWeV3243FMGWPM4U2sjhO9zjI+Yav2em5g=
Subject key identifier:   FC:EE:F8:76:9A:8A:52:3E:1B:41:C0:B4:9F:70:E5:EE:46:FC:BD:A5
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer:       /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial:       01962F74D51A5A9F97435ABBA7BAB52A847D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: G2oU+3TDCb9K4G6JH4Mu6DLBpRvWZtYWFbl6fJTWRXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:1a:5a:9f:97:43:5a:bb:a7:ba:b5:2a:84:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=fceef8769a8a523e1b41c0b49f70e5ee46fcbda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:dc:e7:14:17:b9:50:22:65:57:70:5b:e1:
                    f9:25:97:08:24:fb:4f:61:74:3b:20:ee:65:b7:66:
                    73:01:5a:1a:25:60:64:55:21:7c:20:49:47:e4:a7:
                    50:ae:ad:4d:4a:09:51:ae:42:e3:83:cf:67:b6:76:
                    b0:02:8c:64:2f:c7:d2:21:10:fd:fd:90:45:88:97:
                    95:ac:07:3a:ef:8f:ea:91:ea:3a:69:8d:38:89:fa:
                    6e:e8:81:77:85:eb:6a:63:27:03:d4:07:5b:40:09:
                    8b:20:6c:00:52:b5:f4:f4:3d:9b:16:5c:7d:33:6c:
                    de:9a:c9:c7:95:e7:8e:8b:cc:19:fe:fd:09:78:b2:
                    84:92:b0:0e:3c:0c:7a:41:2f:75:69:13:41:76:6f:
                    1d:63:08:fd:01:1f:67:73:cf:e7:8b:02:5e:38:b1:
                    62:e0:9d:cc:27:07:78:4f:85:2a:f2:72:cd:b5:fb:
                    65:16:04:4d:37:99:50:3c:6f:58:74:dd:ab:c5:a2:
                    9c:4b:21:9a:6c:71:ea:6e:13:8b:11:8c:a3:8b:79:
                    c3:e1:06:7c:af:5a:9d:19:5a:87:06:15:0f:90:46:
                    27:7b:2e:da:03:5e:50:a3:cc:93:4a:6d:6d:57:3a:
                    d7:d2:cc:c1:59:66:7a:a2:cc:14:8f:06:b4:11:60:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:F8:76:9A:8A:52:3E:1B:41:C0:B4:9F:70:E5:EE:46:FC:BD:A5
            X509v3 Authority Key Identifier:
                keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:2b:64:21:97:20:62:a5:37:e9:59:04:a7:2d:1e:ab:c1:
         00:5e:69:94:ac:29:00:53:ef:dc:83:6f:47:8d:61:f1:01:f7:
         76:72:a2:df:84:51:53:f2:98:fe:5b:56:48:7a:4c:5c:b2:48:
         be:3b:91:74:87:cd:29:3f:3b:61:cc:51:4d:c9:a9:f1:e0:0a:
         41:c5:d0:ae:cd:d7:c3:fc:ee:ed:77:03:c7:c8:89:ad:b0:45:
         ae:c8:e1:6e:04:7d:86:81:6e:b5:99:ba:96:29:61:cb:a0:b7:
         66:42:44:85:2f:96:c6:e6:1c:a8:87:9b:f1:82:01:88:38:d3:
         3e:2a:36:ac:16:8f:6f:bb:80:c2:ef:e1:a5:c6:2e:0f:48:ea:
         0e:8c:dc:66:a9:2f:f1:da:c0:4d:d2:89:cf:ad:90:c3:31:53:
         a2:09:79:93:6e:a2:0c:79:7b:06:c0:db:80:0d:dc:93:c9:bd:
         91:d4:0d:a6:f6:d1:f7:18:35:ad:7f:e1:75:ca:d5:65:15:ef:
         94:28:89:7b:58:10:2b:65:b7:e0:06:7d:0d:89:2b:22:db:00:
         52:5e:e4:74:f9:d4:e5:73:9b:82:08:00:8c:6a:31:f3:50:6f:
         eb:04:70:34:67:e3:d3:db:25:36:69:bf:4f:10:ad:17:3b:25:
         7b:72:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----