Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          VbEabms4j9ySawYzDZdfZVHaeTJQVm9Ov8aTKj4bcBI=
Subject key identifier:   E5:28:1F:DD:A4:97:99:0E:AE:AB:95:E7:2C:5B:DB:8C:C1:0B:99:2D
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       01962E61B0023966EB991BCE2D1426DC2147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          57
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: X+aQHCsvGGIkYZcWiXOILFumbt/ghzkDv/KVI/1Bqso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:02:39:66:eb:99:1b:ce:2d:14:26:dc:21:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=e5281fdda497990eaeab95e72c5bdb8cc10b992d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:62:a9:a8:87:d9:2d:a3:c9:50:48:06:16:
                    7c:eb:76:3b:ba:51:56:f3:e2:2c:c4:c5:70:a0:0d:
                    45:f1:b4:69:d6:8b:f9:ff:d3:5d:ab:95:75:02:83:
                    84:aa:00:fe:e5:66:60:aa:b5:89:a6:ec:8b:6f:9c:
                    1a:b5:e0:48:4b:8a:d8:44:90:5b:3d:3f:2d:cd:de:
                    19:db:2b:6c:c1:5f:47:bd:05:18:a5:37:31:b8:67:
                    97:c1:d0:43:17:71:81:bc:30:23:85:35:64:75:7a:
                    51:d4:e9:fd:c3:7c:06:0e:4c:4b:04:b9:78:01:c6:
                    01:e8:13:f3:8f:20:8d:ca:70:26:20:99:b5:aa:f3:
                    fd:c5:96:df:01:ad:ee:94:19:94:ca:ed:df:83:00:
                    39:64:61:9c:36:b1:85:40:31:71:0d:9a:0d:f0:e0:
                    33:fd:47:08:dd:45:41:b2:b6:f9:8d:2f:35:b2:83:
                    63:3d:5a:a6:5f:b8:e9:9f:2c:cb:41:5f:e1:9d:44:
                    a1:bb:f3:01:99:c7:c8:db:d5:91:65:61:5e:03:e6:
                    e4:e4:ce:0c:33:3e:84:18:db:c5:8c:e3:7e:72:08:
                    2c:6c:4f:d3:14:d3:7c:ba:2c:94:a4:89:ae:81:c2:
                    12:08:b0:9c:03:08:e7:9e:87:27:29:a4:bd:58:ec:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:28:1F:DD:A4:97:99:0E:AE:AB:95:E7:2C:5B:DB:8C:C1:0B:99:2D
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:62:11:df:14:39:6e:51:6c:f0:47:26:08:48:23:d1:ff:
         84:7f:e7:36:b9:40:5b:89:20:ce:f5:95:b3:01:17:20:67:b9:
         76:4d:60:28:36:0e:fb:1a:9b:31:0d:79:0e:6a:02:87:bf:2f:
         e3:ce:db:b1:31:ed:f8:03:25:96:0a:a6:01:08:04:3e:0a:18:
         87:05:c3:69:fc:10:4e:fd:08:55:f0:29:5d:65:20:52:1e:ef:
         4b:02:2f:d1:d3:c8:66:3a:3c:c4:00:7b:42:04:97:c2:53:f9:
         29:1a:e4:87:90:0d:c7:d8:4d:33:d1:f4:c4:64:0a:2d:70:81:
         6f:0f:d8:c6:05:af:52:66:60:30:cb:21:ef:42:77:ef:ae:78:
         02:23:da:26:71:09:c6:b2:a9:7d:dc:20:0b:60:52:2d:f5:fd:
         c7:b6:2c:f5:82:5b:1e:26:81:41:6b:fb:ee:17:fa:9c:5c:58:
         c5:38:71:6b:65:57:48:23:8a:97:22:d8:79:f1:f9:08:a9:22:
         6e:6b:8d:44:43:77:51:b3:09:9d:3a:6c:52:de:89:bf:0f:a6:
         03:45:75:14:af:ca:be:8d:4c:49:bd:55:66:41:8c:c5:2d:ad:
         35:3d:ad:c9:a0:6b:5a:21:a0:2f:cc:bc:98:8e:6a:1d:d6:8c:
         27:70:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----