Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File:                     LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier:          n7lm8Sw8CRfoUhzYBuLk4+ZJZbssTDwNF8ul7RvaArE=
Subject key identifier:   A3:47:B9:CE:40:6C:D5:52:B1:CB:FE:76:4A:4A:EB:BF:E5:25:6C:D5
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer:       /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial:       01962E61E17F917C00F167CA67D987F2797B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number:          88
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: C9Zy8OUoV254Al+7pYvHVqojhFkYYcTe+HAZ2gvzcfw=)
                          2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
                          3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:7f:91:7c:00:f1:67:ca:67:d9:87:f2:79:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=a347b9ce406cd552b1cbfe764a4aebbfe5256cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:b3:d9:73:e1:78:0d:d6:e4:8f:b3:97:4d:
                    45:62:7c:27:e7:af:c3:ef:c0:50:01:40:c1:e8:8e:
                    13:a9:6a:8e:ee:2c:87:f0:65:cb:69:0f:01:ed:05:
                    36:57:b7:02:44:13:3d:27:0f:10:df:f2:6a:ff:e1:
                    c2:bc:d4:ca:37:0b:47:9e:ca:2f:4b:60:62:62:cc:
                    5c:2e:23:e3:e4:8c:41:56:16:c3:4a:14:16:d7:cb:
                    76:f8:1e:40:0b:df:12:c3:ae:c6:9b:29:3c:75:af:
                    7a:ba:bf:b8:fe:83:aa:7d:35:28:0a:88:99:71:05:
                    be:69:0e:9e:5a:78:29:39:98:d9:f5:34:ea:3d:bc:
                    4f:3a:3e:18:f7:f3:af:42:31:29:49:b2:f4:a4:c1:
                    55:c8:90:7c:11:bd:db:4f:5c:63:bf:72:db:9d:a9:
                    b0:35:3b:0f:a1:25:da:bb:d6:05:f0:31:b7:02:b2:
                    91:2c:12:69:bf:cf:30:71:02:40:b6:fe:45:08:da:
                    18:f3:e4:3f:d5:af:bc:86:77:92:3e:66:c0:1f:fe:
                    8a:d0:c4:0b:0b:be:91:c9:c9:db:1a:1e:1c:04:8b:
                    ba:57:28:b0:31:83:76:f3:0d:54:65:cc:db:2c:09:
                    99:32:54:5d:1f:77:0b:fd:d7:d4:ba:2e:25:1c:10:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:B9:CE:40:6C:D5:52:B1:CB:FE:76:4A:4A:EB:BF:E5:25:6C:D5
            X509v3 Authority Key Identifier:
                keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:81:25:e8:39:2c:03:1f:75:d9:95:0f:5f:58:7b:81:32:
         f1:d9:f5:31:87:1b:6b:a7:2f:d3:7e:af:52:71:40:68:eb:7b:
         3f:04:d3:9c:80:0b:e1:57:c4:1f:60:1d:91:a5:ed:14:7d:fc:
         7a:a6:b6:87:88:d5:c5:70:7b:7b:b2:87:ef:a0:df:d5:56:16:
         51:02:f7:c8:2f:b9:b0:76:0d:7e:db:ac:eb:a0:18:58:4d:00:
         2c:66:9d:f2:12:ad:e1:04:03:b7:aa:fe:76:5c:a1:a8:90:59:
         87:0a:9d:c3:8a:c5:b0:96:3b:94:da:c3:53:2d:cd:c6:e1:6b:
         2e:6a:4f:2b:8f:f1:77:e0:22:91:b3:13:e1:a5:70:25:07:cb:
         ea:40:29:b9:2a:37:58:e1:aa:f6:a4:8e:a6:4b:36:c4:b5:aa:
         e7:b7:e1:93:a4:15:52:0a:08:72:21:59:46:be:83:09:9b:07:
         de:e0:e1:69:77:05:a7:40:8b:00:ed:14:51:eb:fd:34:ba:83:
         01:a6:9f:90:c9:d3:f9:fd:bd:54:d0:52:ec:eb:ab:f8:d2:bd:
         06:de:22:24:67:9b:05:45:19:0b:1e:c5:44:3b:71:b2:59:6e:
         a1:47:e2:f4:7f:09:2d:b7:af:20:3e:b1:b6:e7:a2:61:d6:ca:
         82:a2:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----