Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
File:                     LF3rfkKW4vu0wB_AZKH2gYlreXk.mft (raw, json)
Hash identifier:          M7NV0+4a37eOt+VWtQibqSuoxOmPWNMPJZddPhto5uU=
Subject key identifier:   21:A0:A9:55:66:23:F1:EC:21:8A:71:B8:C3:96:AC:3A:64:00:50:39
Authority key identifier: 2C:5D:EB:7E:42:96:E2:FB:B4:C0:1F:C0:64:A1:F6:81:89:6B:79:79
Certificate issuer:       /CN=2c5deb7e4296e2fbb4c01fc064a1f681896b7979
Certificate serial:       01962FAB1B4313C4F1922A2F1B5C95BC0660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
Manifest number:          04C2
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: LF3rfkKW4vu0wB_AZKH2gYlreXk.crl (hash: 8KRXu6rFayDWarzzqtNzeIyykFivnzbvTa03jtyMZz0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1b:43:13:c4:f1:92:2a:2f:1b:5c:95:bc:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c5deb7e4296e2fbb4c01fc064a1f681896b7979
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=21a0a9556623f1ec218a71b8c396ac3a64005039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:18:82:a2:af:c3:34:85:50:d4:fe:df:9c:
                    ee:21:29:66:54:ec:c7:78:f7:e7:7d:59:5e:bb:09:
                    13:29:f9:7b:f7:1c:ca:24:52:95:f4:10:df:f8:05:
                    4b:b8:93:1b:e2:d9:fa:e7:00:d3:64:2f:8f:c0:5b:
                    a2:ad:d5:bf:a8:80:4b:e1:63:71:e7:b3:e2:41:53:
                    d5:f8:ff:1d:c0:67:a6:6d:bf:7c:aa:eb:f7:e6:de:
                    bb:7d:49:06:83:94:e0:62:37:10:ac:7f:53:17:37:
                    d9:2e:80:36:d9:54:d9:b8:81:a1:3f:d8:5b:8e:e3:
                    27:4c:31:70:14:fb:92:1e:5c:67:1d:55:43:8b:56:
                    49:9c:2c:6e:49:69:1c:09:8d:dc:e2:b0:3b:13:65:
                    ed:78:86:a9:3f:2d:85:51:01:66:71:3a:ef:71:bb:
                    3c:0a:99:b9:cf:f6:04:a3:3e:ab:d2:22:b9:db:45:
                    a4:08:c7:8d:7f:4c:1b:c0:c2:55:87:2d:fc:65:be:
                    3d:48:87:05:a7:22:a4:9d:21:27:c7:67:58:85:c4:
                    36:a5:25:2c:4c:7a:48:9b:35:b0:2b:d3:d3:cf:f4:
                    f2:74:7a:bc:d7:c5:a2:a7:31:c3:9a:43:07:58:e2:
                    32:98:8c:83:7d:95:ed:df:df:af:87:1f:2a:7c:2e:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:A9:55:66:23:F1:EC:21:8A:71:B8:C3:96:AC:3A:64:00:50:39
            X509v3 Authority Key Identifier:
                keyid:2C:5D:EB:7E:42:96:E2:FB:B4:C0:1F:C0:64:A1:F6:81:89:6B:79:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:df:77:0d:f7:56:c0:39:0e:8c:bc:14:05:bc:ce:31:ae:93:
         78:ce:37:3d:f3:20:5b:af:f0:47:0d:6f:6c:f2:e1:fb:03:33:
         3b:5c:86:d7:88:08:d4:6a:c2:b4:74:40:52:44:67:f4:b9:47:
         50:b6:65:bd:54:0e:c6:cb:4d:ca:29:99:77:85:3d:89:2f:48:
         c3:d2:d3:92:8e:55:29:01:65:7d:2a:15:c3:1e:0a:12:67:94:
         06:56:6c:ce:d8:fb:cc:23:34:17:18:4c:fb:e1:bd:c5:e0:74:
         44:db:69:9c:10:82:6d:ad:51:08:08:c8:0d:01:0f:1d:50:45:
         cc:2e:73:d0:1c:bc:53:a0:d3:62:66:3a:59:89:b5:07:8c:ed:
         4e:33:e2:d7:1f:37:26:ce:62:03:5b:27:f2:fe:78:6f:06:12:
         8a:ea:d1:2e:d1:e4:c4:13:c2:bf:9d:97:b4:42:4d:82:d7:47:
         34:e3:11:44:d9:db:b9:44:de:b7:a6:e7:b8:44:43:ed:c9:2a:
         76:3a:86:8a:ef:5b:e2:a8:2e:98:ea:ef:d4:b6:03:3a:8d:bf:
         e1:fe:2d:de:ed:e6:96:79:14:78:88:5a:15:bd:a2:68:58:ae:
         db:a3:e7:d0:42:23:eb:04:48:63:6f:c7:06:8d:ee:f5:fe:69:
         55:21:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----