Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File:                     LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier:          dohVndQdcC6EUpbbuzxnYOvagfhHdSNV6tAC4V9nFQU=
Subject key identifier:   FA:AD:D9:84:AD:3C:C0:EA:3B:D0:50:47:B3:25:F1:BE:7B:A1:73:9F
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       01962F3D9940339F1EF426D251A4756D9F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number:          0C5C
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: hSVAa7X5NrZDV4yuwxLd2nTu6W163kp4qpGbq438a54=)
                          2: OelzXCNyRdJDcTAMZ4XyMzIgxcQ.roa (hash: bMfXjKhotrEhF8a4BqCjobsAnEO9NWeA0d2QlYefuYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:40:33:9f:1e:f4:26:d2:51:a4:75:6d:9f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=faadd984ad3cc0ea3bd05047b325f1be7ba1739f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:2e:c6:3f:a7:58:96:46:f8:d5:58:6c:08:
                    52:38:4c:0a:5b:83:f1:4e:56:c9:1e:56:4d:0c:c0:
                    04:24:64:23:bb:80:a8:ad:ec:37:7e:f9:ce:1b:40:
                    72:df:a5:3f:85:da:2f:8d:79:73:40:48:92:d0:ea:
                    d2:23:6e:f9:65:a4:fa:eb:67:83:f1:28:b1:98:60:
                    43:63:44:be:28:0f:bc:06:74:16:d8:9f:ec:7c:56:
                    1e:e2:03:6a:64:b7:d3:f3:25:20:59:10:62:52:46:
                    a7:5e:6b:36:e8:0a:3f:b3:07:63:8a:a1:8e:5a:a6:
                    e6:01:f1:f5:cc:2c:d4:eb:9f:b5:0e:05:ba:0c:a2:
                    e6:2f:1a:3d:ad:3d:49:9d:73:51:0a:0e:25:48:22:
                    bb:04:bc:bc:82:7a:3e:27:9a:01:3c:eb:9b:e2:52:
                    91:98:ed:e2:9a:64:6e:08:69:93:60:24:fc:e7:5e:
                    5e:19:d7:f0:e9:48:bd:9c:f1:fc:16:0f:5d:9e:57:
                    46:14:8d:3a:d7:19:22:73:ad:db:a9:45:f6:bd:9e:
                    f9:54:9f:3d:83:cf:22:fe:cb:f4:c1:53:9c:b7:9a:
                    7e:a9:ba:dd:37:34:c3:a2:6f:a4:bf:6f:83:4d:a7:
                    e2:8e:c5:75:23:50:f1:d1:b6:e4:21:59:dd:ce:75:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AD:D9:84:AD:3C:C0:EA:3B:D0:50:47:B3:25:F1:BE:7B:A1:73:9F
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:81:65:ba:21:91:97:be:8f:04:f9:81:30:40:a0:6a:52:
         9a:79:bc:fc:b6:dd:1a:31:8e:5f:61:cd:3f:ff:45:11:50:b0:
         32:3d:aa:b2:f4:1a:f8:c0:d5:0a:55:52:80:42:09:5d:2c:a1:
         02:51:05:e2:b1:17:e6:a5:19:7d:7c:3c:69:5c:47:b0:b0:85:
         6d:d9:fb:2a:ef:e9:d4:e2:fd:bb:75:47:df:04:ed:8e:fb:4e:
         0c:84:1d:38:36:a9:6b:9f:94:49:63:fc:50:b8:7c:c6:dd:59:
         d5:1b:67:75:b2:4c:76:86:18:4e:62:36:40:98:ab:d1:05:fb:
         3b:a4:00:2a:29:98:3f:80:6c:0b:30:81:57:e9:60:56:a1:8d:
         08:18:58:fc:2b:f5:0d:47:cc:db:9b:86:0d:8e:14:13:a9:bd:
         56:71:6d:f9:3d:cf:59:9f:f6:96:d2:24:18:63:10:0a:2f:d3:
         0f:5c:fc:ef:fe:92:13:7a:70:72:07:bb:a6:0e:ae:03:38:8e:
         4b:ec:b3:c1:4f:08:ba:d4:29:fb:ea:bc:a5:3c:50:66:c2:25:
         c0:ae:e3:6c:4a:88:2e:9d:1f:fd:b4:6b:10:14:7b:0e:ee:53:
         7e:12:c8:37:ca:93:24:f0:73:cd:72:71:d2:32:e3:34:a0:8c:
         00:2f:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----