Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          Q4LobmiLZ7OiBtgc6MCJ8hBDJqQ54zd9bghBmX/+mCI=
Subject key identifier:   82:6B:B9:D5:49:E5:ED:19:9D:AD:33:0E:62:63:43:E0:15:A1:BD:41
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       01962F3D719B5A2EB9A14797555C95A53698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: fMNFabH5Ie9gMy0E082meeYQxplAlkERColn9OcAY2c=)
                          3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=)
                          4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=)
                          5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=)
                          6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:71:9b:5a:2e:b9:a1:47:97:55:5c:95:a5:36:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=826bb9d549e5ed199dad330e626343e015a1bd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:49:5d:50:b1:f8:d3:34:02:d2:31:89:d1:
                    ac:14:9d:41:4a:86:f9:90:46:f6:19:2a:d2:66:33:
                    7a:62:2a:dc:f1:b1:b9:95:c6:8b:0b:bd:8a:bf:60:
                    ec:32:4f:72:96:92:d0:cb:0d:3c:01:28:1e:49:e6:
                    70:5a:aa:49:e6:ad:a4:74:5d:16:97:00:80:13:06:
                    07:27:8b:1d:46:5a:87:0c:a8:8d:ce:2b:fc:5c:f1:
                    38:b3:a9:29:97:ba:a0:70:40:7f:67:75:64:5f:da:
                    a1:34:d5:72:eb:a1:28:3a:05:e6:63:c9:3a:73:f7:
                    66:33:8c:bb:86:18:73:f8:4e:cb:b4:fa:36:22:49:
                    0d:a6:04:d1:b4:c5:a6:5c:e0:ab:3e:b9:d9:1b:25:
                    e9:a2:5f:19:84:ed:50:09:8b:e1:c4:9d:dc:ac:44:
                    43:4b:39:27:c4:c5:31:b3:a7:db:42:98:3c:b7:f5:
                    13:27:d0:91:33:b0:d5:82:c9:e6:8a:5a:79:33:7a:
                    50:f5:74:6f:ca:5e:77:b4:c6:05:66:f4:57:27:2c:
                    e0:f2:75:aa:60:7b:79:a6:7d:39:89:91:d6:89:30:
                    8c:1a:be:7e:c6:7e:ab:34:9c:0b:37:b1:3b:20:b5:
                    15:ae:7a:0d:7d:c0:89:87:30:3e:cd:bf:5f:c2:b9:
                    1a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:B9:D5:49:E5:ED:19:9D:AD:33:0E:62:63:43:E0:15:A1:BD:41
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:4f:42:3e:6a:34:ff:82:15:9c:1c:b8:6c:9b:79:cb:1d:
         3b:aa:9e:bc:9d:e5:60:f8:75:c0:1d:07:bb:f0:43:42:85:58:
         b9:25:46:51:ca:d6:4f:67:b3:99:dd:0a:dc:84:5a:9a:87:68:
         3a:96:8a:5d:d7:83:24:ba:c6:d9:69:18:28:d3:99:1d:98:e2:
         b6:5f:db:7e:dd:3d:06:61:66:2f:a2:b3:db:dd:15:32:c4:d6:
         e0:9d:19:27:c9:92:f0:45:ce:56:7a:d4:c3:81:bf:fc:9e:b9:
         f7:bb:49:7e:96:43:4b:74:b9:9e:62:cc:80:d8:57:b3:79:36:
         e2:9e:9f:66:35:17:9e:fc:1b:43:79:4d:a7:a4:b7:4c:3c:3c:
         60:eb:52:fb:fc:bc:7d:c7:d6:ff:12:c0:d6:24:8a:0d:f9:d9:
         07:73:ba:77:3a:85:87:66:24:15:23:44:41:63:1e:e1:cc:73:
         07:bc:37:83:45:43:85:34:7b:b0:90:a4:99:32:fd:fd:58:14:
         5b:1d:d0:cd:8e:cd:f1:5e:90:26:5e:5c:eb:c4:3a:b1:d4:f4:
         c7:46:60:55:fd:30:8b:29:d2:d5:7c:18:66:e8:83:aa:a0:5b:
         53:76:8a:24:69:29:36:31:62:9d:01:b1:35:4d:c7:71:56:29:
         79:73:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----