Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
File:                     LG1GLWWE49of8lFVSjReScatD7E.mft (raw, json)
Hash identifier:          vyN30iiZNz96Bmli7LelHuT1TEKgRUwuhiEDyQgKWxQ=
Subject key identifier:   75:AA:9F:48:D5:F6:27:48:BC:7E:2C:0F:5E:F6:E9:33:36:C8:C6:DC
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Certificate issuer:       /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial:       01962E98608DD89C190E0BAF521A76F2DB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: LG1GLWWE49of8lFVSjReScatD7E.crl (hash: G4PSgOejGNK3gM9jhbcC5sFIJ5/tHIUIctVLp8n4W3I=)
                          2: PlTGp6Ho-NUz3UJ_pTXgK1lVgrA.roa (hash: 9OM5uBqz0hnAImE+ogfgxUlyhO9v7s+esgTavmxFQEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:8d:d8:9c:19:0e:0b:af:52:1a:76:f2:db:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=75aa9f48d5f62748bc7e2c0f5ef6e93336c8c6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:3f:5b:09:92:c8:f9:60:6c:1e:35:19:c9:
                    97:ef:7e:22:56:e4:5f:89:41:a5:82:d6:54:36:95:
                    1f:78:53:80:e1:34:ac:76:94:d5:29:ba:b2:23:d2:
                    d7:b8:69:d8:c0:76:64:c8:1a:0a:94:e9:39:0e:4a:
                    06:84:5e:3f:66:a2:73:13:1e:a8:68:9d:17:c1:de:
                    0d:63:29:21:3b:ed:e7:61:68:b6:1d:8a:e8:2c:29:
                    2f:64:87:f6:49:31:a1:0f:75:d6:99:ec:f2:43:3d:
                    3e:dd:77:e3:5c:07:8d:e3:a7:04:35:c4:ef:b1:0c:
                    b9:e6:cd:ff:b5:e4:91:6d:b4:0a:83:da:88:ce:e8:
                    11:df:62:b0:c3:34:af:d4:ac:56:44:3a:58:0f:d1:
                    d7:fb:6c:78:28:2d:7b:a7:ab:64:3a:68:e8:59:39:
                    8a:f4:c0:b6:3b:76:9b:f5:20:ea:17:9f:56:9f:54:
                    db:05:62:f4:b1:ea:39:15:e7:2d:3e:55:21:f3:c6:
                    ba:9a:a3:89:04:69:6b:00:ab:c0:cd:70:b0:7c:5c:
                    ba:d7:7d:94:77:02:4c:80:53:79:0f:8b:aa:40:31:
                    fc:99:20:40:ac:5c:48:ad:8a:ac:3e:b2:11:76:6b:
                    5e:0d:ff:e5:78:dd:36:f6:93:cf:c7:56:39:74:d8:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:9F:48:D5:F6:27:48:BC:7E:2C:0F:5E:F6:E9:33:36:C8:C6:DC
            X509v3 Authority Key Identifier:
                keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:81:1f:61:a6:38:19:44:44:bc:9f:15:4c:63:93:18:0b:
         41:ef:96:53:a1:72:bd:21:fa:d5:e7:b5:8c:3b:43:0c:da:66:
         a2:aa:b0:af:b0:9e:24:3e:d7:bf:d2:8b:3b:ab:f1:d4:c4:da:
         79:e9:01:91:49:ab:9f:51:3c:9a:f8:46:cf:07:59:49:5c:c3:
         be:31:ab:4c:74:d6:07:68:e5:3a:cc:59:e0:d8:5a:e0:8b:68:
         b4:5a:52:64:e3:a1:00:31:af:ea:bd:66:bb:8e:15:38:4b:4c:
         77:a9:26:80:3d:51:87:40:35:e6:b2:0e:60:09:1a:8e:32:5f:
         ef:51:35:fa:23:a5:b4:d2:e7:8a:e6:3c:ec:b7:dd:00:aa:9b:
         0d:87:b7:12:af:07:27:39:74:4e:5e:e2:3a:16:97:88:c9:8b:
         a9:d2:17:83:28:40:6c:75:ea:9a:fb:cc:5a:d3:b2:7e:16:94:
         bc:08:73:cb:74:3c:b4:59:67:53:f5:4a:d5:b9:8f:2c:6f:97:
         1b:15:61:e8:0d:95:e4:9e:02:0d:b1:32:20:77:61:ac:a7:95:
         9c:23:9a:ef:fe:49:a6:74:47:be:67:3a:b0:3f:ee:d3:92:52:
         97:70:47:6a:2a:fa:28:f0:0f:20:b6:8c:80:61:2f:34:3e:e5:
         bc:b7:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----