Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File:                     LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier:          ZMXwGGmCHOJ3KYSQvCc8maqEr5pSpjLWRGDrNxx6ODs=
Subject key identifier:   C3:61:D3:8A:2D:07:62:D6:B9:52:BB:AA:A2:8E:D8:E5:6C:5B:8D:8D
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer:       /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial:       01962FAB6FEE747E728C53ED99C106C1634A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number:          1233
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: 2Xnpj3Fm7WTWvpL4eaEPO77T9KIMzSlgYpNb4udI0AA=)
                          2: PP9bgdUS-fVj1MX8DGYePZt8TkE.roa (hash: ostFORLB1aqakHZ76u6KB5do/0qYMVa/6OoMMSfXFeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:ee:74:7e:72:8c:53:ed:99:c1:06:c1:63:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=c361d38a2d0762d6b952bbaaa28ed8e56c5b8d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:3c:62:97:d0:5d:77:53:a8:b3:fb:07:ac:
                    5a:b5:b1:be:b3:f0:e0:ff:e4:70:1f:9e:21:4a:ea:
                    f1:b0:8c:c3:3b:de:f0:29:42:e5:61:f8:6f:42:6a:
                    39:98:46:09:be:ec:43:f0:34:46:e2:b5:2e:1f:29:
                    b8:de:ac:b2:21:7e:e0:a8:e3:2a:c1:1d:91:4f:cc:
                    2a:70:6e:5a:c7:c2:9d:9c:f2:65:01:54:10:bf:36:
                    05:bf:e7:90:0b:94:ae:16:77:68:34:ea:2b:35:86:
                    34:e5:b5:4e:1d:1e:13:b9:51:23:bb:04:83:5b:68:
                    55:c7:dd:05:d5:87:ea:d2:84:f3:39:69:61:54:1a:
                    de:82:30:40:15:0f:a1:1f:b5:ed:b3:e4:1d:9c:ce:
                    c6:df:c4:01:b1:70:9f:4e:f7:33:63:63:37:37:35:
                    89:32:b7:0a:85:52:44:90:a1:b4:07:42:a7:b8:89:
                    72:cf:db:c3:ec:7d:c1:bb:89:57:d3:9e:c6:42:05:
                    37:56:4e:e4:1d:71:6c:ff:f7:ab:82:9e:2e:df:ed:
                    ed:bf:b2:f6:5c:31:82:60:21:34:a0:95:c2:3f:de:
                    ae:52:bc:99:2e:76:05:06:fc:3f:dc:e1:e0:a4:80:
                    50:2f:6a:e2:c2:63:cf:95:b6:c3:33:0f:67:b6:63:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:61:D3:8A:2D:07:62:D6:B9:52:BB:AA:A2:8E:D8:E5:6C:5B:8D:8D
            X509v3 Authority Key Identifier:
                keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b7:d9:4c:8c:9b:ba:fc:40:a3:54:45:08:16:c2:03:e1:7f:
         09:12:0a:a1:fc:b7:55:36:a0:03:cd:1f:a4:fe:3d:61:ee:f5:
         85:5b:10:d5:98:11:e3:ec:90:06:72:d1:f7:8e:c8:db:10:a2:
         38:99:c3:09:66:b2:e9:ab:5e:07:f8:c9:71:36:63:82:f5:32:
         03:86:6d:7e:66:10:a1:39:ff:bb:82:92:8e:57:1b:19:32:b4:
         e3:38:b5:15:c1:8c:6b:4c:6a:cc:76:72:2f:99:05:88:da:41:
         7d:ce:5f:56:35:cd:87:85:0c:cc:cb:4a:17:4d:7e:08:50:a4:
         34:b5:80:15:7f:28:71:7a:8c:6d:ee:02:f0:72:67:de:47:30:
         ac:3a:f2:18:f5:18:3b:ae:a2:90:17:f9:a6:3d:cb:c0:a7:8d:
         fb:14:3e:26:e7:a8:dc:17:da:ac:32:00:cf:1b:7a:3d:9b:0f:
         30:46:1e:61:d4:18:b9:fc:b0:c5:9b:b9:d9:ff:61:c1:43:04:
         08:d8:2f:1f:3b:45:59:d0:69:17:95:b3:4e:10:6d:ce:43:61:
         3b:79:0d:8f:1c:a8:85:94:2a:dc:9f:45:43:35:9d:0e:88:3c:
         f3:7f:3b:44:0e:65:e5:4d:d9:de:75:d8:64:1e:2b:20:db:3b:
         fa:5b:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----