Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File:                     LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier:          ymtJfF159ffQNhcoENpow7eOeUP/pDjj+xjyfoUPlWU=
Subject key identifier:   9C:25:06:7D:45:25:EC:97:E6:25:DF:AA:27:B2:1D:3E:B1:B6:8A:3C
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer:       /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial:       01962F073B973BD0927657244D5A574BBCD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number:          0CE6
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: 0JRoWQ-bKpnOguLXiXYB3jJdTu4.roa (hash: VzJsKHpUQpit3sPn+6kTTMxbJRpLiMINGWJUJX/UKbE=)
                          2: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=)
                          3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: y4qrWsgoGu/sPYyAjrS/uYkc/GVgrWDBtIi8gnnRNRg=)
                          4: f99QaNImVksd_4fwJs_0jT5Ig2g.roa (hash: UE3mO+CTEUsKvTBCtFKJEMJlm1F6YnPBO42bToz3pgQ=)
                          5: l3J9gB4IMgSdlImDHfTTPYnsaMI.roa (hash: P3pHI/DrughOEkN4jU0yG73V2ZlqyiY2X1oOcPDXPps=)
                          6: pFni8BuhN7DO3E6SL-8dURfAHBM.roa (hash: Z7r1I+UjoIHQbs4HyVmg7922FtvK+u2Y8zjbNGqqhcs=)
                          7: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=)
                          8: tjgugWtXCRAR6LvB3B_fCXXkrDc.roa (hash: wDXsrBE0CeUhXqGr+vuXkjURzA3CYwNxPRQ4zDLi3bY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3b:97:3b:d0:92:76:57:24:4d:5a:57:4b:bc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=9c25067d4525ec97e625dfaa27b21d3eb1b68a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:26:9c:6a:9f:a4:d9:68:64:a4:a2:07:32:62:
                    f0:a7:60:72:c1:34:30:1a:aa:4e:a0:c8:16:2d:04:
                    bf:d0:d7:a3:21:60:3a:31:a6:36:47:ea:d0:04:c3:
                    33:36:bd:38:ea:2f:c3:3c:c0:ed:48:f3:90:85:73:
                    23:6a:b3:69:88:62:af:ea:d9:81:61:00:4b:b1:cf:
                    f8:3f:2a:75:08:7d:ca:bd:7e:cb:73:64:e1:63:a2:
                    83:a3:f8:e6:09:f8:76:a0:66:25:63:37:ac:0a:01:
                    44:d3:83:1d:e8:fc:62:ff:85:2d:d8:e5:c1:d4:df:
                    2f:bc:32:16:38:0c:80:d6:37:eb:4c:b5:f1:0e:94:
                    6e:18:f3:d6:e2:65:0f:d7:50:b2:bc:9a:02:31:a2:
                    32:a5:a8:a4:aa:0e:24:e0:c0:c6:c2:87:db:19:bd:
                    cd:2c:b3:66:a7:ed:78:fe:10:ad:be:ff:1b:f8:da:
                    b3:cb:fc:5f:7d:72:b9:1a:6b:c0:a0:84:43:e9:0a:
                    38:bf:c0:58:3e:30:9a:68:0a:6f:8c:f3:e4:45:d7:
                    6d:c1:d1:3c:c3:5a:88:ca:9e:14:75:15:c9:3a:d1:
                    9f:30:8c:88:be:00:5b:ae:e6:9f:a7:e5:87:42:31:
                    a1:c4:f8:94:e5:d2:dd:c3:e7:05:14:0d:c2:e9:b3:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:06:7D:45:25:EC:97:E6:25:DF:AA:27:B2:1D:3E:B1:B6:8A:3C
            X509v3 Authority Key Identifier:
                keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:d3:77:48:ba:af:79:9e:f7:c4:b1:ee:d4:e7:18:52:11:
         96:2e:03:e6:92:d6:6a:e7:4b:80:5c:cf:fe:ae:a5:14:a5:55:
         ac:a6:08:81:b9:00:37:af:2b:fb:da:7e:d3:48:3f:49:31:4a:
         d4:24:96:4f:3b:7b:3d:64:81:ec:50:cf:3f:2d:49:c1:1b:b7:
         1e:68:2b:0f:04:a3:f3:b7:8a:32:02:69:cf:8b:ad:4b:a0:0a:
         73:a3:77:d9:8b:c8:3f:ad:e8:85:74:91:af:e0:cc:32:bd:52:
         90:17:08:79:04:09:d6:bb:54:92:ed:33:b8:39:40:07:81:4c:
         e2:7d:f7:94:e2:d3:51:92:97:76:07:06:7f:de:e6:6b:0f:b8:
         c8:be:f5:fe:ee:08:4b:ba:d3:35:99:a0:4e:c7:56:d5:64:0d:
         26:b7:f7:e1:63:fa:c6:75:19:3a:72:a6:02:5a:98:a1:01:be:
         5d:73:91:7b:da:0e:84:b3:fa:66:a0:39:6a:f1:64:a3:ff:70:
         d8:0a:e3:33:03:3a:98:16:5a:b6:a9:dc:6b:7c:af:76:b6:97:
         f2:05:a2:79:60:8b:b8:82:ff:1a:db:ad:f1:81:d7:15:0c:83:
         2c:f9:40:5b:2a:71:9a:a7:8e:97:31:63:83:07:3d:2d:b4:dd:
         c5:83:33:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzuXO9CSdlckTVpXS7zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjUwNDEzMTIwMjA1WhcNMjUwNDE0MTIwMjA1WjAzMTEwLwYDVQQD
Eyg5YzI1MDY3ZDQ1MjVlYzk3ZTYyNWRmYWEyN2IyMWQzZWIxYjY4YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Sacap+k2WhkpKIHMmLwp2BywTQw
GqpOoMgWLQS/0NejIWA6MaY2R+rQBMMzNr046i/DPMDtSPOQhXMjarNpiGKv6tmB
YQBLsc/4Pyp1CH3KvX7Lc2ThY6KDo/jmCfh2oGYlYzesCgFE04Md6Pxi/4Ut2OXB
1N8vvDIWOAyA1jfrTLXxDpRuGPPW4mUP11CyvJoCMaIypaikqg4k4MDGwofbGb3N
LLNmp+14/hCtvv8b+Nqzy/xffXK5GmvAoIRD6Qo4v8BYPjCaaApvjPPkRddtwdE8
w1qIyp4UdRXJOtGfMIyIvgBbruafp+WHQjGhxPiU5dLdw+cFFA3C6bNR0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwlBn1FJeyX5iXfqieyHT6xtoo8MB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy3Td0i6
r3me98Sx7tTnGFIRli4D5pLWaudLgFzP/q6lFKVVrKYIgbkAN68r+9p+00g/STFK
1CSWTzt7PWSB7FDPPy1JwRu3HmgrDwSj87eKMgJpz4utS6AKc6N32YvIP63ohXSR
r+DMMr1SkBcIeQQJ1rtUku0zuDlAB4FM4n33lOLTUZKXdgcGf97maw+4yL71/u4I
S7rTNZmgTsdW1WQNJrf34WP6xnUZOnKmAlqYoQG+XXORe9oOhLP6ZqA5avFko/9w
2ArjMwM6mBZatqnca3yvdraX8gWieWCLuIL/Gtut8YHXFQyDLPlAWypxmqeOlzFj
gwc9LbTdxYMzCQ==
-----END CERTIFICATE-----