Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File:                     LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier:          lPcH+qXKg68pkV8+NeOBWMabxpKECL109L3YWZnjyrc=
Subject key identifier:   0A:2F:7D:3B:80:CA:2F:1A:E2:BB:AE:42:E1:31:E1:AF:00:EC:06:62
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer:       /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial:       01962E99A766B10AA970848F71CCA253D203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: 79H+5M2Dq/eUvVXepamUxS5LsCap5+c4k6pw5zVdVPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a7:66:b1:0a:a9:70:84:8f:71:cc:a2:53:d2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=0a2f7d3b80ca2f1ae2bbae42e131e1af00ec0662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:18:f5:07:f8:b8:fb:16:73:7a:90:aa:40:
                    76:fc:ad:b0:23:70:26:3c:7a:e6:3a:1c:6f:8c:e8:
                    dd:ed:ae:cc:6a:f4:c3:3d:78:90:92:50:f4:aa:4b:
                    f0:36:38:15:2a:d2:5f:f6:dc:ee:02:84:7d:df:08:
                    61:18:b4:98:c9:a4:17:29:1a:e0:f4:b2:0d:1f:cb:
                    62:a3:9f:1c:aa:0d:64:6d:88:ca:5a:98:31:a0:0c:
                    00:35:12:eb:99:51:8d:fd:7c:c9:a0:1f:0e:00:b0:
                    7e:a4:1e:ed:0b:5b:69:6a:38:e3:58:20:3a:b0:d2:
                    30:0c:97:e5:55:58:4d:e3:c2:78:6e:a3:b3:b2:15:
                    05:90:31:3a:d0:53:2b:f8:41:eb:4f:5b:54:72:0a:
                    46:71:3f:0d:9a:bd:18:88:61:25:62:2a:c7:1c:ac:
                    0a:48:85:ce:f2:1b:80:dc:65:db:71:0d:2e:58:fc:
                    ad:89:ff:3c:6a:cd:1a:75:ae:d2:67:c1:e1:f3:ee:
                    fb:8d:18:a6:a6:78:03:a2:12:16:9d:2a:a5:7d:2f:
                    b6:3e:64:0d:a3:e8:7e:f1:19:e7:5a:b5:97:aa:25:
                    28:85:cb:f9:e1:cf:18:a5:d5:2b:c3:6d:01:d1:ac:
                    58:d3:7b:30:1a:89:2f:dc:bc:ab:25:23:43:08:f5:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:7D:3B:80:CA:2F:1A:E2:BB:AE:42:E1:31:E1:AF:00:EC:06:62
            X509v3 Authority Key Identifier:
                keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:62:5e:1b:53:8d:30:46:d8:d7:b2:69:eb:c4:87:e8:29:40:
         4e:77:8b:5d:3d:24:ce:1a:a3:b6:e2:fd:b3:af:6a:2a:df:b0:
         15:73:dd:f1:f9:68:39:27:cf:23:31:ea:5b:a5:2d:b0:45:db:
         bd:8a:b3:40:a7:23:f7:3c:84:7c:00:16:32:7e:53:ce:b7:0c:
         5c:96:b0:55:7d:a1:13:b4:89:6c:71:d5:7a:71:36:a3:7d:71:
         d0:b6:b8:9f:fc:c8:66:10:d3:fc:69:86:b7:34:b4:66:b9:8f:
         14:f3:4f:65:fc:0b:4e:b0:72:6d:fa:97:d3:5d:8f:54:a9:9a:
         71:f4:9f:23:12:89:25:bc:ce:39:80:d7:e6:4a:28:7e:35:b6:
         87:0f:62:fb:55:f3:1e:9c:92:23:04:71:63:9c:7e:bd:41:2a:
         71:ec:43:51:fa:b1:89:98:32:2b:6a:f4:35:db:a0:f9:07:65:
         71:28:87:13:68:ba:ee:40:be:33:92:38:ab:8a:d4:73:21:40:
         5e:0d:1f:37:94:8e:87:6f:dc:4c:b7:82:4a:10:5d:59:09:dd:
         35:97:3d:35:99:3e:07:09:93:65:9a:48:e8:63:8e:88:92:a2:
         4f:d4:8a:07:aa:57:02:42:8e:91:46:5c:66:e7:21:ad:a1:1a:
         c6:49:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----