Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File:                     LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier:          6U85s27knp4CMMhXY+z9woFGtiLoPSu20Jds39XdSw8=
Subject key identifier:   46:B4:29:43:69:25:3B:69:48:CA:00:F0:39:DD:B0:5B:9E:3A:12:24
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer:       /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial:       01962F74A077882D399A65AA04A46EC98AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
                          2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: xTFNsaJz/iJEZUfx8rlgPGd8QTwr4f8Whl4taDp9Jqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:77:88:2d:39:9a:65:aa:04:a4:6e:c9:8a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=46b4294369253b6948ca00f039ddb05b9e3a1224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:b4:cd:87:bc:c3:51:53:8d:17:57:73:94:
                    13:57:f0:de:f2:17:e1:2a:36:c7:a3:8f:b2:4c:d6:
                    66:47:02:54:81:f3:d2:24:dc:46:c7:83:0b:65:04:
                    21:58:bc:bc:b4:b6:e5:71:1d:3f:b4:83:11:a0:e6:
                    80:fe:53:4f:b8:c0:4c:59:5f:87:0b:2a:97:b7:60:
                    a2:04:1b:ca:dc:7d:76:70:40:70:f1:09:da:fb:33:
                    07:d7:fa:89:ea:ba:cc:74:83:10:a7:8e:90:b6:52:
                    92:44:d6:07:fb:c9:26:26:45:bf:1b:6a:ce:32:78:
                    9b:3a:f1:b6:65:15:ea:ea:05:4a:a5:bd:19:43:da:
                    e8:57:1d:05:2a:7c:f2:75:85:5e:09:b4:d9:52:7e:
                    ff:c9:25:5b:6f:b8:43:34:24:42:61:94:c0:0f:e6:
                    8e:78:3e:a4:ed:28:5b:69:16:48:d4:84:cb:f0:e1:
                    15:c4:74:7e:4a:be:78:0c:a0:d1:40:d0:16:4b:1f:
                    a5:72:e6:e1:e7:b2:fd:3f:5a:fa:d0:2f:65:49:30:
                    0b:e5:ca:64:68:3a:3b:51:b9:91:2f:d1:17:fe:60:
                    49:95:00:97:b3:15:ec:74:2d:6d:62:f6:21:34:7b:
                    38:96:55:a7:27:a3:a3:5b:f0:26:68:dd:c8:02:7c:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B4:29:43:69:25:3B:69:48:CA:00:F0:39:DD:B0:5B:9E:3A:12:24
            X509v3 Authority Key Identifier:
                keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:69:ba:b1:96:ff:52:cd:41:93:02:ce:9c:6e:e4:21:08:
         d7:5e:a6:cf:39:75:a7:d2:57:c1:c0:9d:0f:3c:52:ca:dd:f9:
         05:59:c3:29:13:a8:b3:4c:c3:91:93:40:31:59:42:3c:30:10:
         80:d6:c7:ba:1b:a0:b7:ad:21:0c:d4:52:74:ff:fe:63:d7:b5:
         86:dc:5b:f5:b5:2f:2f:c4:5c:52:d7:a5:a6:12:d3:49:14:cd:
         c7:5c:81:78:8f:25:a5:a9:1a:87:39:af:b7:cb:22:bb:00:06:
         e3:df:64:27:5a:95:d0:78:38:e5:d5:38:da:2f:08:20:83:80:
         3c:d6:ef:61:d4:0c:14:13:e9:ef:b2:9e:ac:18:61:30:ad:6d:
         44:82:ae:e2:ae:ad:57:41:9a:4b:db:b8:ab:47:3c:1d:87:08:
         cb:05:fb:33:4c:58:ec:05:7a:16:eb:e4:ce:2c:e9:6c:a4:90:
         29:eb:7a:c2:85:3f:6e:7c:04:1b:25:77:e7:d5:6d:60:7d:3f:
         a1:d9:7d:44:0a:90:07:78:6c:20:b3:4c:79:46:33:2d:dd:82:
         bc:06:d7:c9:6f:a7:e0:6b:60:f2:a1:81:8f:d2:25:81:81:0b:
         5e:86:50:97:5c:d0:eb:52:f6:d1:f0:15:ce:7d:34:22:1d:66:
         9a:18:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----