Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File:                     LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier:          SGd36TIv97DVknfYg44c8xPJIc0d0JrOudyc4OB7ff4=
Subject key identifier:   AF:C5:81:3F:D1:06:63:13:6B:F2:D8:AA:6E:7F:53:5A:04:EB:32:4E
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer:       /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial:       01962E61B87BAC540A46CDD20BFA15157F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: 4AVq07YCoeQFBTKZGsi2misE6fvT/c4oK3nm3agVhuc=)
                          2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:7b:ac:54:0a:46:cd:d2:0b:fa:15:15:7f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=afc5813fd10663136bf2d8aa6e7f535a04eb324e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:21:92:be:61:2d:5c:c7:65:6b:5a:e1:43:a8:
                    34:2a:66:29:03:fd:19:65:63:01:a0:ae:de:ec:43:
                    82:84:9a:cd:30:dd:e2:e5:b6:6f:db:42:91:57:1b:
                    8e:84:e9:61:d1:09:fe:b1:b3:04:73:5d:b5:e1:77:
                    88:d6:f8:c5:a7:c8:9f:ae:7f:3f:a7:58:16:d3:21:
                    b6:21:33:14:97:7c:26:88:a9:6a:10:e0:ed:fc:d2:
                    d3:df:d6:cb:d5:4b:39:a4:f1:6d:b8:51:9b:3f:a7:
                    35:38:5d:31:d4:d8:9a:e1:57:1e:5a:56:b8:ea:00:
                    d6:d5:47:13:f6:2f:d6:bb:76:3d:ef:4b:cb:ad:31:
                    1c:20:60:bf:8f:3b:ff:5e:9f:7c:3b:0f:92:f5:38:
                    ad:27:e1:98:6c:9b:80:7f:6d:d3:c4:82:2c:20:77:
                    77:42:9a:a7:ff:61:87:41:97:1f:b7:34:64:59:fc:
                    4a:95:97:82:e6:37:cb:32:79:32:a9:44:c2:9c:9f:
                    8f:f2:6d:3e:f9:c2:9a:7a:f7:66:fb:4f:da:69:cf:
                    ce:8e:4d:6c:33:a9:7b:b6:1b:3d:56:81:85:a7:d9:
                    ef:19:42:99:ef:15:a4:9e:94:22:7c:ce:aa:d4:dd:
                    17:9e:b1:4d:49:7b:61:48:83:6d:cf:3d:ab:bc:f2:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:81:3F:D1:06:63:13:6B:F2:D8:AA:6E:7F:53:5A:04:EB:32:4E
            X509v3 Authority Key Identifier:
                keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:1b:38:97:fe:b1:ac:9c:0b:72:d8:a3:6d:5b:a7:5e:41:
         18:00:fe:2e:cc:70:6b:2d:09:b8:51:49:c1:6f:8e:5d:9a:b5:
         a4:61:b0:70:68:9d:8d:84:07:ee:fd:e9:bf:d5:8f:59:de:af:
         01:07:7e:7c:6a:e6:f2:9d:81:9a:29:ec:3a:f2:4a:2c:d2:48:
         6c:9a:a9:69:dd:4b:88:d2:e1:06:aa:f9:af:cd:4a:b2:29:53:
         6c:bb:35:c5:b2:8e:d0:13:ef:2e:1a:02:54:75:20:c7:73:f4:
         84:7f:7a:8a:f5:6e:1c:15:a3:1b:2e:ef:07:b5:bf:d1:f9:11:
         1a:f8:ff:18:46:1d:74:eb:11:70:32:3e:ff:91:78:49:33:7d:
         c5:a7:e9:f7:26:08:7a:3a:21:c1:89:d0:dc:0d:3c:03:ac:7a:
         e1:5d:16:75:27:b6:f9:f1:28:f8:cc:9e:d5:48:e9:84:5c:fa:
         a0:7a:2a:f5:d4:1a:70:7c:2d:18:39:bb:c7:0c:db:03:4f:59:
         37:fd:6d:47:c3:98:94:eb:a0:31:39:32:cb:25:a3:13:2a:7d:
         d5:ba:ae:cb:f2:28:1f:11:b5:d8:e0:8b:1f:eb:8a:94:94:c7:
         f2:d6:08:e6:81:47:8d:cf:2d:b0:97:ab:c6:98:63:49:6b:be:
         ab:34:61:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbh7rFQKRs3SC/oVFX+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzNhZDQ1ZjhhM2ViZTY2N2FiYjE5NmEyODlkNjcxOWJl
YmI4MmQwHhcNMjUwNDEzMDkwMTE4WhcNMjUwNDE0MDkwMTE4WjAzMTEwLwYDVQQD
EyhhZmM1ODEzZmQxMDY2MzEzNmJmMmQ4YWE2ZTdmNTM1YTA0ZWIzMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SGSvmEtXMdla1rhQ6g0KmYpA/0Z
ZWMBoK7e7EOChJrNMN3i5bZv20KRVxuOhOlh0Qn+sbMEc1214XeI1vjFp8ifrn8/
p1gW0yG2ITMUl3wmiKlqEODt/NLT39bL1Us5pPFtuFGbP6c1OF0x1Nia4VceWla4
6gDW1UcT9i/Wu3Y970vLrTEcIGC/jzv/Xp98Ow+S9TitJ+GYbJuAf23TxIIsIHd3
Qpqn/2GHQZcftzRkWfxKlZeC5jfLMnkyqUTCnJ+P8m0++cKaevdm+0/aac/Ojk1s
M6l7ths9VoGFp9nvGUKZ7xWknpQifM6q1N0XnrFNSXthSINtzz2rvPKa7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/FgT/RBmMTa/LYqm5/U1oE6zJOMB8GA1UdIwQY
MBaAFC5zrUX4o+vmZ6uxlqKJ1nGb67gtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85YTYwY2YtOWQ5NC00NTg1LWEyNWIt
NWU3Zjk1ODExNTYyLzEvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85YTYwY2YtOWQ5NC00NTg1LWEyNWItNWU3Zjk1ODExNTYy
LzEvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcQbOJf+
saycC3LYo21bp15BGAD+Lsxway0JuFFJwW+OXZq1pGGwcGidjYQH7v3pv9WPWd6v
AQd+fGrm8p2BminsOvJKLNJIbJqpad1LiNLhBqr5r81KsilTbLs1xbKO0BPvLhoC
VHUgx3P0hH96ivVuHBWjGy7vB7W/0fkRGvj/GEYddOsRcDI+/5F4STN9xafp9yYI
ejohwYnQ3A08A6x64V0WdSe2+fEo+Mye1UjphFz6oHoq9dQacHwtGDm7xwzbA09Z
N/1tR8OYlOugMTkyyyWjEyp91bquy/IoHxG12OCLH+uKlJTH8tYI5oFHjc8tsJer
xphjSWu+qzRhuQ==
-----END CERTIFICATE-----