Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File:                     lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier:          LclSytBish1/fUY2pdj829uEXXa67hnoqxU49nNX7j4=
Subject key identifier:   04:07:6F:B0:D1:BF:BF:4C:1A:EB:D4:96:9B:61:B5:06:87:F7:C2:D1
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer:       /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial:       01962ECF7C4A5DDED58F0369A8462372FCE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
                          2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: 3C53BtslEPFoCABBz8JwunXLu2Mm05RUt+IesQTtdmw=)
                          3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:4a:5d:de:d5:8f:03:69:a8:46:23:72:fc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=04076fb0d1bfbf4c1aebd4969b61b50687f7c2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:9e:d4:a6:22:5e:da:fc:18:77:40:81:f9:
                    b4:9d:7b:d3:37:c9:17:ca:11:7b:a4:82:11:cf:94:
                    df:78:e5:ed:ef:2d:80:bc:0a:6b:78:04:b3:4e:15:
                    24:32:b6:b1:8b:2d:b8:19:9f:1a:ef:35:1a:11:92:
                    6e:e5:64:d9:a6:f4:03:f9:6e:b4:68:0b:1f:fb:05:
                    7a:37:fb:e3:db:67:95:1b:7c:16:97:f5:6d:0f:ab:
                    b4:6b:ce:81:a2:d2:91:6a:b3:ab:82:5b:e0:18:27:
                    58:bf:c4:4b:4a:fa:fb:3b:73:d2:e2:da:2a:c7:6b:
                    06:51:af:6e:34:c8:b5:26:2a:c5:6d:cf:dc:e2:6a:
                    ae:12:59:b6:7c:90:4c:ae:f9:e1:d1:04:06:8d:ae:
                    98:ee:85:d1:8c:18:11:df:33:5d:79:85:d7:77:33:
                    b3:98:56:6b:2e:52:50:aa:be:da:59:2d:91:65:f9:
                    1f:eb:0a:41:53:c7:12:71:e2:57:c4:09:a3:fc:3d:
                    ef:33:48:53:9f:66:4f:c9:86:16:9c:78:bf:4f:6d:
                    c2:73:05:89:35:fa:1f:3a:11:ca:46:db:98:f8:3f:
                    cb:0e:b2:ee:91:e0:da:ff:7b:14:b9:c0:ea:2b:00:
                    9f:ec:b2:bc:30:2c:f9:3d:d9:50:1c:9e:23:a5:d8:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:07:6F:B0:D1:BF:BF:4C:1A:EB:D4:96:9B:61:B5:06:87:F7:C2:D1
            X509v3 Authority Key Identifier:
                keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:5f:52:ca:6b:68:18:75:b5:77:ef:6f:2d:28:b6:7a:dc:
         b8:43:51:6a:f8:61:39:03:25:ad:38:4e:ec:2c:8e:30:5b:dc:
         fa:42:a2:f1:f1:cb:ba:45:e7:47:95:eb:01:6a:20:3b:98:1e:
         a1:50:3e:c0:21:f4:78:6a:59:1a:02:65:ec:5b:27:6f:6e:95:
         cb:9d:96:41:5f:bb:aa:b3:f4:84:24:15:e8:9e:1e:af:3c:23:
         4a:1e:0c:f0:53:15:52:3a:d9:42:3b:9d:4f:39:07:e5:cd:45:
         56:55:da:64:a9:67:7f:18:4c:3d:eb:b1:b1:cf:0e:00:43:26:
         6d:29:c4:3a:9c:e0:61:c3:c0:37:b0:a7:13:2d:9c:d9:dd:a7:
         4f:bb:0c:b5:01:a2:0c:90:c3:2a:48:17:ea:57:ca:4c:f1:72:
         0a:b3:b6:59:d9:57:b4:94:6d:81:f3:2f:2f:3e:38:89:6a:f4:
         ca:87:ea:88:c2:d3:fd:0f:1c:0b:8c:48:4c:ce:dc:7e:c5:38:
         ee:44:8d:c9:b7:0d:78:03:93:2d:21:9c:15:40:3b:29:9b:f1:
         4b:c5:bf:af:85:0d:43:d4:2b:da:d6:ed:e3:6b:08:72:53:d7:
         8f:3d:60:4b:6e:ae:c8:da:6f:f9:85:a8:17:0f:c4:4b:ed:45:
         24:b4:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----