Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File:                     LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier:          tivl5M5BR6mNtv9EuExyLIfSiKVIwbbFtVQlzNldAdU=
Subject key identifier:   37:B2:CB:3F:4D:57:17:61:F9:EA:5C:9C:69:AA:0E:43:2F:CF:2B:C9
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer:       /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial:       01962F3D657B798A901FADB791A550A2F42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
                          2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
                          3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: EmxFhes6FrSA4BwdIJQCOfM8aCP3paWJxyBwKLdIYKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:7b:79:8a:90:1f:ad:b7:91:a5:50:a2:f4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=37b2cb3f4d571761f9ea5c9c69aa0e432fcf2bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:8d:4b:48:4c:81:9f:21:12:91:2b:5e:9d:
                    16:15:e0:7f:c7:c5:5c:3f:f1:a7:bb:c1:63:2c:11:
                    02:d7:a8:ea:a6:f9:8a:82:fb:68:95:cf:52:de:78:
                    d5:1b:5f:5d:73:22:cd:ac:e3:6b:59:9a:e1:0f:b7:
                    9f:56:38:c2:2f:4f:f5:c7:63:cf:fb:72:f3:08:4a:
                    f2:46:f4:2a:2e:e2:92:d6:30:7c:ba:6a:81:e6:dc:
                    e8:3c:cf:62:40:1f:74:d7:8c:41:c4:d6:eb:8a:b1:
                    05:92:b1:e5:7a:17:2b:53:27:98:d0:b8:ec:34:96:
                    bd:e9:9f:37:60:b8:7c:5e:34:a8:8a:b9:25:ba:55:
                    1f:92:e1:2e:a0:a5:0a:b0:89:39:6c:b4:ed:c9:9e:
                    b5:41:e9:e0:8a:4e:b0:1a:85:0f:b8:8c:64:2a:8d:
                    ba:d6:db:37:fc:e8:c7:42:97:db:46:19:dc:62:c2:
                    53:01:f6:8c:8b:e7:a3:db:a3:94:0d:8c:b5:f3:b9:
                    35:77:9c:ee:df:c0:ca:72:30:91:66:92:e7:1f:71:
                    2d:1f:33:c8:2b:81:81:4a:36:99:f1:23:00:06:7b:
                    e9:a7:77:aa:60:ed:f5:54:b8:fa:f1:69:07:91:4c:
                    1a:ad:79:f2:84:f1:f4:d1:0e:96:42:c6:e0:7c:f8:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:CB:3F:4D:57:17:61:F9:EA:5C:9C:69:AA:0E:43:2F:CF:2B:C9
            X509v3 Authority Key Identifier:
                keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6d:ba:31:a6:19:da:0b:4c:da:44:c9:c8:d3:f4:d3:1d:65:
         07:b8:0e:e5:c5:a3:6b:b7:1e:e8:4a:b1:ac:c5:d3:3e:0b:90:
         2f:65:c8:dd:df:17:de:62:f7:bc:63:12:c2:6e:cd:d8:89:9d:
         f9:f9:c8:75:f9:ea:d5:1d:b0:88:e4:c8:cf:f5:f3:ed:20:1f:
         a2:02:e3:8b:17:1a:93:5d:43:d5:f8:eb:94:1f:16:cc:a2:a0:
         78:d2:0b:1d:e6:5f:ab:0d:85:73:a8:ae:b6:80:68:14:a7:83:
         c9:1b:96:0a:70:19:f0:aa:1f:54:67:aa:f0:84:39:e3:3a:cd:
         5f:75:f6:33:f1:c4:12:df:60:11:e3:42:66:46:68:65:7d:b4:
         2a:c4:c2:1b:3f:d0:cf:95:10:db:18:1b:f0:d2:78:67:d8:f0:
         4b:4c:55:92:8b:11:c5:15:10:c6:1d:a2:7b:8f:75:55:c8:a2:
         ae:20:e1:aa:99:44:b2:88:81:c8:b8:93:46:2e:a6:02:f4:50:
         33:0c:01:73:d6:ba:9c:cf:a0:be:88:cd:e2:56:20:0f:4f:54:
         68:64:14:f9:85:32:a5:f9:3b:5b:e1:20:65:10:77:d4:6d:29:
         8d:fc:93:a2:a8:fd:02:74:66:1b:7e:08:ea:33:a6:1d:ab:45:
         1f:05:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----