Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File:                     LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier:          lWAeTLqmXQsZehSZUW9TOTaY/tctWs6H5wco3wdM3Qc=
Subject key identifier:   5D:CB:A7:60:91:D8:7A:EB:FA:C2:8E:FF:EB:6C:50:7F:CA:7E:F1:D5
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer:       /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial:       01962FAB776E793A55BF76A9E76404CCCCDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number:          1358
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: 1X/w0lIuYbu5FiWI4Kz0ml2bJdabdQg2drSh0CwEQzs=)
                          2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
                          3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:77:6e:79:3a:55:bf:76:a9:e7:64:04:cc:cc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=5dcba76091d87aebfac28effeb6c507fca7ef1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:98:0c:18:3c:f2:c4:0b:5e:14:68:15:31:12:
                    21:1c:ad:2b:56:44:f9:74:6a:3c:77:29:76:7d:89:
                    01:b0:0d:a0:4e:78:b8:c6:7f:8e:2b:45:24:20:66:
                    53:4e:43:c7:73:ad:a6:ae:47:13:34:1d:9f:e5:6a:
                    1d:97:44:94:fc:70:6b:d2:31:99:af:cb:22:74:20:
                    32:13:3f:46:2c:a6:c4:9a:42:97:5e:12:f2:02:48:
                    29:de:1d:7b:44:18:41:55:44:b4:63:03:6e:ea:5e:
                    74:f5:0c:c9:04:2e:90:60:27:ca:ad:56:8d:15:a7:
                    99:26:04:e2:91:db:58:0e:09:96:39:a4:35:3e:5a:
                    b1:4b:d7:99:ab:7d:bc:ac:10:f4:4a:c8:e7:d5:d2:
                    60:50:b1:33:9c:d6:0a:75:3b:6b:8b:3f:ed:3c:0e:
                    6e:fd:0b:99:cd:1f:5b:66:e1:7d:da:c2:51:b3:22:
                    d7:65:94:ce:d3:25:7e:0a:c0:93:2b:ca:d0:1d:f7:
                    0e:54:ac:bd:d0:66:dd:be:78:21:e5:0d:73:6f:c4:
                    00:f4:9d:78:68:94:93:80:c5:57:0d:5f:af:55:c8:
                    3e:99:94:af:d6:03:16:e9:e3:e1:6c:f1:02:a0:2c:
                    ea:fc:f4:11:33:e1:b8:c1:99:5f:54:0e:5d:da:ab:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:A7:60:91:D8:7A:EB:FA:C2:8E:FF:EB:6C:50:7F:CA:7E:F1:D5
            X509v3 Authority Key Identifier:
                keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:69:d6:24:0a:a6:ac:76:ea:a9:90:8b:2d:f4:f0:79:f4:6e:
         b5:06:ce:c8:bc:6b:ab:00:ef:e5:b8:d4:01:25:24:da:e9:e9:
         c3:80:4f:09:56:79:fe:46:c0:d6:90:07:0f:17:a1:a4:9a:3e:
         a4:e9:04:05:c9:48:04:12:e6:20:cc:61:16:c2:a7:15:af:86:
         4e:af:81:3f:e1:08:ec:61:43:bf:6f:46:a2:e7:85:0f:8b:1d:
         68:3d:c1:f3:ef:dd:f4:09:c4:05:4e:5d:3e:75:4c:aa:6f:c5:
         7f:c4:6c:93:82:01:2c:59:1a:91:cd:46:fe:00:09:9e:3b:03:
         a3:72:b3:67:a3:b9:64:12:37:a8:f9:e8:ff:7f:32:4b:9b:da:
         b3:18:4d:fe:ed:29:ec:c5:52:92:24:bc:61:52:f8:57:f4:7f:
         89:fb:01:0b:13:86:1b:e5:e0:0e:a6:a4:62:c7:ab:e3:94:e1:
         42:bf:bc:3d:90:04:0a:b7:4d:74:36:63:23:43:46:f8:52:98:
         c5:12:f4:2d:ca:88:21:a3:33:3a:52:52:ae:de:69:f6:d4:b7:
         05:9a:24:f6:7b:85:1c:ed:d6:20:1f:0d:ed:bf:b2:34:ce:aa:
         3b:69:26:61:02:fb:31:97:1a:a1:df:fa:c0:e1:5c:72:8f:e3:
         84:40:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----