Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
File:                     LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json)
Hash identifier:          hdNL+mtOXJFti7ALOc3VJhjmKbcC9uDEtb75N71HmJo=
Subject key identifier:   9A:1C:54:A9:84:9D:E4:92:13:A7:E0:F0:E3:3D:C5:7F:A3:49:09:C1
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Certificate issuer:       /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial:       01962F06D948D524114258AB69806574E3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
Manifest number:          137E
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: qyAJjim4FnuLYhU4/8/W/OtbSrYhbQ0NCzTQtS75Mes=)
                          2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:48:d5:24:11:42:58:ab:69:80:65:74:e3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=9a1c54a9849de49213a7e0f0e33dc57fa34909c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:b3:d4:33:32:f5:04:23:5d:60:df:09:3b:
                    03:16:17:00:bc:b9:06:27:c4:d7:9b:a6:ba:6c:a8:
                    d8:47:8e:53:06:bb:80:cc:cd:b7:cc:f1:b0:bf:ba:
                    13:cd:53:4b:f4:10:60:af:be:6a:2e:88:e7:c7:1a:
                    7d:b2:67:0e:62:da:78:3f:85:6a:f8:9a:1e:2c:0c:
                    8b:13:11:12:5e:55:4f:5f:30:2b:57:c6:a0:77:f7:
                    92:b7:bd:86:61:bc:46:56:b6:6b:ca:dc:5b:26:0b:
                    44:0c:ff:5a:b8:15:02:40:5e:36:b1:52:91:aa:35:
                    82:b5:20:1e:e2:ce:6b:78:18:09:dc:d5:37:09:bb:
                    c5:1c:54:29:58:15:35:3b:cd:f8:cc:21:06:3e:ba:
                    e6:24:36:f0:17:aa:ec:39:83:c0:b2:31:c6:3a:5d:
                    2d:3a:dc:44:25:e9:77:c1:f3:0e:96:d0:a2:98:ac:
                    13:20:9b:45:45:21:05:52:b6:99:ac:ca:47:d4:2a:
                    83:98:20:3a:b4:4e:ea:a2:53:4e:56:05:9b:c4:3b:
                    59:bb:a4:38:4f:f5:b6:1e:eb:c7:6a:d9:87:63:51:
                    ef:6f:0a:2b:20:26:b4:f7:d8:35:61:db:03:3d:1e:
                    09:c4:81:38:17:b1:02:40:dc:4e:71:28:82:f2:c0:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1C:54:A9:84:9D:E4:92:13:A7:E0:F0:E3:3D:C5:7F:A3:49:09:C1
            X509v3 Authority Key Identifier:
                keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:8f:c4:4b:24:2b:cb:f3:aa:8c:f8:b8:39:46:a0:30:dc:
         ca:b6:63:27:4b:32:c7:cc:17:0f:6a:a1:24:50:9b:97:ef:68:
         05:63:93:83:07:40:9e:9d:a0:e7:67:5f:ba:dc:99:0b:e9:7d:
         fd:c6:3d:75:ce:e3:47:09:ba:73:94:ee:89:e3:4d:32:ba:22:
         d1:72:00:28:88:6b:dd:68:3e:75:97:fd:2e:08:aa:8a:1b:07:
         30:45:15:73:9c:6b:3f:b0:94:c0:e1:a6:18:08:77:28:1e:a1:
         cd:7e:69:1a:78:3f:1b:4c:e5:23:bf:23:35:73:c9:84:f7:55:
         ca:9d:1c:72:49:f3:a7:12:f0:a9:cf:5b:2e:5c:23:ae:c7:25:
         83:f6:49:52:fa:15:34:77:92:ca:58:09:2b:ae:36:d8:4f:99:
         8e:11:f6:cb:13:97:ae:9e:10:35:4d:38:61:9b:a9:67:74:64:
         87:b4:2b:86:48:fa:f4:e8:25:cc:cc:16:5f:8a:0a:56:d6:81:
         2f:a0:e5:cd:69:3c:ca:fa:d0:b5:04:06:0b:cd:51:ef:41:4a:
         90:cb:33:11:d6:2a:63:f3:40:37:0a:fb:e9:99:09:c9:86:51:
         ad:4c:be:37:a5:a3:16:08:02:fe:98:80:82:3e:e3:25:5f:a0:
         5d:b6:c1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----