Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File:                     Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier:          AIenui/8ovDQ/2Ce2fW8gNUxK9pLHeSgN6I5ZCD7pJw=
Subject key identifier:   14:C1:72:A3:AE:9C:2C:16:BB:EA:E8:31:FC:11:D2:70:97:C3:2C:B2
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer:       /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial:       01962ECF815E745DC918B0733CD731E0CFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number:          0694
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: AmjCCCe4KPhSlN7nSeMhkhwFf9qI5obEIccFAsUWBwI=)
                          2: s4AKgCvHin14a0p0jz13CHksENw.roa (hash: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:81:5e:74:5d:c9:18:b0:73:3c:d7:31:e0:cf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=14c172a3ae9c2c16bbeae831fc11d27097c32cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:a5:6e:df:47:4f:59:bb:b3:24:7c:e2:18:
                    26:fd:cd:ba:4b:ba:61:62:d0:03:bd:9e:d3:8f:9f:
                    fa:eb:68:48:c6:88:c4:04:92:7d:6d:4e:a2:7e:64:
                    80:1b:ba:81:83:ae:f9:90:9d:10:9c:ea:8b:57:2f:
                    03:46:2b:0d:fa:5d:79:19:11:90:69:a5:cf:d0:67:
                    f4:b6:79:72:8a:a5:c3:73:fe:f5:de:88:44:d2:00:
                    fe:44:c0:3f:63:5e:80:b6:d8:03:3a:8b:da:74:1d:
                    58:39:e7:12:f2:9f:90:ef:9b:52:20:e0:1e:ae:db:
                    71:aa:9d:1e:19:72:93:43:13:e6:c7:a4:f2:b3:79:
                    11:8a:ea:b5:8c:bb:00:ca:c4:df:e8:cb:0b:20:70:
                    85:d6:7c:fa:95:40:8b:35:9e:8d:66:66:69:95:89:
                    36:e0:1e:ea:93:c2:ba:f3:fd:8a:32:2a:ee:06:a7:
                    d4:0c:a8:b0:2e:64:67:d5:20:48:1f:11:97:c2:85:
                    11:47:9b:18:c6:ab:71:87:a0:8a:73:d3:c3:9a:41:
                    01:59:65:4a:67:d4:21:fe:b9:42:7f:b7:54:57:15:
                    2a:3b:5d:e5:c3:41:2e:de:bb:67:90:3f:2d:56:c3:
                    23:be:11:8b:9d:ce:4f:33:ec:b6:dd:99:39:8e:35:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:72:A3:AE:9C:2C:16:BB:EA:E8:31:FC:11:D2:70:97:C3:2C:B2
            X509v3 Authority Key Identifier:
                keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:10:32:b3:51:66:cf:3b:e1:90:8c:13:c5:53:4a:cd:50:
         ca:ab:89:0a:fa:95:81:c6:c5:c6:bb:7e:21:5f:a4:e4:ef:9f:
         1e:1b:28:73:73:4b:0d:6b:e5:ec:9e:da:2d:e9:1c:d0:15:1f:
         33:74:2b:3c:35:74:cd:86:0c:2b:3e:2d:08:6c:07:10:85:05:
         c1:5b:18:ab:7a:62:4e:a5:40:f8:14:57:87:3f:a7:b9:5c:b1:
         83:14:09:07:b2:a0:07:44:7c:da:f2:07:1e:c6:bb:52:72:64:
         b2:f7:4b:a9:de:44:f2:e7:43:0b:da:76:1b:ee:9c:d3:ab:4c:
         5a:ac:ab:97:95:84:ed:28:54:6f:66:61:05:5a:19:d9:bf:5a:
         43:b2:42:b5:07:8d:27:85:ab:33:f9:06:f6:93:3b:e6:4f:10:
         d1:76:3b:ae:fe:03:08:c9:5d:3d:bc:91:88:8d:d3:91:77:d6:
         16:5a:7d:c2:91:e0:dd:b3:08:1f:7a:29:fe:69:be:19:34:89:
         ae:11:70:b8:aa:b0:d9:a7:f8:37:17:eb:4e:28:89:6d:b5:cf:
         38:c1:98:63:48:80:5f:f5:30:ee:10:86:4d:4f:f6:6e:0d:bb:
         d7:d4:51:f5:10:ce:85:dc:e7:8d:51:b5:f2:5f:f4:62:67:f3:
         80:a3:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----