Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File:                     LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier:          NaM8kGzcG+wczLQbBLq84ZQ/bRvN1p5yRFtyWz3qLEg=
Subject key identifier:   57:CF:30:16:9A:5E:9C:33:C0:88:96:54:36:02:2D:81:AE:2A:C5:12
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer:       /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial:       01962FAB3ACB3E435445F7F30B9B018300B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number:          0AD8
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: zlE3xFqU/sKnQJyyUYjeexHHpjRI97i5Uq/BPViiVtw=)
                          2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3a:cb:3e:43:54:45:f7:f3:0b:9b:01:83:00:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=57cf30169a5e9c33c088965436022d81ae2ac512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:73:4c:82:0c:bc:f4:8d:14:9b:d4:5d:49:
                    6a:ea:16:9f:99:e6:d5:be:a1:4b:8d:bd:de:3f:c3:
                    e4:18:54:2d:a8:30:5f:39:b4:82:bf:ab:de:76:9e:
                    74:fe:8e:31:00:e3:83:06:6c:8d:cb:9a:eb:43:d5:
                    dc:af:24:25:56:9d:6b:62:99:ba:51:b0:61:8a:41:
                    64:5a:0b:42:be:0c:08:70:42:c4:ce:2a:3a:e8:3d:
                    91:d9:53:00:f2:b0:c0:a6:ae:95:e5:7f:1d:9d:51:
                    d3:f1:ab:33:6c:e5:35:53:e8:af:cb:a4:dc:1c:50:
                    a8:72:c5:76:06:59:3d:ec:74:5e:46:68:19:ad:9e:
                    03:8a:a8:d6:4d:e0:ff:fc:0e:41:6b:26:3b:f2:a3:
                    77:85:57:62:52:d3:3e:47:33:4b:b7:7e:64:45:76:
                    1a:08:53:40:89:73:90:e8:80:76:e7:d9:1e:a0:d0:
                    ab:14:75:f6:e7:45:5c:72:5a:81:c3:45:e0:a2:04:
                    bf:c2:4e:73:da:7f:3b:00:e0:4c:5d:87:de:19:c8:
                    06:0c:03:db:b9:62:da:43:ef:a0:74:41:a8:fd:64:
                    e5:c5:2e:c8:0f:af:d0:9a:58:ef:e5:e5:8d:48:fc:
                    c5:6d:00:49:c4:a4:16:ba:9a:a7:1d:1d:57:61:57:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CF:30:16:9A:5E:9C:33:C0:88:96:54:36:02:2D:81:AE:2A:C5:12
            X509v3 Authority Key Identifier:
                keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:d6:90:73:1d:70:73:e4:d1:b1:7c:fe:04:94:28:b4:1a:
         eb:74:27:ad:91:f1:4c:3b:57:6b:73:6d:d7:b1:1c:7c:fa:12:
         a0:80:91:22:43:77:06:12:85:8a:0e:6b:96:c2:c6:c3:c8:ab:
         72:fc:2a:2e:52:1d:2e:3d:42:ea:cf:5e:3f:8f:6e:fb:ed:a1:
         81:28:be:90:53:4e:11:af:5a:94:67:b4:b9:45:c1:7c:e7:03:
         30:bc:06:1c:e4:e6:91:db:52:3b:79:03:67:65:1d:c1:f5:f8:
         1b:34:e8:a5:c7:e4:63:83:52:8a:b2:4d:b8:e7:84:c3:46:36:
         04:16:fd:8e:bf:e2:d2:6b:bb:51:64:8b:2c:a6:eb:f2:3b:db:
         eb:e4:a4:dd:03:a1:74:b5:48:75:c9:6c:8a:be:7b:e2:b9:dd:
         b3:c2:2c:00:c9:37:08:c8:a6:3a:d5:eb:ce:56:11:26:c6:29:
         40:82:15:ca:eb:34:ed:df:7a:70:3c:f1:3f:4d:23:7f:e7:0e:
         1b:39:88:0a:62:1e:39:4e:61:25:3b:4f:7b:22:52:52:08:02:
         23:3a:bb:2d:86:68:0f:c9:84:4b:5f:03:b9:54:0a:d7:c0:8a:
         d7:b6:ec:85:e0:bf:b8:9b:ae:dd:85:1b:17:22:af:52:e0:0c:
         3c:e3:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----