Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File:                     LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier:          IgMrlPSHjrRYBERA8Pi8aMDxCvtddzO0qlehY7MFvzw=
Subject key identifier:   ED:F1:7C:90:8E:F2:D4:25:13:23:B0:1F:26:BE:41:5F:BB:CC:14:5F
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer:       /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial:       01962ECF53EA58711BC919B00151D15FA31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: f8k0uWcv7acDhPyIgJ05kqSNw6UO+k8CNsKzPka4auU=)
                          2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:53:ea:58:71:1b:c9:19:b0:01:51:d1:5f:a3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=edf17c908ef2d4251323b01f26be415fbbcc145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:2a:c0:7e:21:55:c5:da:dc:1b:d2:6f:8d:
                    ca:a0:ea:95:68:22:7c:6f:6c:ee:54:8a:01:da:bf:
                    b6:1d:f2:b3:26:ea:c1:ac:a5:65:80:dd:d9:0f:72:
                    32:0c:f3:96:a6:54:e8:4a:bd:5d:4f:ca:58:5f:2b:
                    62:96:e4:22:3d:c6:3e:3a:7c:d6:7c:7e:76:85:22:
                    9c:6a:7d:14:26:85:cb:fd:73:24:0f:fb:5d:7d:a2:
                    70:c4:9c:f1:e6:f7:66:a7:b4:3a:30:0b:c8:02:76:
                    70:a3:45:2e:13:05:d3:7e:d9:3c:90:d4:34:ce:cd:
                    5c:9c:28:cf:ab:38:66:42:4e:8b:24:0c:97:c4:7e:
                    41:39:f9:81:66:73:97:53:67:a1:b4:9e:3c:2d:6e:
                    15:6c:69:27:a6:43:00:a3:25:08:fb:dc:d3:2d:2a:
                    dd:0e:f2:21:21:da:7b:9a:61:ad:da:9c:d0:9c:bc:
                    17:13:17:a5:4a:83:5e:12:f2:ea:b6:5d:6e:03:b7:
                    28:83:36:9c:e5:a9:01:1f:89:82:7e:b3:15:47:8c:
                    39:13:14:c3:4e:6d:85:0c:5f:e2:17:9b:9f:5f:ee:
                    f2:24:8a:71:80:20:99:48:b6:7b:48:46:04:b4:b6:
                    0d:e8:33:02:4a:d8:da:34:ae:55:30:48:df:11:77:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:7C:90:8E:F2:D4:25:13:23:B0:1F:26:BE:41:5F:BB:CC:14:5F
            X509v3 Authority Key Identifier:
                keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:b5:a7:b7:be:a8:83:4f:04:81:06:fe:53:d8:f4:64:38:
         ce:0f:fc:6f:3e:fb:66:d0:6e:3e:78:4d:83:f0:bc:5c:c4:99:
         0e:68:27:84:a8:4b:d6:7e:41:05:aa:10:bf:92:e0:00:9d:0b:
         22:94:03:43:b0:49:92:8d:b7:d3:b8:58:90:55:c6:b5:f7:47:
         bf:48:0b:60:6f:2a:98:80:5c:c4:e3:9c:6c:4c:f2:1c:dc:d1:
         9b:4b:cc:1c:58:ae:98:4d:39:3c:04:f7:23:27:cc:1e:5a:d4:
         73:24:83:5b:a9:92:d3:2a:04:34:3c:76:8a:23:66:18:b9:3b:
         0f:5f:6d:77:1a:5c:30:cc:b3:ba:83:4f:97:a2:0f:03:4c:24:
         57:9f:64:66:df:f3:d9:54:23:2a:13:17:24:51:16:22:b1:fd:
         60:8c:05:af:e6:2d:64:57:4f:a7:40:05:6f:ac:96:21:d3:72:
         0d:c7:22:07:9c:b9:e8:70:d3:8c:24:35:4a:86:59:57:77:57:
         62:18:a6:14:a6:b3:cb:82:62:b1:b5:18:0a:43:33:52:3b:9c:
         cd:06:5f:ba:39:2c:81:17:23:7c:11:21:9e:e8:62:e3:7a:6a:
         ff:50:5e:0d:49:cb:b4:46:43:66:56:14:79:42:18:43:9a:7e:
         6a:19:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----