Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File:                     LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier:          xcM9PDCwI0XY7BKadBS5nfhPhugUyYuQW0loHIVRdBk=
Subject key identifier:   DC:BD:B7:5D:02:73:08:D2:06:9B:C3:51:48:43:92:A6:04:0F:7E:14
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer:       /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial:       01962E2AF8E6F1342F2D488502A471BB1553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
                          2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: +kl4Wrc3we09VKefSXqlx9bzHn9pWpUZifqCHh/gvF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:e6:f1:34:2f:2d:48:85:02:a4:71:bb:15:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=dcbdb75d027308d2069bc351484392a6040f7e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:7b:0b:7a:f1:6b:5d:1a:fe:72:9f:a1:a9:
                    b3:f1:25:a9:6a:4d:d6:a5:ab:e8:60:81:34:8e:46:
                    ad:e4:ea:71:3d:37:81:b4:3b:6e:a0:cf:f2:86:13:
                    c3:ff:40:0c:42:33:e8:d8:9b:9a:8e:e2:cc:3a:66:
                    91:97:9c:4e:e9:65:8e:05:29:4e:e6:2c:68:24:7e:
                    2c:30:33:15:b4:05:a5:bd:5a:eb:e6:39:6b:fa:89:
                    91:40:f1:6a:aa:dc:8f:c8:bf:42:c9:3a:08:3b:27:
                    97:4f:3b:ee:b0:16:10:3d:9c:49:57:de:78:16:52:
                    2b:37:9e:1e:bb:19:2c:d7:9f:5a:d5:24:af:9f:7f:
                    78:02:1f:b5:be:fb:79:65:72:3a:ea:3e:01:20:dc:
                    81:17:24:d3:8a:63:1f:c4:95:f4:4c:b9:1c:48:37:
                    c1:6d:4d:08:0b:97:8e:f6:47:0d:e1:d9:4e:a7:50:
                    cf:7e:0f:23:4c:18:89:0a:3b:30:1e:ed:d1:3b:84:
                    de:9c:c8:5d:8a:98:85:b3:95:c2:fd:8c:8e:13:9c:
                    7c:8e:4a:6b:c3:d2:8e:0a:5c:2a:3a:b0:2a:27:da:
                    cf:04:16:55:3b:97:f6:ea:d2:90:fe:35:4b:fc:c7:
                    f4:c4:e3:4a:a7:b3:d4:a2:b2:ff:f3:40:c8:1a:95:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:B7:5D:02:73:08:D2:06:9B:C3:51:48:43:92:A6:04:0F:7E:14
            X509v3 Authority Key Identifier:
                keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:94:b0:5c:95:e8:ba:89:be:39:18:47:2f:bb:4b:d3:80:
         17:dc:4f:97:75:0c:a5:55:8b:5a:d5:c2:ae:05:63:df:63:85:
         69:4c:42:b7:b4:60:33:17:4c:02:94:5b:be:97:ca:68:1d:46:
         26:41:0d:c4:0a:17:3a:fb:6c:14:34:f8:87:3f:f1:d1:b6:65:
         7c:1f:08:43:45:11:a1:82:2f:57:55:d3:50:62:07:cd:31:b9:
         ac:89:f2:0a:29:a0:8c:c8:1c:c2:d4:86:5b:91:11:1d:28:ec:
         ca:64:dc:b7:4c:79:0d:6a:bf:87:7d:e0:b7:1d:a2:0e:77:ed:
         5c:74:c5:aa:54:40:4c:c1:01:ea:f2:bc:b5:73:85:4f:0c:75:
         11:6a:0d:83:81:24:8d:70:42:28:dc:ae:e4:5c:44:f0:51:0e:
         db:f2:5c:4f:1f:30:05:5d:b8:13:66:26:f0:e4:fd:d0:49:f3:
         f4:aa:cc:63:56:b7:f4:69:06:52:52:48:95:4a:21:4c:43:34:
         e2:6b:24:55:c0:31:11:8f:cc:44:70:11:2f:a4:6d:77:3b:c9:
         18:bb:0d:b2:7c:b8:b1:5a:e0:e0:20:5e:86:a3:b1:79:81:c4:
         45:e8:bb:7a:c1:db:2d:d0:f6:8c:4d:77:0e:2f:10:10:c1:06:
         af:79:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----