Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File:                     Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier:          SY/ygMKhIBocPfZ9FcAuhAIlUiFndqzXFXoZqKoe0iw=
Subject key identifier:   57:05:B7:13:27:ED:55:21:7B:DD:D8:0A:4E:02:DB:07:35:36:1E:41
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer:       /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial:       01962E2AE701693526379CA5C735DF14AA54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
                          2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: iNazo/Ra2yX2Wax0u3psgNo54HtQtpLveumvPNugA0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e7:01:69:35:26:37:9c:a5:c7:35:df:14:aa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=5705b71327ed55217bddd80a4e02db0735361e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:68:52:0a:bd:b7:67:96:ff:30:b5:27:08:
                    d2:44:6f:44:c7:0a:24:cd:9e:3b:f0:0c:15:05:71:
                    a6:ea:8e:6d:f1:77:9e:43:76:48:f0:ae:7d:13:7e:
                    c2:dd:42:4d:be:33:9e:75:86:b1:71:d2:59:56:50:
                    ed:d0:ef:5e:79:28:8f:0b:bf:7a:eb:3e:28:d4:33:
                    8b:1c:9c:95:da:55:04:43:f0:50:0d:9c:e4:ed:d1:
                    53:43:fe:90:4e:53:cb:7a:9b:d2:6a:e7:88:34:32:
                    7b:5c:84:2d:62:93:0a:ec:d4:aa:f5:cf:72:5e:cc:
                    1e:6b:77:d8:f6:81:c2:94:bf:76:d0:cb:62:a2:1e:
                    cf:77:1c:50:b3:58:49:a5:27:b9:d4:ec:d2:7e:5d:
                    71:14:78:b9:7c:f1:3c:b5:32:58:08:42:24:0e:ae:
                    d0:eb:82:cc:e7:9a:4c:e3:65:13:9a:bd:dd:32:1b:
                    88:8d:36:e0:b6:af:e5:3d:00:cc:48:72:01:09:2f:
                    89:9f:fd:6a:fd:6b:e4:20:3b:af:29:b0:87:b9:3b:
                    69:3e:75:41:71:c2:91:33:f2:01:a7:c8:4c:80:83:
                    e5:51:59:31:c7:02:20:68:ec:3f:06:da:63:0a:1b:
                    3c:7c:e5:c2:fb:af:e0:1a:44:8a:f0:5c:9c:c4:16:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:B7:13:27:ED:55:21:7B:DD:D8:0A:4E:02:DB:07:35:36:1E:41
            X509v3 Authority Key Identifier:
                keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:9c:32:2e:f6:6c:84:16:f3:9f:c8:cc:88:de:d1:e0:76:ea:
         07:20:10:50:26:3b:af:62:bd:1c:62:db:16:5c:f5:97:71:61:
         b0:0b:39:d0:fd:cc:c0:df:fd:97:09:19:48:85:60:54:85:09:
         0d:ad:52:28:d7:3d:2a:59:d8:87:36:09:ae:56:b3:fa:7e:b8:
         f6:e0:69:29:72:52:a3:b6:21:da:47:28:67:e2:06:06:49:69:
         9b:19:56:b6:47:da:78:32:38:44:ac:e0:ed:95:4f:54:17:40:
         49:0c:c3:3f:7d:8b:bd:44:96:0b:bd:23:79:df:67:ec:c3:51:
         67:91:3d:36:b0:40:61:7e:4f:27:05:4b:cf:f0:b4:53:4a:e3:
         81:cf:d2:a3:68:7c:d1:4b:23:12:d9:d9:97:bd:c5:82:59:cf:
         07:51:6d:e4:55:a7:5a:d6:70:54:12:2d:75:c4:62:c8:e5:00:
         b8:fd:6c:95:9f:18:93:0f:d6:c0:2a:bd:ca:e4:55:cf:45:73:
         d8:16:2e:20:47:24:d1:2b:92:de:56:8a:d0:8d:5e:46:16:bf:
         bc:e0:bf:78:39:fc:e6:5b:4b:c7:cb:c7:34:ef:96:22:9a:ea:
         5c:d9:d6:dd:15:88:bd:8d:2d:a4:56:14:eb:c9:b5:c2:15:f6:
         eb:3c:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----