Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File:                     _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier:          Q6dzaN4xsKk4rXs49GVdkLy6SvEnbHPxJdbfSo2/APc=
Subject key identifier:   24:C1:73:5B:2E:99:80:8C:EF:2E:64:6F:1D:6D:13:8A:60:D5:1F:8E
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       01962F3D7CFC66BCD4908F6A9CB0B6BA6208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 2Kbuhnz-qjWj_6C7taO8b5i9WUc.roa (hash: xkYUP8LGb2IQtLXiN3kttUneWx7+9bzhnl1hbIWGO78=)
                          2: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=)
                          3: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=)
                          4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: E6G1xJPwHzNPb5woDA1DKMGpQa7mXw6i2TLH6d/icDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:fc:66:bc:d4:90:8f:6a:9c:b0:b6:ba:62:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=24c1735b2e99808cef2e646f1d6d138a60d51f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:06:4c:91:19:46:00:01:9b:22:42:0a:23:
                    91:0c:48:48:69:75:d1:71:87:ea:24:da:87:51:ad:
                    c5:04:20:91:9f:a2:2f:a0:34:d6:9e:54:2e:72:5d:
                    db:b9:6a:06:9e:8a:46:c8:aa:97:96:0a:23:9a:24:
                    9c:c8:db:31:f8:20:bb:7e:92:9c:8b:e9:1d:74:a6:
                    33:3e:9b:7f:d9:8c:83:d0:83:55:22:72:bd:5a:d7:
                    06:89:22:3c:06:58:e6:1f:17:10:66:34:5f:7e:7f:
                    b7:e6:a0:98:b8:ce:99:e4:6e:c6:cc:62:ba:93:11:
                    ac:80:73:6b:85:1c:1a:f9:95:a6:ed:95:10:a5:f8:
                    90:f9:1c:61:da:9a:9e:d5:12:d1:bf:5b:c3:04:37:
                    3f:6a:9a:a4:af:61:da:3a:de:0b:d6:6f:0c:f0:ea:
                    38:e0:7d:5c:74:68:83:ae:7f:ea:eb:ce:cc:cc:3a:
                    de:6c:7f:5f:4f:6c:57:4a:be:0b:f6:02:50:50:c5:
                    fa:29:ce:0b:53:c1:59:7c:9e:bf:23:db:43:e6:21:
                    89:32:8b:16:f2:31:90:0b:f5:03:c2:f0:90:1d:3d:
                    ce:ba:b6:bb:0a:77:a6:79:b7:e4:4a:b5:24:9f:41:
                    d4:c6:68:8f:50:93:54:c6:bc:92:68:1b:ea:f2:ee:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:73:5B:2E:99:80:8C:EF:2E:64:6F:1D:6D:13:8A:60:D5:1F:8E
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:ca:12:ec:ba:94:1e:c2:86:bc:71:18:ef:24:8e:2c:82:
         5f:da:44:a0:b7:ba:fa:e2:18:e6:65:9f:3e:8e:73:1b:2e:ac:
         14:cd:27:9d:c9:e2:12:c0:45:bf:12:8f:3f:7d:14:99:b3:0f:
         bc:7c:19:f1:e0:db:ae:0e:37:de:f5:cf:8b:ad:73:23:9c:a8:
         2c:80:7f:61:c7:9c:8c:c0:dc:08:8a:57:3b:e3:78:0c:5d:79:
         38:f1:c3:de:8e:04:6b:d1:f3:17:c9:80:f2:15:67:0c:e6:30:
         28:5a:13:ac:e0:38:37:ff:21:9b:8e:0f:2c:16:50:67:d2:a1:
         d6:05:fc:91:dd:b7:68:4e:56:ea:7f:6d:a6:a5:3f:db:db:d9:
         2e:c7:dd:f3:12:07:7f:6e:0f:45:e9:13:38:39:40:45:16:8f:
         ec:22:b4:f4:d4:02:1f:70:0a:b2:eb:94:8d:c9:ef:5f:4f:e8:
         93:e7:25:20:84:66:1d:ec:ca:dd:fc:41:03:18:aa:d7:0c:c9:
         ba:bc:f2:8b:4d:b2:f3:9c:34:ff:c3:b5:e4:bd:89:dc:b1:35:
         11:60:3b:39:4b:fb:df:10:ca:f7:60:bf:d9:40:46:d9:2b:78:
         85:9b:a8:a0:c7:a0:6c:4e:5a:29:8c:47:17:e9:d6:ac:45:28:
         4f:fc:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----