Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File:                     LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier:          B4no4AakWa4LkaLbvS1eafoiwsgMb1r8n6dCgbel9lc=
Subject key identifier:   77:2C:77:61:4F:FE:6C:FD:5B:3B:2C:4F:83:2D:80:08:8D:26:96:DA
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer:       /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial:       01962E2AC34666C7B7C13813E7FE1651920D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number:          04CF
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: iMwiIDtXe3oEDUb+N+fy/c9dT849fvDOaom8L7hBgh4=)
                          2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c3:46:66:c7:b7:c1:38:13:e7:fe:16:51:92:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=772c77614ffe6cfd5b3b2c4f832d80088d2696da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:93:52:61:e3:03:7c:fb:7f:44:65:7f:6a:
                    0e:fd:36:f8:62:04:a2:91:a9:25:1d:6b:e5:e5:c7:
                    38:4b:6d:b3:8d:76:c2:5f:df:2e:95:16:09:13:da:
                    fc:1a:e9:33:37:2e:3d:42:7d:55:04:44:9a:d4:5e:
                    5a:76:8e:75:56:db:bd:6d:95:f8:8c:34:a5:27:e9:
                    0e:60:1e:12:2a:f8:39:e2:a5:d6:39:3d:56:e3:2e:
                    37:97:d2:4e:53:39:c9:6a:f2:a5:0c:f0:d4:c8:ec:
                    bb:0f:c2:2a:13:f7:af:0b:68:82:77:31:c1:ff:d3:
                    97:55:84:68:d2:03:6c:90:d6:be:a3:07:4f:6e:11:
                    a6:83:f7:23:a4:4b:ee:25:0e:d4:f7:3a:54:13:74:
                    49:84:4a:ac:8e:4d:2e:ca:f1:d6:05:fd:b0:3d:a8:
                    b9:18:b3:a8:89:63:54:9a:f3:49:48:4b:20:58:31:
                    b5:55:e9:aa:cd:30:23:68:7a:ea:7b:84:37:82:bb:
                    02:a0:ed:f1:f7:d5:23:32:b5:84:29:74:34:21:85:
                    42:d3:1f:3d:38:46:be:b8:e9:8a:ec:07:f1:a0:d9:
                    59:e1:ea:12:60:2d:88:60:43:0d:e8:79:ff:50:ce:
                    e9:07:17:43:66:a5:96:3b:87:e6:ed:71:32:51:b9:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:77:61:4F:FE:6C:FD:5B:3B:2C:4F:83:2D:80:08:8D:26:96:DA
            X509v3 Authority Key Identifier:
                keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:1b:e7:ba:15:d7:97:ea:d7:93:9a:d8:08:a0:de:f5:90:
         84:57:61:60:91:2d:b9:12:12:d5:43:bf:d9:69:43:2b:f2:84:
         33:70:82:17:cb:be:fd:cb:53:97:0c:d3:97:ec:50:41:7b:77:
         ac:38:57:51:60:2c:36:30:19:4c:b5:6d:74:d1:4f:f3:98:f4:
         40:c8:bc:e2:85:e9:53:e0:1a:9d:36:70:37:7e:a6:b5:d6:a4:
         6a:12:94:37:4e:21:05:b4:f6:95:2b:0f:5a:77:6f:77:96:3e:
         ab:ea:33:31:a4:c6:0c:c9:67:fc:96:66:ed:e8:32:89:c2:62:
         70:54:e9:a1:38:3c:8e:86:8c:92:77:2e:6f:50:1e:1d:38:28:
         f9:00:81:6d:fe:fe:b1:16:f2:23:15:a8:17:7e:f9:10:8b:a7:
         f7:fc:22:e2:b1:dd:c5:20:e0:01:75:86:19:9d:4b:31:a4:a2:
         ab:17:31:cb:22:ea:86:6a:db:db:d2:a4:59:ab:ad:5e:68:fc:
         9c:11:33:85:aa:6f:06:3e:c7:58:4e:6f:83:f9:24:c9:0e:ca:
         be:ba:f8:c9:a3:fb:f9:04:57:97:d6:b4:25:f3:34:fb:1c:71:
         07:6a:cb:56:cf:23:60:77:f9:57:f1:9a:34:dd:2b:d7:c0:d6:
         e5:19:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----