Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File:                     LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier:          2epbBOwuZ3s3LBDrc5z5PYAS8aoYPsMlkq/6m2qr0FU=
Subject key identifier:   38:72:51:91:93:04:96:38:1E:8E:4F:19:FA:FC:B9:2D:50:C9:09:AE
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer:       /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial:       01962F7449D83A4415710C7519DF56A334AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
                          2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: fM+mcirQLQGnCq2PmS8AU+25iJjACl7x4fmnujGxJ2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:49:d8:3a:44:15:71:0c:75:19:df:56:a3:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=38725191930496381e8e4f19fafcb92d50c909ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:6b:c8:e6:79:ce:cc:98:07:1e:a4:39:6f:
                    eb:00:52:92:20:22:c8:1d:59:2e:82:08:cd:51:bd:
                    24:cb:b5:4b:ae:66:68:5d:0c:d2:ba:c1:0f:07:29:
                    2f:8b:6c:d0:e6:45:a9:12:00:a5:8c:68:e9:14:5e:
                    8d:21:92:c1:4a:14:91:83:a9:a7:95:3d:44:ff:d2:
                    9d:e2:2e:07:49:b7:0e:f5:3f:df:3d:fc:25:d1:86:
                    2f:d3:8c:47:26:45:15:86:3d:a8:5b:9f:5a:80:c4:
                    d6:37:2c:60:88:04:1b:7e:29:ef:3d:63:65:0f:f9:
                    ad:25:5a:48:64:a2:24:4e:fc:c5:49:3c:9d:b2:29:
                    ef:94:a8:e2:88:c0:d2:1a:bd:ad:95:9c:21:e7:80:
                    68:16:51:09:9e:ef:e2:59:24:6a:c6:c3:43:7f:93:
                    5c:71:bc:a2:dd:7f:25:12:2c:2e:21:20:40:ed:3b:
                    b9:0d:b6:f5:5b:28:73:98:16:d7:6f:d0:db:5c:e5:
                    b7:f7:36:76:25:b3:56:ba:da:7b:bc:4e:28:8b:72:
                    9a:60:7d:08:3d:ed:2a:f0:df:67:7b:ac:99:e4:7e:
                    8d:b8:16:41:88:8e:a5:34:06:84:8b:da:07:8f:6a:
                    f5:d6:ee:0e:ec:f8:5a:38:aa:20:e7:07:84:4c:10:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:51:91:93:04:96:38:1E:8E:4F:19:FA:FC:B9:2D:50:C9:09:AE
            X509v3 Authority Key Identifier:
                keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:ba:d2:4b:53:2a:e8:8e:39:31:97:70:3f:3c:fd:5c:54:
         21:d4:44:dc:96:36:cc:ec:a9:61:8e:26:b3:e7:ae:cd:c2:48:
         aa:20:2f:cf:8e:d7:30:2c:ce:46:7b:71:39:e8:5e:09:6b:08:
         94:dd:3f:b2:47:85:15:c1:0d:ab:18:4e:8f:86:f9:0d:ee:24:
         71:4a:eb:44:63:74:71:67:ec:c2:56:e3:6b:e0:d6:bd:19:13:
         78:4b:5d:ae:ca:b1:b1:ec:f4:cb:0d:5f:5a:56:ec:26:fd:06:
         af:2e:f0:b3:41:2a:d6:40:3b:ea:c9:e1:60:c6:0a:dd:e2:22:
         c7:55:a2:b2:1e:6f:c7:8c:fb:b7:74:14:cb:d4:4b:9c:02:85:
         09:c3:b4:ef:b4:69:77:81:73:7e:8b:3b:7c:a1:ff:13:4c:1a:
         b0:a7:1a:b6:75:c8:8e:26:c7:1e:4c:88:ca:ee:ab:4b:70:14:
         24:c9:60:1c:37:d3:4a:59:a9:30:fd:1c:de:15:d9:a5:55:6d:
         6a:d3:c5:93:55:5a:8e:cf:08:dd:17:45:e7:0b:33:e1:fe:6f:
         10:13:62:e7:64:36:af:4a:58:7b:3a:aa:4d:6e:fd:7a:06:61:
         a4:e5:7a:8e:3b:3e:d9:d7:5c:86:f5:ee:62:b3:a8:8e:f6:72:
         9d:84:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----