Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File:                     LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier:          4BLeRpfDL8HuhTjWVT5z+Z+dmuC5VYMPnj1YOVbTV7c=
Subject key identifier:   A8:4C:C3:73:F4:19:4E:0D:4E:B0:E6:36:F3:AB:79:D1:E3:81:3A:7C
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer:       /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial:       01962DF3A7122FAA3F0271E3D7656BC4B5D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number:          0C65
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: VZpDo13Fi2ReyxfbpuytOfINXFwCW5zcR1pMOXKHVEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:12:2f:aa:3f:02:71:e3:d7:65:6b:c4:b5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=a84cc373f4194e0d4eb0e636f3ab79d1e3813a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:2f:07:e0:b0:c6:9c:b9:b9:39:e0:c3:2c:
                    ac:34:24:1e:bf:0f:9f:84:06:52:a6:7e:f1:8f:d3:
                    95:51:2f:cc:ae:cb:4c:68:96:e0:5d:79:3d:63:3d:
                    8d:82:9c:89:b6:d2:a9:c9:11:6e:b7:81:d5:a7:a9:
                    da:6d:d3:fb:c8:a8:da:6d:ed:a0:cf:77:1a:b3:9e:
                    13:3c:18:09:0c:79:52:a4:c8:2c:9a:14:46:e5:44:
                    0c:45:6c:71:13:0f:6c:2f:4e:3f:8f:4b:b3:fb:1d:
                    c1:ba:b7:9d:f6:a8:57:35:f7:92:bb:bc:0b:50:ac:
                    29:ad:48:c7:bc:2a:fc:37:3c:25:98:6f:7d:ee:65:
                    02:8d:8e:33:28:21:32:08:db:8f:8f:a2:cd:db:6e:
                    b5:01:1e:13:77:2a:b7:e7:57:a8:77:11:c2:37:c0:
                    f7:e5:aa:3b:0e:d5:cc:08:b4:13:26:9a:33:8f:6b:
                    55:cd:b7:18:06:2c:fb:01:56:1d:d2:3f:e4:56:cd:
                    be:15:14:0e:68:36:af:c4:66:ad:75:f1:16:ba:29:
                    e0:62:c2:82:82:31:b8:33:90:60:ce:01:8a:17:ac:
                    77:b0:2c:96:8d:05:f5:6f:3d:17:cc:c0:f1:61:b0:
                    ca:71:41:0b:a2:7b:83:84:9a:ea:fa:28:a4:1c:24:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:C3:73:F4:19:4E:0D:4E:B0:E6:36:F3:AB:79:D1:E3:81:3A:7C
            X509v3 Authority Key Identifier:
                keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:57:bb:aa:8b:c3:a0:ef:ba:e6:d1:5f:64:1a:82:80:a6:a8:
         0d:b9:20:8a:20:67:22:ba:68:8d:cc:00:52:c8:71:e3:14:74:
         15:d5:4e:55:e1:5b:71:f9:34:c2:a8:f4:58:1e:bb:8e:52:48:
         1a:e9:60:da:bf:c8:87:c2:d0:1a:f0:d0:98:50:5d:5d:f7:e9:
         78:1b:6f:24:d5:f8:f8:92:fd:00:36:84:a9:b5:8f:c9:84:fb:
         8b:d6:63:27:e7:06:50:5d:3b:8d:96:c7:f1:ec:f1:6e:82:d5:
         8e:19:01:19:fa:94:dc:e7:07:70:a1:a1:8b:f5:e2:27:b3:cb:
         86:54:ed:1f:59:ec:68:a9:45:20:e4:80:2c:80:23:21:3c:8d:
         20:58:e7:4d:c3:ad:a6:79:01:81:ee:53:77:e3:65:4b:af:f5:
         6f:9f:a7:e9:92:03:59:7c:ac:8f:6a:2b:f0:16:04:25:91:6c:
         32:2d:69:b9:4f:da:63:34:49:17:ef:7b:3e:e5:fd:e6:22:17:
         d0:83:23:ca:39:29:23:bd:40:35:a3:52:0c:6e:15:55:7b:a7:
         b3:61:1e:16:12:7b:ab:b3:dc:e1:d3:e0:56:cb:51:ae:d8:f7:
         d0:e5:88:4e:cf:ff:ea:54:31:09:74:7e:c0:00:15:83:7f:8f:
         61:94:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----