Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          5VEdooBzKwwJjNcf0q9BJEsFN6soQENbI4BQzBtSOGg=
Subject key identifier:   C3:32:38:6E:6B:75:A1:4F:B4:1A:E0:EA:2F:5C:5A:F8:E4:6E:C2:64
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       01962E61E34E41A7C3C69753F865FFFF4C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          1188
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: 3It/7CSCxT9zwfAVpNxSCx0bC6dYEFT045yYTrb6CUM=)
                          2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e3:4e:41:a7:c3:c6:97:53:f8:65:ff:ff:4c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=c332386e6b75a14fb41ae0ea2f5c5af8e46ec264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:fc:44:04:ca:66:15:87:89:c3:a5:e5:35:
                    64:d2:db:f4:47:4e:90:6e:dd:23:20:af:1f:a4:0f:
                    63:82:92:e9:a8:a3:31:4a:2e:9b:2a:1a:dd:68:f6:
                    c7:b3:6e:c8:bf:86:a2:d1:e1:ee:c0:74:9c:16:83:
                    71:ce:2a:c9:b9:43:98:7a:58:79:ed:44:15:42:48:
                    f8:dc:19:a4:58:4e:3d:51:e9:e7:a4:60:1b:d6:e6:
                    5c:fc:68:f0:27:64:9b:17:79:c5:03:b5:71:7d:76:
                    90:a0:43:f5:28:ec:59:d6:e8:46:7f:14:31:35:b8:
                    02:31:c8:e8:22:8d:b1:9c:4e:bd:f2:a3:2e:c3:c9:
                    65:b2:a3:76:25:93:89:48:91:ca:6e:21:38:54:f0:
                    3c:97:39:80:b4:e0:d3:36:76:7f:09:0e:04:0c:d2:
                    c6:70:81:02:26:e1:e6:45:f9:aa:2a:89:a2:31:32:
                    08:40:a3:10:aa:88:bf:68:25:7c:7f:76:d0:de:36:
                    87:ec:54:2d:86:a3:29:ae:52:a4:8a:05:c0:a8:85:
                    8f:9f:9b:ef:8d:ad:59:22:c5:23:3b:0d:46:49:35:
                    5a:53:5a:63:69:1e:21:19:0f:01:cb:10:3a:cb:ab:
                    80:49:89:f4:42:2f:b4:ce:90:b3:0e:31:cd:6b:9c:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:32:38:6E:6B:75:A1:4F:B4:1A:E0:EA:2F:5C:5A:F8:E4:6E:C2:64
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:06:44:e9:a1:0c:49:d9:d8:70:fe:3d:81:c1:0c:f4:42:
         27:a6:50:eb:8a:49:11:1b:8f:7e:a9:c1:97:01:a1:87:cd:14:
         98:9d:31:cb:0a:a9:a2:5a:27:84:2e:b4:df:ef:d3:bd:71:72:
         6e:fb:0a:d4:0d:2c:00:f4:62:cc:75:f5:34:f5:74:c9:42:be:
         f6:11:e8:af:2e:cb:56:0d:80:25:1c:9e:db:48:99:38:3c:b4:
         cc:98:b4:91:6a:6a:5b:c3:c8:b3:2f:7f:ff:f6:ec:80:f4:5a:
         84:82:3e:bc:ac:b4:99:27:f3:e1:3e:b8:e3:ae:2b:0f:5e:bf:
         c1:c5:ed:11:fa:c1:85:8c:8c:f4:a9:29:d1:65:a3:50:3c:3b:
         3c:71:7d:cc:4b:d4:11:ed:e4:b1:8c:ab:fd:35:dc:a5:60:ec:
         64:b8:20:ed:82:53:6a:f2:7e:9b:5d:37:a6:1a:67:b3:b5:69:
         49:a7:09:c3:1e:87:89:4f:be:8e:98:e6:d7:ed:45:7a:3b:52:
         a6:02:a5:d8:ce:4d:d6:4c:20:e3:39:bd:80:5d:12:7d:1e:d8:
         59:71:06:1e:33:3a:fb:1c:1e:13:65:79:9d:dd:98:c7:40:3a:
         23:74:bc:a6:56:5d:85:7a:f5:73:d8:de:c7:e0:c1:91:5b:b9:
         2d:60:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----