Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File:                     lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier:          3R3LYCqqBAe0Nl16O4XMn8iXsg/MgIN3WTKyXe90yY4=
Subject key identifier:   5C:2C:D8:94:D8:F1:52:7B:40:E5:33:CD:0D:11:E3:9A:9A:B9:07:EE
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer:       /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial:       01962F06DF0CCE457283DF18A14D44179F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number:          0E0D
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: MEK+I81SWkij17GQaqWAcpEvP4PRFyyeSywirMlSfNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:df:0c:ce:45:72:83:df:18:a1:4d:44:17:9f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=5c2cd894d8f1527b40e533cd0d11e39a9ab907ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:b8:34:af:b3:1b:70:70:6e:3b:df:f1:13:
                    00:93:7a:a2:3a:a5:23:c1:33:26:84:a2:99:b1:20:
                    d7:04:11:87:0c:1e:20:4a:8e:2f:e7:26:c0:15:f1:
                    ea:e6:69:56:8a:d1:43:43:51:8d:f7:8a:49:2f:12:
                    6c:24:5e:ab:b6:c3:94:9c:08:a5:ed:76:b5:40:9c:
                    c9:38:24:89:c0:d2:1c:23:e9:ae:13:3b:5a:3f:79:
                    a5:6b:a1:81:e7:a5:38:aa:dc:93:50:76:16:5a:cf:
                    b1:64:43:92:25:32:ee:76:2d:62:bd:5b:56:24:d1:
                    6b:90:9c:12:8d:13:a4:7f:42:b1:13:da:63:e6:7b:
                    89:c2:16:c1:6f:32:5b:5b:fa:f7:9d:7c:33:f5:2c:
                    41:ae:de:66:9c:40:0a:57:a9:80:b0:4d:ec:1a:08:
                    cc:ec:2c:77:da:9f:6a:f3:3f:e6:1b:7b:d3:83:3f:
                    b5:a6:0f:ec:54:36:79:e6:31:dd:bf:d9:5c:af:48:
                    37:03:98:db:38:be:9d:68:a0:72:81:ee:89:5b:4a:
                    c8:84:cd:26:22:94:8d:4b:d9:68:98:9c:77:7a:76:
                    f2:d3:3f:dc:63:f1:6b:7e:c8:00:c9:c7:d8:35:83:
                    3a:1a:cb:cd:c0:17:65:3e:7f:1e:20:9c:ee:ff:c1:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:D8:94:D8:F1:52:7B:40:E5:33:CD:0D:11:E3:9A:9A:B9:07:EE
            X509v3 Authority Key Identifier:
                keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:7d:9c:39:7a:f7:8d:55:cb:a7:b6:5d:f7:ec:d6:98:d7:
         35:b0:67:69:f5:68:22:32:5e:a1:ad:c1:fa:ab:1f:b3:c2:92:
         a5:f3:49:f3:37:64:f2:c5:95:09:25:5f:13:11:cc:b8:9e:af:
         48:52:27:4c:7c:5c:b8:8b:a0:68:a0:04:ac:3c:c4:da:47:0d:
         26:50:a9:76:15:e7:54:8e:61:b5:e6:43:f2:64:22:54:19:d9:
         7b:ab:95:c6:f5:0c:4d:b7:b8:26:50:06:b6:18:d4:8d:74:77:
         03:8d:c5:26:e5:2e:57:53:c5:d4:2b:68:d1:bb:c8:15:c5:3d:
         bc:71:0c:ea:aa:f9:cc:51:7f:59:b0:97:4e:8a:05:3a:41:25:
         26:33:8f:bb:14:23:f0:f9:eb:37:7b:c6:c1:e9:82:5c:5e:b2:
         5e:28:84:98:3d:7d:d0:57:d0:76:49:13:1b:97:d2:26:8b:a7:
         51:0a:b2:b8:ad:78:a3:14:dd:32:b9:ed:b5:f1:82:ee:cd:3d:
         52:2e:52:9b:9c:c4:18:8c:db:4c:85:d0:b4:a6:52:ba:f5:ca:
         14:f5:3c:3d:ff:2e:01:fc:88:6a:60:b0:e1:ef:c8:85:73:c7:
         be:3c:94:f8:b3:eb:a5:63:91:86:6a:05:0b:8f:83:a0:f3:02:
         94:59:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----