Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File:                     lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier:          qCS+mjhhnaFek7G+FKEiiOOXN2Y7nFqv1kmuIsewpJo=
Subject key identifier:   76:E1:1A:BD:D3:90:72:89:F9:17:C0:84:59:BC:D2:FB:87:D3:4E:9E
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer:       /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial:       01962E2B3D293FA0187E6C9468EE8D1F50E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (hash: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=)
                          2: Z0bxD_dypTvELJHwQ8sfKKr3Yl0.roa (hash: OilYGhipbpMsApciEZvD2e2HegS2pxvaEYjH93aVvgg=)
                          3: jmbXitTxYDhXxX8Sm7GQvdd6SyE.roa (hash: zVpGoN0B3V4SBK16rXtn4P+ZIoIETx7c6+rwVBVyUtc=)
                          4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: PopA5zeLMqad1q6HiYg6oultbFamkumFFJ5dWf9tq5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:29:3f:a0:18:7e:6c:94:68:ee:8d:1f:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=76e11abdd3907289f917c08459bcd2fb87d34e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:19:52:b1:51:f1:40:bc:42:1c:55:1b:3c:
                    1e:29:f7:21:92:98:1f:2b:97:59:62:64:f5:1d:17:
                    fa:75:a0:26:5b:c5:64:69:35:5e:7b:ee:e3:da:91:
                    e8:97:c5:24:1c:56:ce:d6:bf:26:cd:05:5e:fd:26:
                    d9:ae:ac:00:90:74:d5:61:59:d6:69:8d:f1:43:e0:
                    0a:e5:ce:96:2c:8a:a8:ae:30:15:38:29:8a:27:c8:
                    8b:b2:e6:b5:16:df:98:9d:63:c7:82:b7:29:44:17:
                    d9:17:86:82:87:4f:03:96:94:35:9a:f1:0e:41:a6:
                    b6:57:9a:e9:42:78:1b:0c:58:ff:a5:05:0b:84:b3:
                    11:3a:5c:72:42:ae:10:f4:ba:7b:da:1b:0f:df:94:
                    d2:01:f0:e0:55:9c:37:ac:af:96:3e:83:9a:dc:03:
                    be:3d:9a:af:71:d1:8f:60:6b:60:99:a8:b9:1b:d0:
                    d3:e8:29:c8:b2:8b:8c:7c:f9:d8:54:00:d1:a5:50:
                    a9:52:ae:ec:a5:43:62:21:58:60:fc:3b:0f:d1:23:
                    bd:3b:2f:a2:75:dc:5d:0e:86:ab:fc:f9:e1:1d:d7:
                    79:29:32:b3:c5:2f:8c:5d:73:0e:5c:5a:cb:1a:39:
                    11:c2:31:4f:09:82:9d:d9:ac:c8:4f:52:4c:7d:3e:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E1:1A:BD:D3:90:72:89:F9:17:C0:84:59:BC:D2:FB:87:D3:4E:9E
            X509v3 Authority Key Identifier:
                keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4b:1b:1d:90:6e:5d:5b:84:bd:dd:16:eb:be:09:1a:95:99:
         72:37:ef:92:bf:1d:2a:21:8e:75:a2:16:59:76:42:b2:50:62:
         69:5d:1a:5d:dd:88:28:72:c0:ce:ca:9a:8a:7b:a1:75:59:db:
         58:f7:f3:06:64:c9:53:e1:a0:44:5d:51:cb:81:71:7d:dc:2d:
         57:cb:f0:5a:d3:8d:00:b4:e2:17:0a:59:56:0d:9f:26:2e:f5:
         5e:cd:f1:ce:aa:1d:38:37:28:2f:a5:8c:97:6f:89:f9:20:37:
         1e:9e:b7:c8:e1:b8:97:14:a2:46:01:e3:50:d3:ba:b4:91:e9:
         30:4c:33:1a:db:4d:40:5a:ed:4a:70:25:a6:2e:fc:2c:af:45:
         97:fb:4f:c2:43:f8:97:74:4a:03:ef:bd:fc:30:b1:50:6a:70:
         c3:45:4e:6a:fd:b1:d2:47:6c:45:bc:5f:7c:83:4c:fd:58:83:
         d3:d0:ee:d2:29:65:80:ff:54:29:ce:d0:c0:e1:00:e7:4e:02:
         be:a3:28:59:a1:65:48:ab:37:5f:f3:1e:bf:16:91:35:8d:27:
         9c:d8:36:2a:de:20:4f:91:11:38:33:b0:33:84:d0:a1:e1:bd:
         61:8b:5c:64:01:9c:34:02:f0:f5:32:00:bd:9c:4e:0c:78:cd:
         5a:5d:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----