Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File:                     LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier:          PqZjUc8b+MsntV4JANtObvvc+EG9ZP5nvyaYG9lU1As=
Subject key identifier:   6A:6C:01:7B:1B:4A:38:E8:C9:C0:8C:17:BD:FB:E9:0B:65:D8:C6:96
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer:       /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial:       01962F74DE9E3BD0A4450AA8E856929D3F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: j/z9LXoUHGE9X5rHUKl2OcFC6ffT3iDV+Za+EB1eELQ=)
                          2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:de:9e:3b:d0:a4:45:0a:a8:e8:56:92:9d:3f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=6a6c017b1b4a38e8c9c08c17bdfbe90b65d8c696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:44:ad:e5:fe:c5:23:2c:4f:cd:62:3c:8f:
                    9e:d5:c1:da:dc:6e:a4:f2:37:82:40:48:05:ac:f6:
                    6f:fe:07:95:64:71:ca:cf:7b:e2:57:3b:60:22:d9:
                    82:ac:32:3d:cc:66:08:55:c8:90:3a:9c:20:7d:0c:
                    63:de:cf:0b:2f:90:f9:49:cc:21:31:82:49:34:bc:
                    29:0c:c0:e1:f6:43:9b:ec:9a:b6:5a:fa:37:d9:ab:
                    f7:fc:4b:4f:41:fd:1b:bf:c1:61:72:76:b7:a4:34:
                    7d:4b:37:6b:26:e2:b5:54:a8:a0:19:bc:a1:63:10:
                    ad:e5:17:9e:80:3b:95:e8:b2:2b:c4:ec:48:85:df:
                    70:de:ec:8c:0c:88:07:69:54:f4:d4:a1:fe:7c:f2:
                    42:6e:c2:f3:8e:5e:fc:df:15:a3:ac:56:b4:f1:9f:
                    41:25:a6:0c:ba:9b:d1:4f:0d:73:e8:04:fe:04:5e:
                    ec:f5:91:f5:8a:fd:31:8d:d3:73:26:b2:98:f8:df:
                    83:5f:fa:38:5a:d9:f9:a7:c0:60:6c:f1:95:a5:7c:
                    84:7b:3a:ec:fe:11:d6:46:12:31:0f:9d:f2:57:a0:
                    48:b3:5b:b6:a3:2e:69:ae:78:dd:64:82:1e:d7:c5:
                    de:4d:0b:9c:ef:8b:b8:83:3b:56:8c:dd:28:37:c8:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:01:7B:1B:4A:38:E8:C9:C0:8C:17:BD:FB:E9:0B:65:D8:C6:96
            X509v3 Authority Key Identifier:
                keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:22:9a:cf:14:17:ae:75:b1:8d:f3:b9:7e:0e:21:4b:26:
         4a:7e:0a:22:b1:38:d8:ca:eb:02:87:12:3d:98:c1:9f:6b:e5:
         7d:4e:ba:fa:85:bd:c3:f5:16:04:8d:33:92:e5:d8:c2:07:06:
         a4:41:a4:08:2a:27:8f:5d:04:41:e7:5f:4a:11:0a:ab:17:df:
         59:11:bf:0f:d8:cf:ca:2f:e6:8e:68:32:40:99:21:45:3f:7f:
         fd:61:c6:f6:c7:b5:4b:46:f1:2e:78:48:21:78:a3:74:85:04:
         09:60:21:54:02:24:f8:85:fd:97:be:8f:e6:c6:d6:70:2f:b9:
         08:c3:e5:6c:21:ea:cb:42:fd:38:d3:43:80:b0:ff:f1:80:27:
         f3:ad:6b:f0:93:e3:bd:e4:3d:49:5b:03:62:a0:e7:34:22:29:
         73:59:35:52:e7:6e:9e:e7:2d:8a:69:bc:9a:ab:5e:c9:68:c8:
         63:4d:31:20:85:d9:86:d4:a3:8d:91:c6:f9:3d:44:d5:65:a1:
         1e:a1:1f:12:3e:c4:50:ab:ad:c6:cb:bd:eb:7e:fe:ed:d4:0c:
         1d:8c:fb:55:98:d9:fb:94:e8:36:f8:1a:6f:ae:1e:0c:c5:10:
         12:f1:c7:fd:15:2c:84:50:85:f7:74:6e:89:e4:22:65:b7:f4:
         c1:25:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----