Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File:                     Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier:          Zbxlv91QthqtYonNRvdii1v9b/r0OGzfFWeNZbiqRAw=
Subject key identifier:   58:5C:62:0C:AA:12:92:2B:01:F2:78:8E:2B:01:91:09:FE:86:1E:73
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer:       /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial:       01962F06443884DDCAC12DFFBB4CA9D7AC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number:          6C
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: y9rZrbwFoiZ3Ze4Ne3EoPsK/CeKApUacONQE1octAwk=)
                          2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:38:84:dd:ca:c1:2d:ff:bb:4c:a9:d7:ac:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=585c620caa12922b01f2788e2b019109fe861e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:cf:24:1d:79:e0:90:81:c6:99:e7:9e:3f:
                    6c:c1:9d:8f:82:67:31:4a:92:86:a5:87:fd:b1:a2:
                    d9:15:0f:6a:46:1d:79:c6:39:94:8c:47:7a:74:b7:
                    14:2f:ca:b2:8f:9b:3d:18:63:70:9c:e0:b9:bc:87:
                    45:8f:9f:51:b6:59:e5:e7:64:dc:c5:ae:e3:be:13:
                    2f:10:1e:22:5b:f7:08:20:66:15:02:0f:82:de:ef:
                    e5:1d:cb:c7:5b:da:7e:41:de:98:3f:14:23:c5:e3:
                    6e:c1:cf:11:03:0e:2e:b4:54:ab:6d:2a:b7:08:81:
                    79:8f:b7:9a:8d:08:a8:2d:05:e1:37:df:f2:21:46:
                    2a:b8:70:e8:59:a0:d4:fa:f3:d9:6f:68:e4:01:68:
                    81:91:56:5b:cc:4f:0d:1d:e5:ee:eb:7a:0c:73:7f:
                    48:a8:ac:dc:2e:b7:2a:46:12:21:2e:2a:7d:ce:64:
                    ce:f5:56:34:f6:63:44:9d:0d:bc:46:dd:d3:a3:ba:
                    dc:04:7a:80:9e:8a:e9:7c:83:af:46:fe:e7:f4:6c:
                    0b:0b:da:94:08:c3:60:5b:a9:d5:ae:2d:7d:1c:f9:
                    12:0e:fc:8b:d5:6a:80:82:8b:35:2f:20:36:73:ff:
                    de:48:37:e3:92:31:45:8f:66:c8:1a:aa:47:1a:af:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:62:0C:AA:12:92:2B:01:F2:78:8E:2B:01:91:09:FE:86:1E:73
            X509v3 Authority Key Identifier:
                keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:04:2e:9b:b9:52:b3:6c:d0:3d:02:ab:14:8d:98:9f:a9:69:
         5e:87:5f:d4:3c:8a:88:70:ea:59:31:03:2b:d9:46:a0:69:c1:
         09:cb:91:80:e2:99:de:54:1e:9b:b5:91:64:66:94:fd:0a:44:
         83:71:de:7b:6f:dc:39:a6:cb:a8:d7:03:16:62:ba:e1:27:c9:
         5d:97:76:b0:db:8c:cd:ab:73:82:c3:4b:fb:6d:3e:f2:c6:b8:
         76:df:09:ed:72:3a:18:ed:3f:46:86:c4:52:a6:83:a4:34:3e:
         c1:40:79:97:c8:56:4e:fd:a0:d8:af:ed:1e:92:56:53:37:63:
         85:f8:78:43:88:47:47:f2:6c:da:89:b7:e8:22:72:f1:22:dd:
         a3:aa:a9:6a:32:b4:68:2e:5d:d1:0d:60:00:01:2a:79:09:ab:
         8e:98:47:33:67:be:78:49:c8:02:e3:65:8f:4c:cb:d1:92:0c:
         55:18:7f:b2:ee:ac:0b:9a:ef:43:87:8e:39:f2:2c:85:d7:23:
         6c:b7:c5:ff:0a:df:b8:f5:0a:30:c9:63:0c:d1:bd:4e:13:8a:
         67:79:42:76:3e:71:77:a6:b0:ba:29:ce:55:20:07:8d:ff:fd:
         af:06:bb:ed:e6:b4:91:31:9f:65:0a:11:b1:6c:46:59:b2:9b:
         02:3a:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----