Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File:                     Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier:          uXxUqf/qR0bSeaS95r2BHSI40xxkbS8E5/0vCBV4wMo=
Subject key identifier:   72:B5:36:85:CA:48:1F:11:C2:69:4B:A5:E1:40:37:E7:44:C5:5E:18
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer:       /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial:       01962DF413C2B33AF45F8944048D000B661B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: hmpKw3RDekxRCJe/CeKebmtBQZ/BunTtV+sDi5d/yQo=)
                          2: hx1AobN52MdMauAKbwiof1BpngE.roa (hash: 69thDY3N1zb82iIdJWyRKD2mWa/WKlKqpVSoW/+g4+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:c2:b3:3a:f4:5f:89:44:04:8d:00:0b:66:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=72b53685ca481f11c2694ba5e14037e744c55e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:45:87:72:a6:90:ae:f9:5c:0a:ad:ed:1a:
                    25:4e:b0:5c:b2:75:be:70:83:29:35:34:e4:8d:41:
                    0b:dd:0f:bf:1d:1e:75:4e:be:13:ef:42:77:7b:df:
                    97:83:4c:5e:36:57:f6:cf:f9:2e:dc:ee:2d:c4:0e:
                    a2:53:d5:d1:bd:6d:48:4f:b2:8c:fc:eb:27:f4:94:
                    a9:5c:5a:02:d8:27:94:71:bb:86:86:3d:03:68:7b:
                    20:71:24:30:bb:de:b1:cf:2e:69:5a:1c:79:37:0b:
                    29:0b:af:a7:36:55:78:b5:0b:16:a4:95:68:a4:99:
                    92:90:76:56:7c:8e:9d:60:38:3c:60:81:9a:4f:26:
                    c5:70:43:d4:69:4e:22:20:3d:6d:95:6a:6a:9c:4c:
                    f4:2b:25:b5:10:87:39:56:5a:6b:59:3d:e1:f4:1f:
                    49:86:7e:a0:2e:c2:5d:61:08:52:93:5f:6a:9d:ad:
                    04:a6:e3:9b:78:d9:70:4c:e4:b8:0e:6e:22:f8:7b:
                    75:a1:4f:a6:24:02:50:a5:63:95:a9:8c:a0:de:24:
                    38:27:a2:8d:4b:c7:ef:77:b4:04:6d:e9:45:2e:9c:
                    29:c9:90:db:28:c0:f9:bd:6e:35:9c:e3:81:0a:be:
                    fb:f2:52:b5:c1:06:3b:90:8a:72:82:79:35:c6:09:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B5:36:85:CA:48:1F:11:C2:69:4B:A5:E1:40:37:E7:44:C5:5E:18
            X509v3 Authority Key Identifier:
                keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:13:1c:47:b3:db:3c:55:71:f7:d8:d0:60:bb:68:01:54:87:
         c8:94:05:14:72:f5:27:9e:28:26:8b:16:97:d7:11:a7:91:2d:
         7c:e3:3e:67:c3:56:aa:04:b9:46:1f:e4:ad:fb:31:46:59:56:
         c9:a9:08:45:0c:e6:5d:73:b0:06:3f:ec:c7:21:80:42:cb:d8:
         fc:5b:03:6d:35:5e:f4:a7:01:a0:bd:21:60:20:17:23:9f:99:
         95:ac:a3:9b:22:e4:0d:12:c7:37:ee:d9:20:42:35:a5:a5:2b:
         70:87:62:8a:4d:ff:64:b6:98:75:ce:8e:50:c1:ae:cb:9a:54:
         ac:f5:3c:ba:04:bf:7e:49:70:88:c3:1b:0b:48:7c:dd:27:37:
         18:82:32:30:a9:79:61:af:33:4f:41:aa:0d:dd:1a:b8:9e:77:
         10:d5:73:02:07:aa:3e:58:a4:c0:35:5d:75:26:e4:6a:d4:a4:
         de:85:b1:40:86:de:22:13:d3:95:f0:32:8c:7b:cb:32:74:32:
         c8:7f:06:ac:a0:6b:3e:2c:b0:3f:f5:b3:f5:e1:47:e3:20:d8:
         32:1d:d5:c6:77:aa:a7:b2:80:95:69:c1:c0:9a:f1:fc:f5:eb:
         56:eb:18:f2:de:dc:8b:fb:fe:22:0c:4d:69:37:fc:cd:73:62:
         e3:59:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----