Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File:                     LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier:          r+0w/AF8WcBOudLOOOLa9NGNAlQtoH2RVs9WZDosMZ0=
Subject key identifier:   7D:AD:DB:06:C7:F3:54:7D:DB:99:65:A5:5D:77:3A:1F:37:B8:B9:6E
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer:       /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial:       01962FAB519B11751C637B98E6A1103CC1A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number:          1235
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: sZbe/yKZ4JZaCpenRGidecpi9Q3NXVHh87xVvQdzcrc=)
                          2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:51:9b:11:75:1c:63:7b:98:e6:a1:10:3c:c1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=7daddb06c7f3547ddb9965a55d773a1f37b8b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:bb:4b:29:6e:4f:4e:38:bb:63:69:1d:87:
                    e3:86:25:bc:b7:c4:3a:63:c5:3d:c1:f6:95:c0:59:
                    a7:7c:ff:72:2c:5c:70:f5:be:c9:90:6d:ce:4f:31:
                    39:0e:fc:0b:52:38:39:8b:36:d9:da:88:73:2a:f2:
                    50:e4:20:10:37:fb:66:a7:fc:2f:10:2b:02:af:ab:
                    71:54:f1:06:1f:af:04:36:85:30:22:d8:0a:e0:c2:
                    5a:75:51:fe:d4:17:c6:26:7a:16:de:9d:52:3a:f8:
                    f0:e8:ab:a6:6d:b1:a4:b6:ae:88:b6:ee:42:99:6d:
                    32:d9:2c:79:43:cd:ad:a3:4d:86:1a:67:e6:b1:da:
                    e4:00:70:1d:dd:89:fa:9b:57:6f:5d:c1:b5:fa:df:
                    be:35:73:ff:55:4b:07:3d:8e:2e:26:64:4b:05:eb:
                    9c:2b:24:d7:18:2a:d8:ba:cb:38:a6:2d:83:c6:67:
                    e3:d3:25:46:38:b1:56:f2:cb:2d:25:d4:83:ca:3c:
                    a7:03:dd:f3:ea:12:72:f0:97:d7:e7:d5:af:ea:df:
                    4d:55:3b:71:1c:77:69:91:74:27:01:5b:ff:38:cb:
                    bf:87:df:74:85:aa:94:05:54:10:65:37:a1:6c:f8:
                    1b:fe:b9:2d:8d:a3:2d:0a:b8:b9:59:34:11:70:6e:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:DB:06:C7:F3:54:7D:DB:99:65:A5:5D:77:3A:1F:37:B8:B9:6E
            X509v3 Authority Key Identifier:
                keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3e:f7:10:c4:1c:10:2d:90:d5:76:b2:53:46:47:51:f9:0b:
         4c:e9:ab:eb:0b:db:bc:03:a5:87:aa:1e:fb:78:c7:ee:e3:98:
         db:54:0b:6d:35:6e:0b:e0:dc:aa:4f:99:4b:4f:fe:93:d3:8d:
         03:3c:72:28:26:59:b9:eb:87:c4:a8:60:34:fd:d1:fe:46:e9:
         1f:e3:5a:21:bc:f6:a6:3b:4a:68:95:82:32:37:b7:b5:2f:da:
         be:61:5e:af:96:86:90:1e:d2:e1:78:f0:37:52:83:12:81:e1:
         e7:d8:f5:28:69:73:93:71:83:be:79:c2:f8:89:bf:fe:aa:e2:
         ad:77:be:8f:9a:ee:0a:4c:26:40:4a:f7:0b:ad:76:96:7f:24:
         0e:12:79:a8:97:09:5f:08:c4:10:4f:24:bb:71:d9:29:33:a7:
         02:b4:19:2c:20:4f:23:25:f8:93:a2:e5:5a:a0:f3:e9:e9:91:
         86:f2:30:7b:c8:2d:c7:71:e7:1f:7f:92:ab:92:ce:01:47:c1:
         c8:04:e0:98:7a:97:be:79:2a:33:76:98:a4:11:a4:f1:e9:11:
         4d:38:28:3a:73:46:28:81:03:0f:6e:48:12:f3:c6:65:4c:ba:
         16:f1:5d:c4:c4:6a:91:4f:79:55:ed:56:b8:61:bd:87:e7:91:
         f8:0f:9a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----