Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File:                     LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier:          1qahbVAnY5q0Jwi1W1d7NmTAgqWdWeX9pB3fDsjvPt0=
Subject key identifier:   CF:71:CA:6F:4C:72:77:9B:D5:95:8E:97:52:BF:5A:4D:69:65:80:67
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer:       /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial:       01962F3D94529A126FB16B88113942F5930A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
                          2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
                          3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: KclovUIDfne26/pg1Tf9FciVyUg4Mv7rYAF8iqUEweg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:52:9a:12:6f:b1:6b:88:11:39:42:f5:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=cf71ca6f4c72779bd5958e9752bf5a4d69658067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:a5:05:d4:77:da:4d:19:b6:04:03:1a:28:
                    a2:75:f2:88:b4:cb:94:f2:99:79:76:0d:63:c5:fb:
                    e2:4f:c8:1e:87:f1:19:c2:dc:4d:40:cd:e8:8a:07:
                    09:6e:0e:ba:59:c5:62:99:c0:0d:b6:48:c5:66:97:
                    15:c1:c2:f1:43:59:75:1a:93:42:c3:64:93:18:49:
                    2f:5d:f1:a4:27:59:31:a7:06:f4:0a:71:ad:c4:2f:
                    19:5a:80:ca:09:a3:54:35:dc:f1:c5:9c:b3:db:2d:
                    d1:dc:8e:c4:29:56:cb:cf:03:24:d8:70:8a:15:89:
                    75:f1:cc:a0:8d:d6:3b:8a:47:11:48:01:85:5f:69:
                    7e:38:d5:59:87:46:62:bc:3f:c1:8e:52:b0:99:f6:
                    e0:58:65:57:39:b6:a8:64:a4:44:1f:47:23:71:98:
                    6e:dc:6f:c0:d4:c9:91:61:ae:b0:7b:ca:a6:7f:fd:
                    a6:c6:36:ee:32:0d:45:07:84:18:bb:3d:77:b7:35:
                    2d:94:5d:b7:6d:a6:58:5d:b4:d1:5a:1c:ad:a3:7e:
                    dc:1a:c7:d0:10:b1:b3:fb:43:94:67:5d:10:58:92:
                    6a:58:5a:c0:f1:6a:e8:52:0c:d9:1f:5b:07:da:0f:
                    95:68:3d:c3:32:c3:07:42:24:24:7f:0b:ac:fd:80:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:CA:6F:4C:72:77:9B:D5:95:8E:97:52:BF:5A:4D:69:65:80:67
            X509v3 Authority Key Identifier:
                keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:14:b6:ff:8e:fa:0c:57:2f:5e:49:71:30:6a:18:6c:cd:
         84:f2:0b:ce:67:de:a2:5b:f0:11:c7:b6:6a:f5:11:16:9e:73:
         38:a8:ec:a7:0c:53:f5:01:03:d8:19:3c:bd:55:fa:94:39:95:
         e5:48:95:7c:5f:a3:29:76:a1:da:8b:ca:f7:ea:27:67:a8:5a:
         c0:da:29:e8:fd:a6:a9:16:86:12:eb:90:d1:d7:8f:67:3e:fc:
         53:bc:ef:0a:6c:93:ec:34:04:b7:33:dc:57:50:2c:cd:09:7d:
         4b:a0:6d:c0:a8:ab:1e:7d:a9:1e:10:a8:7b:00:a8:e2:dd:16:
         69:aa:85:ba:d6:f7:5e:e1:05:c4:3b:d9:e2:35:9e:5d:97:72:
         1c:8c:3f:fc:c3:ec:a6:51:e6:34:6c:35:83:34:5d:78:ab:c3:
         45:b9:df:5b:e4:44:39:8c:94:78:58:41:f7:08:fa:77:ed:39:
         32:7d:4d:f9:64:ce:eb:54:c8:c8:49:29:e6:73:5b:d8:6c:8c:
         73:44:c9:dd:1f:e9:be:89:7e:35:f3:b9:32:83:4e:34:fb:01:
         e0:af:6b:82:90:de:25:13:d3:61:89:2d:89:5f:fd:b2:83:cd:
         7b:f2:e1:4a:dd:a3:24:b4:e4:76:3c:7e:da:7b:c8:9d:9d:3a:
         1f:0b:2d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZRSmhJvsWuIETlC9ZMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw
ZWU0MDcwHhcNMjUwNDEzMTMwMTI2WhcNMjUwNDE0MTMwMTI2WjAzMTEwLwYDVQQD
EyhjZjcxY2E2ZjRjNzI3NzliZDU5NThlOTc1MmJmNWE0ZDY5NjU4MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfylBdR32k0ZtgQDGiiidfKItMuU
8pl5dg1jxfviT8geh/EZwtxNQM3oigcJbg66WcVimcANtkjFZpcVwcLxQ1l1GpNC
w2STGEkvXfGkJ1kxpwb0CnGtxC8ZWoDKCaNUNdzxxZyz2y3R3I7EKVbLzwMk2HCK
FYl18cygjdY7ikcRSAGFX2l+ONVZh0ZivD/BjlKwmfbgWGVXObaoZKREH0cjcZhu
3G/A1MmRYa6we8qmf/2mxjbuMg1FB4QYuz13tzUtlF23baZYXbTRWhyto37cGsfQ
ELGz+0OUZ10QWJJqWFrA8WroUgzZH1sH2g+VaD3DMsMHQiQkfwus/YCKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9xym9Mcneb1ZWOl1K/Wk1pZYBnMB8GA1UdIwQY
MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt
ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh
LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkL0Utv+O
+gxXL15JcTBqGGzNhPILzmfeolvwEce2avURFp5zOKjspwxT9QED2Bk8vVX6lDmV
5UiVfF+jKXah2ovK9+onZ6hawNop6P2mqRaGEuuQ0dePZz78U7zvCmyT7DQEtzPc
V1AszQl9S6BtwKirHn2pHhCoewCo4t0WaaqFutb3XuEFxDvZ4jWeXZdyHIw//MPs
plHmNGw1gzRdeKvDRbnfW+REOYyUeFhB9wj6d+05Mn1N+WTO61TIyEkp5nNb2GyM
c0TJ3R/pvol+NfO5MoNONPsB4K9rgpDeJRPTYYktiV/9soPNe/LhSt2jJLTkdjx+
2nvInZ06HwstUA==
-----END CERTIFICATE-----