Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File:                     LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier:          EfdU+s3P7Rx60y+4vVwbzx0jvbnvodm0F0pap2xcEQ8=
Subject key identifier:   17:EF:FE:D6:A3:6E:BD:F1:B0:44:16:F3:5E:0B:1F:2B:C3:B0:E2:B2
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer:       /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial:       01962E61ED8358178E832CE01B51AEFD7A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number:          03AB
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: CiCqaYpGCn6FzaYhzcA8cySKuq0m8+6xfX5IaWyS5r4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ed:83:58:17:8e:83:2c:e0:1b:51:ae:fd:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=17effed6a36ebdf1b04416f35e0b1f2bc3b0e2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:a0:3f:99:12:dd:33:b1:77:f4:74:16:92:
                    88:ee:e7:fd:a3:a4:20:0c:28:94:58:96:7c:fa:b1:
                    58:3d:09:06:a6:a2:54:15:69:8b:1b:06:0a:f7:d7:
                    a8:e3:8d:64:43:3b:8d:16:6a:ca:4e:df:ab:ab:24:
                    31:de:ba:03:ff:c9:2f:9b:82:26:a4:ed:2f:44:11:
                    11:6c:9e:ff:f7:6f:c2:dd:db:b4:da:0e:91:c0:99:
                    d0:f5:14:b1:93:9d:86:0c:26:9b:05:08:21:f7:74:
                    c0:20:d8:28:cd:fc:75:95:ef:51:42:20:9d:67:4c:
                    d6:b4:da:72:77:ee:19:db:fa:01:4e:61:5c:c0:75:
                    cd:c7:0e:77:ed:4d:31:01:d6:cc:8c:2b:1b:23:49:
                    c7:a9:4e:d7:17:5a:20:63:0c:6d:17:f4:ba:fc:a5:
                    17:b2:f2:58:36:c7:30:67:2f:31:a0:c8:35:c3:32:
                    60:66:4f:a4:64:d4:55:c3:0e:60:e7:bb:25:85:d3:
                    78:2e:9a:ae:0d:da:e5:01:ef:3c:3f:c4:4e:2e:c9:
                    ab:4a:2a:6e:95:ae:f6:0a:b7:5a:06:be:77:39:70:
                    57:4a:58:d6:2e:25:e2:09:ab:29:e7:8b:67:1f:6e:
                    28:8b:65:27:bc:54:8d:15:d7:59:49:b0:81:3a:27:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EF:FE:D6:A3:6E:BD:F1:B0:44:16:F3:5E:0B:1F:2B:C3:B0:E2:B2
            X509v3 Authority Key Identifier:
                keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c0:5f:f3:c7:22:37:fb:15:21:65:70:75:18:8d:f3:45:48:
         88:79:7e:75:84:1d:c8:71:37:7f:20:52:77:14:e4:55:69:35:
         b7:1a:77:ab:15:3e:89:2d:59:39:d5:e9:c0:b8:73:1c:79:9f:
         d6:54:e5:da:1d:09:03:9b:52:ac:b0:e2:e8:a9:5a:81:95:16:
         27:b4:19:dc:dc:1b:05:c9:58:1d:0e:f9:6e:df:53:65:bc:76:
         09:15:66:aa:e2:af:55:53:0d:79:b7:36:8f:5a:75:bc:68:f1:
         cf:f8:28:40:77:0a:79:82:e1:15:46:ee:d5:ca:ed:dc:48:ad:
         e4:de:05:87:22:03:0a:f6:23:40:d9:f7:d8:88:be:8f:87:d5:
         60:f0:be:37:97:4d:33:df:e9:7b:83:b1:3d:85:52:03:17:d7:
         11:e1:62:35:45:ab:03:1c:32:25:df:19:81:ea:1d:42:38:ab:
         92:9c:8e:f7:d0:11:c7:81:f5:51:1e:55:8a:5d:43:15:a8:01:
         f2:16:16:e6:0b:2d:6a:c7:97:32:45:9a:97:57:72:a0:45:57:
         2a:79:fe:67:ef:96:52:44:20:6f:4b:12:5b:1e:82:df:57:fb:
         6d:31:41:f8:c8:22:40:6a:d3:1a:be:3a:2f:e1:1e:93:a5:36:
         25:b9:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----