Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File:                     LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier:          i0JpPd7DQL01ERvIVtY+2xlC5oW+EFpGK8o4lrl4Hvk=
Subject key identifier:   AA:B9:B6:45:2E:2D:CB:C9:C3:22:94:56:A0:DC:C9:67:75:4F:E9:AB
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer:       /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial:       01962F07074F0B223C39074623A9E0C1A7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number:          0FBC
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: eKck5CCYkuFm4q0mmk998j8eOsWKJPKaodic4fW9sQ0=)
                          2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:07:4f:0b:22:3c:39:07:46:23:a9:e0:c1:a7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=aab9b6452e2dcbc9c3229456a0dcc967754fe9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:e5:15:3a:05:e1:2a:ca:1d:46:38:74:e2:
                    5d:a0:41:59:cd:92:43:74:4d:27:a4:b2:d3:e6:a2:
                    10:fd:40:0b:ae:a5:45:d2:72:33:a1:36:09:d0:b8:
                    3e:9d:30:0a:4f:f3:21:cf:b1:e1:69:a6:97:7d:a6:
                    bb:97:c9:d8:1b:d0:aa:0d:d5:31:9c:69:ef:3f:20:
                    55:d6:8a:d1:82:34:37:95:bd:b3:7c:27:09:6c:7a:
                    52:6e:b3:15:ab:3e:f7:df:eb:bf:e2:ef:ab:c9:e2:
                    d1:d7:10:2f:72:f7:10:e1:8b:dd:35:34:19:d2:5c:
                    29:97:c0:bf:66:c9:5e:24:2b:85:90:af:4d:75:70:
                    cb:1b:1e:13:59:01:94:61:ea:33:57:c0:a6:75:6d:
                    5f:18:43:8f:63:e5:4d:05:0f:74:52:ad:da:c4:fd:
                    a0:5e:ac:42:0c:68:2b:77:cd:db:5a:cb:4e:d6:81:
                    bc:9c:90:01:d2:61:7b:d9:76:c7:65:2b:76:d3:f1:
                    c4:72:17:85:a7:4a:09:ec:44:6b:64:d6:ae:23:3c:
                    4f:84:34:af:7c:0a:16:a4:82:92:8c:f0:19:f4:3a:
                    20:d0:6e:21:06:70:d9:08:58:2b:10:2a:a2:da:8b:
                    8b:63:b7:2d:80:3e:9f:20:77:11:cc:b3:67:1b:59:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B9:B6:45:2E:2D:CB:C9:C3:22:94:56:A0:DC:C9:67:75:4F:E9:AB
            X509v3 Authority Key Identifier:
                keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:31:4d:7a:b4:5b:7e:e4:df:0f:a8:ae:e7:14:58:56:d0:
         00:70:d9:5e:d2:50:17:68:22:55:29:c7:75:df:0c:de:70:96:
         c2:dc:53:fb:5e:db:35:98:9e:56:15:20:92:4d:8c:e5:76:f3:
         c9:47:6b:93:fe:e3:c3:a5:be:8b:4a:89:15:af:ae:80:3a:0f:
         6d:c0:9d:d8:de:71:9d:b6:af:62:30:6f:3b:71:f4:f3:81:67:
         af:fb:8d:70:f5:92:11:b3:6e:5a:ab:d7:64:e7:9e:dc:01:f0:
         85:4f:be:c7:fa:6c:51:7e:47:dc:dc:bb:ba:4d:f0:fa:b3:84:
         1f:ad:97:a6:06:96:4f:1a:35:5f:f7:dc:17:68:a4:8a:42:2b:
         72:d9:65:1e:96:b0:bc:d7:53:69:c4:4e:41:1f:90:d0:e2:47:
         a0:b7:39:f3:4c:73:9b:17:b9:af:ad:9a:59:b0:a5:09:e7:f4:
         5f:e2:92:29:0b:b5:60:7b:c4:fb:c1:ee:d3:23:12:39:8e:ab:
         5e:f9:88:4e:2d:10:da:7e:7b:2b:e9:65:a0:c2:05:20:a1:b7:
         07:d3:d5:7c:c7:f2:d3:9e:9b:9a:b4:3b:2f:4e:82:e3:f1:90:
         be:e1:a3:32:52:1c:2d:b0:44:fe:6c:bb:3b:e1:ad:e6:90:c0:
         ac:59:1c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwdPCyI8OQdGI6ngwafWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh
ODkwMmUwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
EyhhYWI5YjY0NTJlMmRjYmM5YzMyMjk0NTZhMGRjYzk2Nzc1NGZlOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirnlFToF4SrKHUY4dOJdoEFZzZJD
dE0npLLT5qIQ/UALrqVF0nIzoTYJ0Lg+nTAKT/Mhz7HhaaaXfaa7l8nYG9CqDdUx
nGnvPyBV1orRgjQ3lb2zfCcJbHpSbrMVqz733+u/4u+ryeLR1xAvcvcQ4YvdNTQZ
0lwpl8C/ZsleJCuFkK9NdXDLGx4TWQGUYeozV8CmdW1fGEOPY+VNBQ90Uq3axP2g
XqxCDGgrd83bWstO1oG8nJAB0mF72XbHZSt20/HEcheFp0oJ7ERrZNauIzxPhDSv
fAoWpIKSjPAZ9Dog0G4hBnDZCFgrECqi2ouLY7ctgD6fIHcRzLNnG1kmbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq5tkUuLcvJwyKUVqDcyWd1T+mrMB8GA1UdIwQY
MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt
ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm
LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq04xTXq0
W37k3w+orucUWFbQAHDZXtJQF2giVSnHdd8M3nCWwtxT+17bNZieVhUgkk2M5Xbz
yUdrk/7jw6W+i0qJFa+ugDoPbcCd2N5xnbavYjBvO3H084Fnr/uNcPWSEbNuWqvX
ZOee3AHwhU++x/psUX5H3Ny7uk3w+rOEH62XpgaWTxo1X/fcF2ikikIrctllHpaw
vNdTacROQR+Q0OJHoLc580xzmxe5r62aWbClCef0X+KSKQu1YHvE+8Hu0yMSOY6r
XvmITi0Q2n57K+lloMIFIKG3B9PVfMfy056bmrQ7L06C4/GQvuGjMlIcLbBE/my7
O+Gt5pDArFkcWw==
-----END CERTIFICATE-----