Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File:                     ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier:          5S5okgtbTod0EQoUgV04GrV7QFRRJIVPQJBea+8sQIU=
Subject key identifier:   A8:FC:0C:49:BF:E4:AC:BF:93:49:E1:99:E6:0A:EF:50:E3:27:D8:85
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer:       /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial:       01962ECF5C584BD6132B079C65FD39547093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number:          0853
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
                          2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: 6BVNpIPCmIrrabBRQt8TQU8+pFjM8bwquh1qHWOxUtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5c:58:4b:d6:13:2b:07:9c:65:fd:39:54:70:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=a8fc0c49bfe4acbf9349e199e60aef50e327d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:37:10:20:4e:34:ff:7e:54:50:56:b4:a4:
                    8f:ad:c7:c3:03:5b:98:03:d6:a4:3d:b0:e9:63:e0:
                    79:97:08:01:ce:51:eb:f8:af:38:2f:27:01:6c:95:
                    0e:7d:a4:bb:fe:c7:ef:73:1a:b1:76:8d:56:c3:ad:
                    18:42:c5:77:09:91:f4:bc:85:a0:aa:c3:7e:b0:62:
                    93:5f:40:71:b6:37:36:a3:af:7c:ce:49:77:45:60:
                    6c:f0:ed:e8:f2:5f:64:28:bb:f0:9e:a3:bd:81:0e:
                    bd:61:c0:a7:3f:bf:1b:0a:1e:6d:bb:87:fd:bd:e9:
                    b9:7a:b6:e9:bb:5b:9b:3e:2a:11:9c:36:cb:98:82:
                    ef:1d:6c:19:9f:f1:63:1a:48:4e:6d:e1:d1:b3:75:
                    a2:36:3c:70:72:57:20:bd:90:3f:9a:d3:4e:85:ee:
                    4f:39:63:cf:63:86:f1:56:b8:fa:69:9e:c3:7f:e8:
                    a2:69:1a:19:5d:dc:91:b0:a0:b6:01:63:44:d9:dd:
                    08:a7:f1:5a:92:d4:5a:ac:dc:20:f5:8a:2f:b1:e4:
                    ce:b2:65:8f:14:3f:cf:c0:b5:0e:71:4a:73:47:a3:
                    af:e1:64:d4:1b:64:48:f5:43:8c:ca:e1:87:d2:b1:
                    cb:db:be:16:7e:fd:e8:a6:99:72:1d:7b:6c:75:eb:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:0C:49:BF:E4:AC:BF:93:49:E1:99:E6:0A:EF:50:E3:27:D8:85
            X509v3 Authority Key Identifier:
                keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:26:91:8f:02:de:c3:84:17:ff:b1:c9:53:17:9d:d2:4f:
         07:6b:e2:10:a2:75:70:55:b7:6f:b4:4a:50:98:b6:80:19:86:
         a7:14:fb:6b:c1:f5:9c:62:1e:70:19:0e:0d:03:d3:39:ad:95:
         5b:c0:2e:ce:22:72:35:2f:97:38:ea:dd:d6:4c:bd:d3:0c:66:
         b9:ad:d5:47:28:a2:5c:e3:5f:a8:64:ba:92:26:a1:48:9e:bd:
         29:9e:4b:2f:08:ee:04:9d:6d:f7:11:55:60:91:f9:40:25:b6:
         d8:31:d6:ba:05:80:49:44:78:a9:62:ad:40:67:94:b9:36:5b:
         59:3b:45:32:b6:61:16:8b:be:5c:53:b7:3b:3f:d2:97:da:ed:
         b4:c3:af:e4:96:9c:11:a1:98:c6:8c:4b:99:6c:25:7d:5b:bf:
         3a:a1:ed:17:29:2b:e5:5d:34:cd:a9:23:84:63:28:5d:8d:8f:
         0f:77:19:c8:c0:31:e9:b0:0b:d4:10:48:47:e4:ef:42:83:ae:
         42:42:09:39:79:96:fd:e6:b2:4c:11:f3:3c:cd:ef:6a:b2:bc:
         14:f1:6f:da:b5:de:21:da:21:06:28:02:4b:ab:a5:5e:d5:21:
         8c:77:81:03:ab:4d:a8:1e:58:da:d8:76:bf:a3:bc:61:a2:e5:
         de:20:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----