Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File:                     ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier:          PJhuq4r66i+7b5ak9V74ztdUSqoL9GYOGJQtswUo890=
Subject key identifier:   4C:0E:2A:20:41:5B:54:2C:6C:52:72:6E:7B:16:B5:18:95:B7:F9:48
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer:       /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial:       01962E2B3CE8CFEB1843519C2F77E81DD6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: tDvni+3ShnUyujW7qT2RGdZkgbFjFPk4BWoEnYm78go=)
                          2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3c:e8:cf:eb:18:43:51:9c:2f:77:e8:1d:d6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=4c0e2a20415b542c6c52726e7b16b51895b7f948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:04:05:ed:a8:51:a0:fb:db:d9:d7:64:20:
                    da:26:46:fd:9c:4e:c3:1d:0e:94:7e:3e:96:59:5b:
                    40:1f:6b:b1:0c:ba:a1:d9:05:9f:b0:e3:d6:d6:e5:
                    58:ef:5f:2d:ee:5d:05:14:33:42:48:ea:71:b4:99:
                    93:b6:0b:97:a0:4d:7e:b1:b8:62:6d:ab:d5:dc:27:
                    ab:70:2c:26:23:12:56:0d:ea:e3:4b:dd:8e:e7:7f:
                    c3:5e:6f:cd:8f:f7:ae:4d:8b:b5:64:d5:9c:0a:d0:
                    69:fc:61:8c:cb:97:cd:cb:ea:ba:6a:2d:e9:33:57:
                    5f:71:0f:1d:1b:50:33:b7:75:df:81:5c:81:0d:39:
                    5d:fa:ea:dc:ef:ae:22:40:33:00:73:60:72:78:68:
                    6f:4a:3f:15:41:f0:d6:6e:c8:9c:09:51:ac:8b:d0:
                    8a:91:88:20:c3:c3:b4:6c:4e:1a:37:84:05:50:14:
                    33:cf:01:9f:ca:0d:d9:52:33:4d:c8:52:7b:a9:18:
                    a5:be:fe:14:67:3d:4d:98:4e:35:ea:df:10:8b:a7:
                    d9:bb:6a:d3:3b:bb:3a:83:68:89:db:45:ec:2e:2f:
                    3d:80:ee:10:87:dd:f3:ba:50:8b:1c:f3:ff:fb:90:
                    0f:c6:05:08:70:3e:58:f1:63:a1:95:39:33:f4:d6:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:2A:20:41:5B:54:2C:6C:52:72:6E:7B:16:B5:18:95:B7:F9:48
            X509v3 Authority Key Identifier:
                keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:aa:1b:40:3b:6d:1b:ed:e8:35:4b:ac:dd:86:f2:ec:06:
         11:bb:93:8a:a7:1c:5f:bd:00:ba:8c:6a:28:a1:0f:e4:51:ad:
         30:93:ca:38:68:e6:3c:3b:e5:46:34:c8:cb:1d:e5:3e:28:30:
         8c:59:5e:d4:e1:43:5d:36:3b:8a:0e:db:00:46:5f:4d:08:9d:
         12:71:ce:08:d3:b9:bf:46:e1:92:c5:10:9c:c7:a9:40:a2:3a:
         ec:38:c8:0c:5d:e1:6a:86:83:d1:45:f8:34:8f:f7:9b:6d:c3:
         c7:24:1d:a2:ae:ce:74:7e:77:50:aa:f0:b3:69:a3:ca:59:e2:
         9c:28:26:d2:52:ef:e2:ca:c3:af:64:23:b6:a8:bd:dc:a8:ef:
         88:13:d4:61:cb:af:88:f8:10:da:07:22:e8:7e:0b:85:52:da:
         06:7b:60:7a:35:ae:19:65:d7:c8:c2:9b:5f:03:3e:e8:d4:0c:
         36:9f:ae:53:95:ac:7d:6b:e0:7c:9b:12:70:61:71:fb:f4:97:
         c6:d2:9f:6c:25:bc:be:34:64:d0:1b:e0:b6:21:9f:04:d8:a9:
         9c:21:46:c7:51:af:fe:76:7e:68:85:20:29:70:a6:1a:c1:35:
         19:97:1d:b5:4a:15:d5:f6:d4:bb:36:5b:04:49:4e:3f:a3:e5:
         db:dc:e5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzzoz+sYQ1GcL3foHdazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZGNlYmFhOGNkMzJkYzRiZjFkNjZkMDg3M2ExYjZmM2Q3
MzQ5OGYwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
Eyg0YzBlMmEyMDQxNWI1NDJjNmM1MjcyNmU3YjE2YjUxODk1YjdmOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QEEBe2oUaD729nXZCDaJkb9nE7D
HQ6Ufj6WWVtAH2uxDLqh2QWfsOPW1uVY718t7l0FFDNCSOpxtJmTtguXoE1+sbhi
bavV3CercCwmIxJWDerjS92O53/DXm/Nj/euTYu1ZNWcCtBp/GGMy5fNy+q6ai3p
M1dfcQ8dG1Azt3XfgVyBDTld+urc764iQDMAc2ByeGhvSj8VQfDWbsicCVGsi9CK
kYggw8O0bE4aN4QFUBQzzwGfyg3ZUjNNyFJ7qRilvv4UZz1NmE416t8Qi6fZu2rT
O7s6g2iJ20XsLi89gO4Qh93zulCLHPP/+5APxgUIcD5Y8WOhlTkz9NZU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwOKiBBW1QsbFJybnsWtRiVt/lIMB8GA1UdIwQY
MBaAFJbc66qM0y3Evx1m0Ic6G289c0mPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWIt
YjYxNWM1YzYwNjUyLzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWItYjYxNWM1YzYwNjUy
LzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPSqG0A7
bRvt6DVLrN2G8uwGEbuTiqccX70AuoxqKKEP5FGtMJPKOGjmPDvlRjTIyx3lPigw
jFle1OFDXTY7ig7bAEZfTQidEnHOCNO5v0bhksUQnMepQKI67DjIDF3haoaD0UX4
NI/3m23DxyQdoq7OdH53UKrws2mjylninCgm0lLv4srDr2Qjtqi93KjviBPUYcuv
iPgQ2gci6H4LhVLaBntgejWuGWXXyMKbXwM+6NQMNp+uU5WsfWvgfJsScGFx+/SX
xtKfbCW8vjRk0BvgtiGfBNipnCFGx1Gv/nZ+aIUgKXCmGsE1GZcdtUoV1fbUuzZb
BElOP6Pl29zlMg==
-----END CERTIFICATE-----