Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File:                     LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier:          j8k0xXmn7KUFxmFJxhtLL/oRLx33Kp1RS3ec50+zWIM=
Subject key identifier:   5D:FE:6D:5C:F4:89:DA:69:B5:FB:46:D2:20:71:B1:41:72:31:F2:02
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer:       /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial:       01962E989A3195D82E3D2C43F3FA0E8B0002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: I4MkF2yx7k57hIG5sR6RvPRPiuqXWkP2xoEnMG204Uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9a:31:95:d8:2e:3d:2c:43:f3:fa:0e:8b:00:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=5dfe6d5cf489da69b5fb46d22071b1417231f202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:63:6a:a4:d7:6b:6d:7d:99:b5:01:51:1e:
                    47:6a:87:de:92:7b:57:ed:ee:ec:46:33:64:c0:b5:
                    5a:af:99:cd:2a:53:a6:04:fe:f5:3b:f9:ab:37:ce:
                    34:9e:b1:65:37:57:25:6b:91:1e:df:1d:90:1b:95:
                    ec:f6:48:8e:88:b9:63:9d:62:1b:23:d7:0d:9c:95:
                    40:cd:cb:89:44:03:21:34:14:52:d7:78:67:e4:b6:
                    3d:6c:cd:0a:e7:0e:27:a7:7a:10:60:fb:12:cf:16:
                    2e:a6:cf:b8:d9:dc:8b:f2:e4:fc:0a:51:f6:bb:7e:
                    f8:b3:ed:6f:d2:5e:d9:f0:49:b5:e4:98:18:44:e5:
                    40:fc:af:f8:fb:52:75:72:fe:24:22:5c:e1:5f:35:
                    df:07:67:37:97:5d:cb:24:85:56:71:f5:9c:4d:a8:
                    8c:dd:66:4e:9b:f9:c0:a0:88:5f:98:d4:3d:af:a7:
                    48:74:9a:35:b6:bb:ad:8b:4d:f3:04:39:c0:51:27:
                    a8:cd:1b:6c:ba:b1:11:d0:ed:e8:84:1f:8b:b0:ee:
                    eb:ce:11:19:69:13:8d:ff:45:15:a0:c7:39:9d:16:
                    3d:60:02:b4:e2:36:ea:00:fd:41:8a:7d:7e:21:83:
                    c0:2a:4e:5e:ee:03:3f:ea:41:93:88:50:14:f5:66:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:6D:5C:F4:89:DA:69:B5:FB:46:D2:20:71:B1:41:72:31:F2:02
            X509v3 Authority Key Identifier:
                keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:59:ce:0f:9e:13:17:7f:3b:c8:f8:c2:9e:d4:d9:49:13:
         89:30:cf:03:01:75:ff:22:a9:01:f4:fc:ec:6d:44:7e:f2:47:
         9f:06:d2:cd:7d:cf:e2:7d:5d:75:11:62:36:2f:fd:8b:85:d7:
         ab:32:66:1a:42:c3:d5:ce:ab:ec:84:45:84:b5:0d:39:f1:67:
         5c:52:72:00:86:6e:99:25:75:9c:bd:69:0b:57:28:11:86:8e:
         8b:7f:cc:f0:14:f9:32:18:e2:53:ff:b4:83:3a:92:1c:c5:7c:
         13:c5:09:6f:c4:d8:e9:7b:94:d9:51:39:9d:de:86:11:57:ac:
         5b:01:30:09:15:a0:5d:6b:d7:04:d4:1e:66:36:f6:5f:47:f7:
         32:bf:0f:c4:cd:b9:a2:04:3b:32:be:26:0b:2f:c3:22:97:c4:
         73:f3:25:9c:66:05:fe:b1:a8:19:0c:dd:66:6d:3f:d7:42:d3:
         d6:24:b2:90:c8:6c:c9:7f:4b:65:c3:b2:26:3b:17:e0:b9:c7:
         0d:3d:6b:1f:7d:84:b2:35:d7:47:cb:3e:db:d0:b9:5a:6e:04:
         83:d5:06:40:1f:a9:85:25:3d:8b:d9:aa:19:4a:2e:67:05:61:
         85:f8:83:2b:25:e7:0e:1c:56:ad:7a:05:c8:a4:f4:33:aa:a0:
         68:20:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----