Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File:                     LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier:          WfgIcMgFG7OD8Y91ja3OnvsSN4D+LwEZ2dEi6+L3TO4=
Subject key identifier:   29:69:8E:00:BB:40:53:36:A9:86:76:41:82:C4:DE:B0:1A:18:3B:E6
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer:       /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial:       01962F06F4C6129390249DF9D8F6B7B4B0DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
                          2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: rcRoUUh/3UgqTercpvX17f556hxgSUZV9ekTNjvN+i4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:c6:12:93:90:24:9d:f9:d8:f6:b7:b4:b0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=29698e00bb405336a986764182c4deb01a183be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:11:41:a2:4b:fd:da:10:31:0a:fd:40:94:9b:
                    db:8f:ff:0b:e6:bc:0d:29:b0:91:4f:7d:1a:d2:53:
                    29:5a:e9:41:fa:5a:42:fe:7a:1e:35:47:52:a6:f4:
                    61:24:8f:77:59:2e:34:e3:8c:04:74:8e:ec:7d:23:
                    3f:66:70:ca:86:87:58:94:eb:34:f5:3a:e6:2e:5c:
                    b9:26:3b:44:c4:dd:bb:bd:30:79:23:6e:85:74:05:
                    05:d8:1d:87:3b:61:fd:8b:03:42:ce:ac:23:3a:4e:
                    04:6d:96:6a:7f:74:0b:ef:e7:d6:d5:1e:3f:0c:e8:
                    5b:13:03:35:02:dd:f5:5d:7a:97:dd:1a:f4:57:41:
                    d9:28:41:68:9b:ac:79:57:26:2f:88:b3:f3:ff:7e:
                    c0:d8:35:7b:6a:bd:cf:ba:b4:f6:2e:97:b8:14:fa:
                    3c:44:98:7d:f4:db:37:0d:29:c5:88:a8:50:10:63:
                    5d:a0:ad:27:3c:5e:f8:87:4f:97:80:38:b2:8d:2b:
                    d5:8c:6c:c1:bc:e6:c2:33:20:98:15:1d:e1:cd:bc:
                    46:bd:39:10:48:00:27:21:c5:fa:87:01:a0:0f:4e:
                    26:ca:45:fa:54:99:d8:d3:09:2c:53:f3:7e:9a:0a:
                    69:b7:92:50:7a:0c:b8:b9:60:05:ce:b3:64:c4:cd:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:69:8E:00:BB:40:53:36:A9:86:76:41:82:C4:DE:B0:1A:18:3B:E6
            X509v3 Authority Key Identifier:
                keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:4b:b8:bc:9b:61:0e:9c:af:e8:20:59:e4:b7:e9:6f:67:
         4b:2a:1b:5e:6c:43:39:c3:84:12:cf:44:0a:fc:14:94:6b:00:
         64:32:59:fb:f9:6d:5c:c8:4f:dc:c0:f2:76:34:4b:1f:76:c9:
         f5:21:c4:4d:f7:28:70:bd:e0:6d:98:37:da:21:d4:0e:f6:84:
         a7:62:b6:4d:16:47:92:9d:b9:d9:ef:f5:00:41:ce:a3:91:92:
         57:1e:c0:64:a1:a8:ae:63:4f:85:b7:24:73:1c:7d:f2:63:0c:
         32:da:2e:e1:8a:f7:e9:73:74:7e:76:8e:9d:fd:93:10:74:f4:
         8f:a9:fd:23:01:ff:46:db:c0:b9:da:a6:1f:b8:55:d0:c9:36:
         cd:f2:6e:2f:32:dd:f2:1d:73:b9:9b:a2:b7:43:36:f3:fd:0c:
         bb:39:94:d4:70:b4:37:1c:89:e3:fc:34:bf:c8:cc:08:b7:b6:
         ae:00:3a:8e:53:c8:75:18:08:fd:32:0b:50:a7:ed:3b:4f:08:
         94:00:9a:89:a4:cc:03:91:3c:4c:df:ad:f9:85:37:6f:a5:ba:
         66:12:30:52:28:ef:d6:f6:1e:63:10:6c:8d:d2:7e:a5:75:71:
         a4:42:65:5a:1d:35:46:1d:73:ec:86:cc:7d:e2:a5:00:f8:6f:
         7e:6d:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----