Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File:                     lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier:          ZfDf21mCdeKb26BMDP9xd1MxjCuGv/YprjoQjNlyU3Q=
Subject key identifier:   3A:E0:77:36:3A:7E:2F:75:5B:0D:BB:C2:48:97:1B:C2:55:6A:D7:06
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer:       /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial:       01962F06DA34090482BBC0C4E0FF8968BB29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
                          2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: xJ9uUXd7BCE4GE+6gMFknmhYYk2TQzgxV3MikR8oCTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:da:34:09:04:82:bb:c0:c4:e0:ff:89:68:bb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=3ae077363a7e2f755b0dbbc248971bc2556ad706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:87:eb:88:12:a3:c2:9c:f0:0d:1c:38:04:
                    b7:2d:64:cb:7c:d9:d6:8c:fc:83:6d:97:cb:41:29:
                    57:57:7d:d2:93:37:04:58:b4:d9:e7:34:4c:7e:95:
                    b3:57:ae:3f:bf:20:67:89:04:f5:09:73:4d:1f:99:
                    74:9b:50:8b:f0:6a:b9:25:ae:a6:d8:9c:bb:b7:cc:
                    27:30:57:28:b0:eb:1f:a4:10:f7:93:e2:ea:d5:a7:
                    eb:f8:fa:bf:b0:4e:e3:6b:37:8e:5d:64:54:5b:e5:
                    c7:3b:7d:7d:e5:bf:b9:a7:0f:57:96:a1:2e:a6:3a:
                    c5:3f:50:f7:fd:d0:cf:80:34:26:c9:b3:8a:11:39:
                    77:46:1f:a3:a9:8c:1d:91:c2:b6:56:f1:07:8b:47:
                    ae:70:56:7b:d5:ab:a6:d9:9c:b1:36:48:55:dd:3b:
                    f0:82:83:ce:3c:4e:42:41:4d:a4:7c:fb:21:98:b1:
                    81:9f:f6:fc:61:f8:d7:cf:f6:c5:32:cf:9e:05:38:
                    0f:fb:07:3f:88:44:36:43:b9:86:3a:5e:11:2d:71:
                    b5:47:b4:a3:93:c7:42:f5:69:e8:8a:b2:06:08:9a:
                    e7:5f:86:43:ab:1e:f6:f8:55:a8:5a:95:f1:b6:6a:
                    f2:a0:14:4c:45:8a:b4:93:10:38:9a:14:08:0b:13:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E0:77:36:3A:7E:2F:75:5B:0D:BB:C2:48:97:1B:C2:55:6A:D7:06
            X509v3 Authority Key Identifier:
                keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:87:21:11:2f:ae:7e:75:1a:ff:ea:8a:4e:83:bf:68:a3:77:
         c0:00:60:e9:4e:5e:2c:22:3c:04:66:76:45:f3:20:16:ed:97:
         89:8a:d3:44:67:a7:19:a2:f7:be:d0:cd:a7:f1:59:3c:96:44:
         60:30:85:6c:f5:af:07:fb:98:48:b1:c1:87:b2:b0:2b:a5:87:
         7a:d2:94:1e:5b:81:1e:19:aa:a2:63:cb:3f:ad:5b:74:d2:7d:
         7e:d1:91:69:b6:5f:e8:eb:68:49:38:0b:91:8b:8f:bf:50:c3:
         cb:6b:a9:00:36:43:ca:44:01:f5:0a:be:5a:a6:ff:ec:fb:b3:
         0d:eb:0b:0e:eb:5c:86:ea:e5:18:eb:72:86:fa:e8:aa:06:d9:
         eb:8b:ed:93:45:f4:87:b6:63:b2:65:cd:3a:cc:51:fd:51:23:
         1d:d2:c5:62:82:59:7b:54:fc:50:7e:ad:be:54:0f:87:f9:56:
         00:9a:0d:e4:e3:39:1a:bc:ee:b2:8c:09:57:93:af:93:b6:80:
         8f:72:47:4f:ad:60:1b:7e:53:70:c6:8a:db:02:cd:15:38:12:
         c2:c3:ff:45:98:c6:b7:8e:d9:59:74:37:d8:bd:a0:ad:a6:11:
         2a:db:4f:95:90:2d:e2:44:44:e4:0b:67:1b:12:e2:a5:25:95:
         ce:65:ae:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBto0CQSCu8DE4P+JaLspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi
YjQyN2IwHhcNMjUwNDEzMTIwMTQwWhcNMjUwNDE0MTIwMTQwWjAzMTEwLwYDVQQD
EygzYWUwNzczNjNhN2UyZjc1NWIwZGJiYzI0ODk3MWJjMjU1NmFkNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFKH64gSo8Kc8A0cOAS3LWTLfNnW
jPyDbZfLQSlXV33SkzcEWLTZ5zRMfpWzV64/vyBniQT1CXNNH5l0m1CL8Gq5Ja6m
2Jy7t8wnMFcosOsfpBD3k+Lq1afr+Pq/sE7jazeOXWRUW+XHO3195b+5pw9XlqEu
pjrFP1D3/dDPgDQmybOKETl3Rh+jqYwdkcK2VvEHi0eucFZ71aum2ZyxNkhV3Tvw
goPOPE5CQU2kfPshmLGBn/b8YfjXz/bFMs+eBTgP+wc/iEQ2Q7mGOl4RLXG1R7Sj
k8dC9WnoirIGCJrnX4ZDqx72+FWoWpXxtmryoBRMRYq0kxA4mhQICxNI8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrgdzY6fi91Ww27wkiXG8JVatcGMB8GA1UdIwQY
MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt
MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh
LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYchES+u
fnUa/+qKToO/aKN3wABg6U5eLCI8BGZ2RfMgFu2XiYrTRGenGaL3vtDNp/FZPJZE
YDCFbPWvB/uYSLHBh7KwK6WHetKUHluBHhmqomPLP61bdNJ9ftGRabZf6OtoSTgL
kYuPv1DDy2upADZDykQB9Qq+Wqb/7PuzDesLDutchurlGOtyhvroqgbZ64vtk0X0
h7ZjsmXNOsxR/VEjHdLFYoJZe1T8UH6tvlQPh/lWAJoN5OM5GrzusowJV5Ovk7aA
j3JHT61gG35TcMaK2wLNFTgSwsP/RZjGt47ZWXQ32L2graYRKttPlZAt4kRE5Atn
GxLipSWVzmWuXA==
-----END CERTIFICATE-----