Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File:                     ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier:          6H8rRedI/bJDJY6uOoPsyheGfeM0/xJIAmLqrfje+80=
Subject key identifier:   E6:F2:04:3B:08:86:DA:23:D7:50:D9:80:1D:D5:2D:4A:EF:CC:6F:39
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       01962E98703B473D08D8A7E0E13349D14023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number:          07C9
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=)
                          2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: E0Qpat/Zed+RT3A6W1QEfg6bYrJNlD4YPXqK5FQwi5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:3b:47:3d:08:d8:a7:e0:e1:33:49:d1:40:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=e6f2043b0886da23d750d9801dd52d4aefcc6f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:78:7d:e1:44:64:27:a3:38:50:e7:aa:e2:
                    a0:cc:b6:5c:0a:57:b5:09:58:62:aa:5d:d4:a7:bd:
                    2f:e5:3a:23:8e:f4:75:d7:38:ea:85:9d:37:42:ae:
                    a8:22:c3:2f:3d:9e:65:7e:19:8a:aa:04:ea:7f:95:
                    41:81:6c:d4:8f:25:c5:07:51:31:57:e1:4e:77:72:
                    bf:5d:77:b9:81:0e:71:9e:a8:ee:8c:7e:b7:6b:e6:
                    c9:b2:0c:f2:3a:4f:5c:8b:7c:28:3b:40:60:01:f0:
                    36:9c:1b:e9:31:d6:b0:88:99:b4:35:aa:1c:df:3b:
                    ed:9b:f6:93:4a:7c:5d:b1:2e:93:e3:42:e3:85:f8:
                    8b:28:53:b9:25:c7:96:36:47:fc:94:1b:b3:6d:70:
                    a1:17:48:c8:f9:01:e9:6e:4d:13:7f:69:8a:37:9c:
                    0b:b3:22:b0:6d:aa:a8:09:59:61:7a:35:2f:35:2c:
                    f7:9e:3e:09:71:76:2f:29:0c:61:06:fe:ac:f8:89:
                    94:17:0a:fd:51:87:09:0f:4b:19:1c:17:5c:c6:b9:
                    c7:a2:b9:b1:46:d0:cb:87:23:4e:ad:51:98:a8:16:
                    0a:cf:fb:e0:3e:49:5d:42:2f:bb:25:f9:6b:3a:d8:
                    4a:bf:01:e7:61:99:91:40:1d:2a:86:6c:bf:2f:44:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:04:3B:08:86:DA:23:D7:50:D9:80:1D:D5:2D:4A:EF:CC:6F:39
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:c9:57:3d:78:bb:7b:f5:96:43:95:60:d5:0d:f5:56:c1:
         fc:65:2d:35:bc:72:40:32:0b:f6:64:3f:b1:66:8a:68:a0:8d:
         45:36:ba:fd:34:97:bf:bd:e1:73:cd:7b:38:2d:ba:70:27:98:
         bb:84:74:66:3d:ca:c0:c8:5f:fd:8b:4e:1c:e9:92:3d:6a:ae:
         c5:d1:92:f5:2d:1f:4c:5c:0b:ad:d5:4b:e6:10:d2:c4:a3:7a:
         dc:04:23:41:e7:1b:0e:4a:15:64:5f:fa:1d:9a:be:1f:3d:06:
         a1:f3:e5:11:06:1b:c8:4e:b1:4f:01:6d:21:aa:1a:8d:97:b5:
         10:d5:c8:2e:84:87:95:8d:63:22:bd:c7:84:4f:d2:8f:ac:7a:
         73:7e:e3:b7:13:67:c0:4d:bb:2a:e8:72:17:5e:81:fa:0d:9b:
         2f:8e:98:24:08:02:34:56:43:ad:07:1d:5d:e4:34:b1:64:df:
         0c:18:8e:6e:64:0a:62:ca:71:49:a1:0a:fa:47:5c:dd:6c:f8:
         14:c6:87:18:dd:80:ab:16:e7:e3:80:9b:99:5a:65:4f:9d:ea:
         18:61:43:e8:31:16:99:89:be:2b:8c:2c:d8:ff:95:8d:8f:74:
         c4:7c:56:89:6c:2e:02:2c:43:f1:3a:67:ef:f5:18:7f:34:9d:
         ab:41:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----