Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File:                     LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier:          TKzI8pPBI+SBZgIu483k2oGG0AGx6BK91bqq03T76qg=
Subject key identifier:   3A:0F:CA:FB:3B:BB:3D:5F:EF:AE:5D:87:24:DB:6F:09:F3:3F:1D:ED
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer:       /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial:       01962E9896C0E462EE7350044B582A24052C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number:          0211
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: H1YeyQI+pa6tbmZd+WTUJq9ZT/fVzhTlV+Y8VZjyYHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:c0:e4:62:ee:73:50:04:4b:58:2a:24:05:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=3a0fcafb3bbb3d5fefae5d8724db6f09f33f1ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:f9:cc:e2:db:b6:c8:3a:8e:8c:87:ae:c2:
                    af:e9:21:98:e8:75:53:71:ca:80:a7:6b:3f:30:8a:
                    12:7a:e2:12:cc:d4:2e:5a:e4:46:c7:43:47:7d:4b:
                    27:7e:7f:73:aa:6f:fd:52:b3:67:5e:bf:49:a7:12:
                    5c:72:cc:53:71:c0:bd:8b:0b:60:14:80:5c:22:6a:
                    cb:55:de:a8:17:09:ab:df:1e:09:1e:5d:b7:50:8e:
                    94:3f:66:e1:c7:28:ad:db:64:b4:b8:ce:39:5e:c7:
                    46:dc:26:2e:29:bd:85:ec:a4:06:1a:98:88:c5:77:
                    92:de:07:f1:c6:20:26:98:76:d3:66:b3:9b:38:ba:
                    c9:3b:ca:e6:19:40:bf:51:8d:ec:f4:9c:a2:ed:09:
                    94:49:f5:93:3f:93:6b:25:15:3e:48:64:3e:23:6b:
                    93:8c:a4:e6:9c:2c:60:be:3b:9e:e4:8b:91:2d:fb:
                    cc:b8:1f:d4:4c:b0:ba:6a:3e:b3:21:e2:9c:e6:61:
                    59:65:36:2e:30:7e:5d:54:57:10:50:3c:5f:13:5e:
                    67:ea:e3:32:76:e7:a8:4d:19:71:89:22:42:87:27:
                    32:ea:bb:ba:be:41:28:1f:11:ad:7f:88:b3:1b:1a:
                    88:02:7d:82:b2:91:2c:92:c2:74:ea:43:de:ee:48:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0F:CA:FB:3B:BB:3D:5F:EF:AE:5D:87:24:DB:6F:09:F3:3F:1D:ED
            X509v3 Authority Key Identifier:
                keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c0:24:3b:18:9c:9c:9c:86:73:90:b6:c7:9d:98:bc:82:4d:
         30:3a:28:c3:9a:9c:f8:a9:6e:de:31:76:98:6e:e8:fa:55:11:
         82:36:49:a1:2c:02:2b:95:de:43:e3:c9:04:5f:d0:83:3f:df:
         2b:9b:f3:ca:f2:fc:ef:88:7d:c2:6b:40:42:72:49:6a:58:65:
         b1:b6:7a:19:ce:86:06:a5:40:84:87:85:b3:98:80:03:a6:37:
         a5:c4:4c:03:f9:ca:d6:de:d5:54:16:b3:f0:11:ab:96:7a:f6:
         82:ce:23:d9:17:8b:5a:76:da:c5:89:8b:18:cf:d3:6b:a3:2e:
         a0:3f:4d:a1:83:1e:63:30:48:e6:bd:11:e9:df:e9:9e:7b:6c:
         65:de:11:9d:f6:06:5b:e5:80:ba:4d:d7:7e:f9:55:63:76:df:
         69:be:cc:3e:64:d2:cc:e6:de:c2:49:da:de:e3:0b:90:e4:bb:
         7a:02:3c:87:bd:a7:09:bf:8f:9e:aa:2d:00:e5:51:38:b8:1a:
         a2:cd:b6:b4:97:2d:eb:ac:6d:fd:ce:de:1c:d3:3d:14:8c:93:
         48:56:31:cb:93:13:21:9b:fc:42:78:b9:e3:f9:33:2d:44:f8:
         48:83:54:af:87:0e:96:ad:69:37:c2:7f:0b:f0:d7:ed:b8:46:
         65:d2:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----