Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File:                     lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier:          lWZzUE3cS5qa5540xucchCPPis8o1cuH4lpxdJKYOf0=
Subject key identifier:   B6:2F:E8:FA:2A:47:51:2F:58:79:42:AB:0C:9F:01:47:C0:59:66:E0
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer:       /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial:       01962F74E014253A16B5FA29B07F3119E679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number:          0BA6
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (hash: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=)
                          2: 7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (hash: VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=)
                          3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: ifrgoXQ6+4aWdmWyZLe+XAOwJNH/EzlWolRcFrcXgko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e0:14:25:3a:16:b5:fa:29:b0:7f:31:19:e6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=b62fe8fa2a47512f587942ab0c9f0147c05966e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:5f:04:50:e2:6e:c1:12:4b:79:83:3f:0c:
                    72:e6:61:f0:19:81:43:51:2d:b9:19:af:1f:cb:be:
                    27:44:c9:20:02:b1:9d:f4:a6:7b:c9:4e:c7:d3:3a:
                    83:9d:3d:3f:d9:d4:d5:51:1f:bc:7c:b5:d2:d6:f2:
                    fd:e5:54:de:fc:7c:ce:eb:ad:a9:11:d2:a5:10:8c:
                    80:ac:64:34:89:32:4e:5c:d9:1c:ee:ca:9f:73:7f:
                    fa:5d:f8:59:b2:b1:3c:a6:8f:23:f7:fd:1a:8f:8f:
                    fc:15:22:84:c8:a3:27:99:f6:e2:71:41:9b:70:1e:
                    93:d4:fa:0e:ec:80:c5:41:50:ef:60:a6:00:e5:91:
                    73:73:2a:d5:4d:7f:98:3b:c1:0a:d2:3d:80:85:01:
                    7f:79:80:2c:90:a2:30:07:75:a4:2c:98:bd:d2:62:
                    5d:81:ce:0a:ff:3d:0c:76:00:28:09:d7:55:6c:fc:
                    9f:e6:e1:2b:52:f5:99:f0:78:4c:3a:60:f1:86:fb:
                    68:d1:8f:1d:ab:7e:1c:cd:e4:df:12:0f:79:dc:66:
                    af:86:25:69:d1:c1:0f:14:9e:55:d3:15:df:67:ce:
                    86:72:cc:16:b2:03:53:83:2d:4b:85:c8:51:25:29:
                    88:3e:87:b5:41:a2:2c:b0:ff:bc:2f:4b:da:67:2e:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:E8:FA:2A:47:51:2F:58:79:42:AB:0C:9F:01:47:C0:59:66:E0
            X509v3 Authority Key Identifier:
                keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:1f:ac:71:74:fe:52:94:ab:13:44:e5:52:0e:59:2a:bc:
         e2:f9:a0:ff:92:d1:19:bb:41:7f:30:d0:58:87:e5:bf:52:d2:
         7c:55:f5:87:9a:73:19:21:a3:7e:0d:8e:a9:66:78:d3:c6:68:
         c5:d1:de:ff:32:c1:67:0e:3f:ec:90:f5:cb:97:1e:a6:32:5b:
         d5:5f:73:15:a5:7b:ea:1e:1b:56:61:ef:f7:37:d7:81:90:e8:
         c1:05:44:7d:75:d8:e1:14:dd:50:22:c9:f0:4f:e9:e0:4f:1c:
         6b:7f:b3:c9:6a:39:85:71:38:7f:88:bc:0b:6e:ae:49:57:8f:
         5f:c6:4f:88:92:16:98:0e:eb:68:99:39:76:f9:5d:70:43:3a:
         f7:29:5e:01:84:71:0f:ee:b9:72:85:a0:94:1f:ec:1d:1c:72:
         2c:a8:98:76:15:0c:6c:cf:d0:18:c9:f4:04:6a:0d:02:cd:96:
         97:26:44:ab:7e:55:78:d5:bf:3e:86:f2:23:e6:5b:e4:2f:f5:
         11:c1:a7:55:dc:ea:d5:78:38:c9:56:d4:ed:77:99:90:f4:fe:
         21:64:6e:72:1f:8a:7c:e6:10:fd:f3:1a:a6:ff:80:89:cb:f6:
         ac:43:c1:86:03:6e:69:1b:aa:ce:cd:91:b9:17:c3:89:bd:56:
         cf:7c:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----