Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File:                     LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier:          sVIXZdYNY+jQJfhnb9fr+eTb892hFs08XG8sx680RLE=
Subject key identifier:   67:DF:3C:D2:DC:C6:3D:4A:E6:F5:40:26:94:3D:26:86:78:D8:EE:95
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer:       /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial:       01962E993D71D0ECF5260A885D50621829DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number:          0D98
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
                          2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: BZVNX+cEIwH4jBGVrs0ON3Vr3vTWtSMmy26lGHavPok=)
                          3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:71:d0:ec:f5:26:0a:88:5d:50:62:18:29:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=67df3cd2dcc63d4ae6f54026943d268678d8ee95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:52:5e:f3:87:4e:2f:6d:a0:72:47:3a:e3:
                    fa:28:5f:4e:51:54:27:59:09:59:44:20:78:30:29:
                    d9:5e:03:e4:9e:47:c3:e0:00:40:d7:65:3c:c0:2d:
                    a6:07:0b:bb:2e:b4:c2:66:76:cb:af:8f:94:dd:b8:
                    7b:5c:91:7e:c9:9b:ae:05:9e:8a:26:61:a7:58:60:
                    64:21:7f:89:48:dc:07:5d:b7:f5:d4:7d:fa:e8:bd:
                    c9:56:f4:3a:e2:31:37:22:01:a2:20:d7:3d:1e:c0:
                    9a:58:37:9d:3e:0d:3f:36:92:df:0a:01:eb:78:ba:
                    66:82:7d:25:89:0b:83:dd:8a:dd:3c:52:22:5c:d9:
                    a0:cf:6a:c2:ea:d5:2a:e3:c0:ec:d9:6f:f0:03:b9:
                    fb:bb:c9:51:6f:23:c8:d7:d4:9d:36:6d:b0:8a:f9:
                    76:ce:9c:8b:db:d0:ef:1f:ad:fd:59:99:e3:00:6c:
                    61:c3:bb:14:09:e1:c8:51:79:e2:88:45:d4:b5:03:
                    b2:07:a5:60:cc:8c:f8:49:80:ec:51:c0:6b:04:6a:
                    3e:1e:4b:e2:0a:0a:07:a2:4b:54:9f:ab:85:3e:af:
                    61:c8:0d:61:30:ab:22:03:cf:b0:4f:97:e0:b0:87:
                    d3:9b:42:3b:04:3b:88:b0:6b:3b:f6:64:da:4a:7a:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DF:3C:D2:DC:C6:3D:4A:E6:F5:40:26:94:3D:26:86:78:D8:EE:95
            X509v3 Authority Key Identifier:
                keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:cb:35:0e:47:df:d2:c2:99:89:29:0b:95:7d:95:07:c2:
         4c:23:fb:91:0e:1f:05:b6:b8:2b:02:c3:5c:ce:8a:e2:9c:c1:
         87:3a:27:8d:c9:e7:3a:01:b4:31:d1:fa:06:0e:8c:76:18:e6:
         a7:75:92:77:74:0e:4a:18:57:25:e6:3c:3e:2b:f4:fe:d9:18:
         0d:fa:c8:46:d1:b7:d3:b9:18:f0:2d:e1:d5:83:cc:22:fd:e1:
         d5:95:67:18:41:48:ea:86:c2:69:3b:d7:70:8d:86:fd:fe:a5:
         78:21:fe:78:63:8e:e3:1a:0c:c9:86:bf:28:e0:f7:4c:e9:f0:
         b9:4e:d8:17:60:bb:7e:7a:60:52:28:74:fd:fc:cc:aa:9d:89:
         2a:49:b1:61:aa:2c:27:3d:2a:b9:96:a3:96:cf:47:7c:5a:04:
         90:e3:96:91:b7:06:15:cc:e4:71:f7:a5:a1:aa:72:92:34:e2:
         99:69:41:8c:0f:2c:0e:b0:3d:62:0f:5f:3b:67:ea:9a:ec:c1:
         ec:d7:d8:1d:17:41:71:39:8e:50:6b:a1:31:d2:55:62:01:b6:
         76:ab:2f:69:83:63:b5:2a:5c:38:f3:ca:bd:7d:ad:a1:5e:f0:
         62:be:40:29:20:c9:6c:9d:2e:79:ac:0b:2f:c9:77:09:f4:7c:
         73:9d:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----