Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File:                     LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier:          y7icYrXMVljHouSkypfmOSo8bLPtTz+y1DiM4tVJYyA=
Subject key identifier:   D4:87:72:DB:F4:4E:5A:53:D3:E6:60:64:25:48:B0:21:27:25:F2:17
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer:       /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial:       01962F742FE0C9261E8726F6B8690A0A8034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: e0ubuyjOctWodfsXoKUYinLAzyjqpa38peQR3nQBHhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2f:e0:c9:26:1e:87:26:f6:b8:69:0a:0a:80:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=d48772dbf44e5a53d3e660642548b0212725f217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:b6:1d:e3:54:42:43:a5:40:19:ac:3d:a8:
                    c1:e3:aa:70:74:c5:62:51:97:3c:7d:92:b6:70:72:
                    b3:8b:fe:2c:51:b7:cf:76:f4:46:6f:11:6b:6a:30:
                    b1:88:21:fa:32:8f:49:0c:ca:b4:4d:39:26:c5:e4:
                    09:d2:01:7f:6f:cc:9b:6d:30:0e:08:0e:18:b1:2e:
                    6c:3f:96:5c:60:cc:12:1d:2e:91:3c:fb:4b:e3:e4:
                    ef:65:ea:be:c7:3d:cb:6e:24:21:82:ea:55:1c:7f:
                    15:33:a4:ed:ab:c3:74:e3:82:d7:55:a0:d6:92:b0:
                    2a:d7:f0:89:ac:d9:a4:b1:19:a5:c5:db:58:22:ef:
                    18:d0:95:0a:c2:d1:3b:02:91:c8:e6:67:f0:a4:73:
                    a3:b0:43:dd:2a:b3:1d:1c:63:72:16:10:b7:31:1f:
                    e6:bd:d1:02:89:77:f8:67:0f:5c:7a:bb:33:be:06:
                    f4:04:9b:c4:a0:15:fa:13:c7:fb:6d:61:d2:43:55:
                    3d:cb:99:03:f7:19:1a:2a:d7:c9:86:ad:0c:90:4d:
                    2f:7a:60:58:39:2f:c3:e1:11:4b:0e:e9:96:0b:b8:
                    d3:bc:34:73:4f:e1:00:a3:8f:c0:27:62:c8:77:cd:
                    da:58:df:bd:b7:77:47:df:e7:82:82:ce:86:ff:29:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:87:72:DB:F4:4E:5A:53:D3:E6:60:64:25:48:B0:21:27:25:F2:17
            X509v3 Authority Key Identifier:
                keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:b0:a7:a9:e1:21:bc:c1:8e:49:43:60:2c:f8:31:5e:5c:
         bf:9b:ae:17:a8:4b:73:fa:02:1a:3a:f6:1c:d8:04:ce:9f:e5:
         7d:17:35:b2:c1:bb:45:7c:93:9f:24:80:75:34:ac:cc:34:2f:
         24:95:bd:fd:69:5c:cb:7e:65:d0:36:df:74:2d:60:22:ca:65:
         6d:6f:81:0d:f2:1f:f6:27:47:ea:14:15:ef:31:17:98:11:55:
         f7:89:85:ca:90:f0:05:e9:cf:24:a0:9d:af:cc:57:ce:cf:51:
         cb:1d:f2:74:44:be:25:ee:d2:ed:c6:64:49:34:44:b6:c6:72:
         ca:35:42:f9:11:cd:69:02:2e:61:09:01:16:77:c3:b3:2d:59:
         8c:f9:e1:1f:9d:ca:2b:d7:de:12:cb:5d:e7:b3:5c:93:f5:29:
         2d:6c:94:81:65:b4:62:01:8b:6f:f9:01:54:da:51:fe:09:e9:
         e8:71:c0:ec:54:8a:c4:d7:be:d5:5f:66:0f:25:24:18:0a:eb:
         30:8e:cd:a6:53:d9:70:ca:8f:2c:ad:35:21:84:49:25:57:23:
         a4:a3:a8:60:43:42:df:10:4b:e5:f1:fb:16:8f:3c:0a:41:1d:
         f2:b5:e4:2f:eb:11:13:9d:23:63:4f:11:ed:4c:71:34:db:26:
         45:53:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----