Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          Br2fanVyW/Ry2Cf7GA4cpjlXh16pq3stHzj7tFv1kbU=
Subject key identifier:   FE:3A:45:39:0B:D4:C1:6D:50:3A:E6:46:61:C8:D1:E4:E0:BD:60:E3
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       01962F745BF98DE7C5D2058222817761FE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          0E04
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
                          2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
                          3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
                          4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: 8u5UTwVxMtjHtgU3qY0+jwOAJulMwGRPDhPwOG5DGG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:f9:8d:e7:c5:d2:05:82:22:81:77:61:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=fe3a45390bd4c16d503ae64661c8d1e4e0bd60e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:d4:99:94:65:eb:6a:8a:77:8c:d2:55:12:
                    12:5e:ec:89:0e:af:e0:9b:cb:55:64:b6:a0:cd:51:
                    1a:fa:d7:2e:8a:ce:6c:32:6c:41:79:79:ae:86:f8:
                    d0:93:4e:07:9d:81:a2:42:4b:30:e4:b1:1d:c4:47:
                    ce:c4:69:92:a2:e3:21:42:28:9a:0d:eb:a6:8d:29:
                    80:a2:9e:84:8b:9f:c7:f0:0c:2c:23:d3:8a:ce:40:
                    21:b6:5a:bc:26:49:c3:b2:2c:bf:dd:55:19:b6:98:
                    c6:13:06:eb:32:f9:0b:73:ce:1d:af:b1:39:a4:3b:
                    82:f6:ed:29:46:0f:22:58:56:ad:58:0a:61:57:cc:
                    c8:16:ad:49:06:1c:22:6a:ef:aa:04:88:8d:ce:6c:
                    8b:fb:e4:c2:58:9b:b7:e7:3d:f2:30:8a:98:bc:81:
                    38:af:8e:3a:ca:95:5a:60:c3:c2:5a:5f:5d:57:f9:
                    f8:04:5f:df:d4:f0:72:4e:db:48:a1:ef:69:48:6b:
                    1c:94:2a:51:45:05:23:f7:28:5c:94:50:62:97:92:
                    0f:55:89:d7:5f:a0:79:5f:45:3e:80:86:1a:4e:f2:
                    5e:6a:6d:b6:1c:0a:df:18:79:79:fc:46:e9:34:2f:
                    36:5f:97:c1:ae:b6:fd:aa:c2:0d:cf:2e:a6:fa:2c:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3A:45:39:0B:D4:C1:6D:50:3A:E6:46:61:C8:D1:E4:E0:BD:60:E3
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:73:d8:bf:25:36:59:db:8d:1a:3f:6a:d6:4b:43:ac:5d:
         9e:26:d6:65:9b:82:17:2e:f9:2a:77:85:ce:07:72:8f:ea:db:
         d3:ce:36:10:6b:80:06:41:f6:55:8a:c3:37:eb:54:a3:bc:eb:
         85:3b:06:33:c0:38:b8:c4:d3:48:86:69:3d:48:54:44:ef:dc:
         2d:c3:d3:f3:d8:2f:fc:0e:76:a0:dc:9d:01:1e:2a:19:fb:09:
         99:c2:c7:38:83:19:f4:e8:d3:59:46:16:38:5a:31:46:64:56:
         6b:64:ce:a6:97:8b:e4:48:a6:59:d8:80:93:47:0f:23:d2:10:
         01:a6:4d:e0:c4:f3:bc:2f:86:e4:5b:be:8b:21:a0:93:d3:38:
         d4:7c:a5:cd:d6:d8:0e:f8:25:f1:0f:f8:66:bd:9f:36:8e:e5:
         d1:96:5b:b2:27:c5:ba:16:9d:a6:93:cd:f1:ef:17:0f:2c:5f:
         3b:cf:8b:78:44:5a:f7:28:0b:67:88:f9:6d:ad:6d:9c:4f:1b:
         50:4b:61:04:a7:af:02:d2:75:26:c1:ef:9a:63:35:49:06:93:
         62:83:15:3f:c6:55:74:91:fc:00:d2:0e:88:4f:99:50:d4:40:
         25:d5:4d:82:85:19:54:19:73:88:4d:10:85:bf:be:ec:af:aa:
         32:0d:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----