Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File:                     LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier:          5P3KKuzKAU4W7OLJoJzqEKAl820F6FYUiDuwOYAEbCs=
Subject key identifier:   9B:60:91:3A:3C:83:A3:1A:A3:EE:01:7A:A3:26:A9:7C:2F:E9:E5:C1
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer:       /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial:       0195E12254301E43C4F7C565952D713B5E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number:          1428
Signing time:             Sat 29 Mar 2025 09:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:18 +0000
Files and hashes:         1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: 6dRjxbmWO1aIlXyGggLDoFb1+/L5FmRdFQOXuY2eHbw=)
                          2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
                          3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:54:30:1e:43:c4:f7:c5:65:95:2d:71:3b:5e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
        Validity
            Not Before: Mar 29 09:01:18 2025 GMT
            Not After : Mar 30 09:01:18 2025 GMT
        Subject: CN=9b60913a3c83a31aa3ee017aa326a97c2fe9e5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:57:30:a9:57:03:4d:11:df:62:5e:49:84:
                    57:d1:59:2d:b0:83:c3:df:18:45:fe:cd:4f:6d:da:
                    1a:63:d3:d8:4d:8c:c4:86:d3:26:99:9a:4a:e8:3e:
                    31:d9:f4:14:03:40:ba:23:ad:6d:16:e5:7c:cd:58:
                    77:b6:cb:05:11:34:b0:2e:98:b7:97:6c:7a:bb:82:
                    5c:07:66:af:ea:a2:8f:92:0b:ed:19:e9:1e:4a:f3:
                    86:86:65:c4:d8:f3:d4:7d:35:92:3c:c1:7c:44:e4:
                    90:82:92:72:07:0b:fa:3c:eb:db:a3:be:37:fa:e3:
                    70:f6:6e:60:dd:1a:7e:69:03:f2:18:cd:76:e6:50:
                    09:95:ad:24:b0:7b:6f:3c:0b:4f:2f:c4:63:3c:06:
                    c6:35:cc:c5:32:6d:74:2e:09:78:a2:67:72:4e:03:
                    e2:47:07:22:31:0e:6d:b8:9b:d4:74:ac:f5:04:38:
                    8a:ad:5e:e6:9d:bb:f1:02:dc:a0:0c:c4:e0:88:eb:
                    d5:f3:00:34:7b:b0:0c:44:d6:08:52:b9:1e:f0:d1:
                    df:e2:62:c5:ed:cb:29:4b:d2:69:ac:90:cc:07:5d:
                    aa:b9:30:b5:5e:e8:5c:17:4a:b9:63:49:f8:b1:c6:
                    66:ad:68:63:c2:96:4c:7b:57:53:a9:d1:e7:c9:11:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:91:3A:3C:83:A3:1A:A3:EE:01:7A:A3:26:A9:7C:2F:E9:E5:C1
            X509v3 Authority Key Identifier:
                keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7e:76:4a:84:63:ff:92:27:52:4d:22:47:9d:8f:e0:c1:de:
         45:a3:f5:82:e7:2d:17:a6:84:db:8a:75:7e:7b:d5:b4:6d:a3:
         82:f4:18:20:a3:eb:49:6c:82:91:88:ac:5a:83:be:06:b8:41:
         f3:ab:74:57:b6:47:fc:94:05:26:ae:02:63:2f:49:ac:41:0b:
         a0:9f:88:26:2b:cb:85:17:7e:40:43:cd:bf:65:33:38:bd:42:
         f6:80:5c:a4:97:19:76:5d:f3:34:7f:92:de:03:38:26:d5:e4:
         a7:9b:84:c9:79:20:b9:84:e2:8c:86:05:a2:67:1b:e6:05:61:
         a5:de:65:4a:4e:11:ca:00:76:f7:d7:a8:56:5e:70:52:c2:13:
         b8:fa:a6:42:95:e8:d8:3e:7c:24:d4:ac:e4:22:a1:b2:0a:6d:
         64:5f:e4:7b:45:5d:37:58:cc:eb:db:48:04:a7:ad:4e:8c:40:
         ca:ac:22:cc:0a:20:bd:91:0d:cf:b4:45:d5:07:63:31:b1:8a:
         31:79:94:5a:9e:24:0a:5b:2f:27:74:e9:ab:a0:17:3f:f4:05:
         ea:0b:22:21:4a:83:c2:3d:4f:44:c9:a5:fe:f7:52:19:d8:24:
         49:66:8b:45:e9:a9:7a:05:84:d1:47:e9:2d:b3:c9:6e:15:5c:
         b7:7c:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----