Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File:                     L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier:          VLHjfMdnZcCwppERmm035FY3d6IAhBc/bSVttGk9Kgs=
Subject key identifier:   00:C1:ED:0A:A9:CF:CC:28:1D:AD:9F:51:61:8F:3D:7D:3E:D0:77:59
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer:       /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial:       01962F3D9748087991DE27875097C667FB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number:          0C47
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: 6Vx05FThhk3iCswRSxzo7mkI505IpprGEcrm1xEvUJM=)
                          2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
                          3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:97:48:08:79:91:de:27:87:50:97:c6:67:fb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=00c1ed0aa9cfcc281dad9f51618f3d7d3ed07759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ef:77:da:0c:a4:46:3d:13:05:c8:5a:26:ce:
                    b3:ac:30:46:75:87:10:30:57:5b:87:6f:bd:b4:2f:
                    69:61:30:99:b3:76:42:65:89:d4:da:e9:6a:02:74:
                    78:a2:b1:b2:b2:d2:8f:81:e5:55:da:24:62:4c:91:
                    0f:ed:92:08:3a:75:71:26:e3:aa:0a:8e:02:ff:5a:
                    8b:07:c3:48:6d:79:e8:62:08:97:86:6e:a6:72:05:
                    30:d2:10:6e:df:8c:9d:7e:31:c7:f1:01:35:21:fa:
                    d7:29:32:c9:26:50:fb:b4:f6:1d:30:95:dd:14:23:
                    31:f9:c5:79:3b:a9:fc:e4:c5:77:01:05:0b:4a:d1:
                    d7:fd:de:f9:b0:16:e5:fe:71:76:b4:e4:cd:bd:d2:
                    80:1f:30:3b:ae:ed:02:98:96:ab:7b:5d:21:ec:dd:
                    9f:61:21:78:5c:fe:b7:b0:04:89:4f:d9:74:6a:70:
                    ab:49:5d:0a:79:e4:32:67:55:69:13:88:38:42:d0:
                    e2:67:ce:41:c8:f1:60:9d:1d:45:55:c8:60:f9:4d:
                    5d:f6:33:f4:57:76:5e:ca:77:fe:7d:c9:ea:52:89:
                    84:32:64:16:59:be:c0:03:b4:d8:91:66:08:51:aa:
                    3d:df:cf:9b:33:23:3d:cb:4d:22:d4:00:97:f5:11:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:ED:0A:A9:CF:CC:28:1D:AD:9F:51:61:8F:3D:7D:3E:D0:77:59
            X509v3 Authority Key Identifier:
                keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:88:aa:dc:01:6e:04:4f:2f:ef:08:e4:91:6c:b6:f2:0a:0d:
         ca:15:72:bf:51:12:4d:86:63:15:d9:90:86:e7:b7:ad:9f:b3:
         09:de:c7:74:dc:c5:77:39:cb:8f:b4:e3:1b:08:9b:0b:ca:f2:
         ba:d8:aa:a3:1e:dd:f2:f0:2a:0c:07:af:ce:30:ff:3f:a8:44:
         db:cf:e7:da:22:72:92:93:dd:c5:57:7b:1f:ab:5e:82:af:98:
         d9:3f:3e:70:8f:91:a0:19:62:20:de:0f:22:ab:91:e6:fb:c5:
         a5:e3:be:12:6f:23:5b:50:8a:ea:40:0e:7c:8d:1b:0b:04:fd:
         13:31:a1:f3:23:1e:9b:93:6d:4c:3e:99:af:98:d9:07:d0:a8:
         cf:2b:f6:36:06:d2:e1:cf:1d:34:19:48:17:ff:d6:59:ee:42:
         8b:ce:56:33:f2:b0:33:61:47:8d:f7:23:84:16:ff:d3:52:ed:
         58:6c:81:6f:9a:e6:7a:93:85:a8:95:dc:f0:6f:d8:1a:b7:5c:
         97:7d:23:a1:bf:5a:7f:d5:15:17:a7:c8:7f:18:4b:e2:45:65:
         da:f5:ad:ff:7d:d4:f4:67:ea:bc:ce:d0:47:27:25:4a:b8:16:
         07:17:ec:10:39:16:28:56:6c:94:a1:3a:8a:d0:9d:f3:52:48:
         98:4c:73:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----