Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File:                     L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier:          sSnQp6ixlD0Kff9cY+rJU+iOrj0MsZNYaVperTpacxo=
Subject key identifier:   5D:B6:AE:A4:B6:B5:3A:13:7D:22:1D:7B:A0:E0:0A:C3:BD:51:50:79
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer:       /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial:       01962F06F3DF141D723284122F7FFC80D9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number:          0B45
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: a/FQOEGoLtp9wbGbNXPNAtHt+MqX9b2Q1SVci8zpV4w=)
                          2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:df:14:1d:72:32:84:12:2f:7f:fc:80:d9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=5db6aea4b6b53a137d221d7ba0e00ac3bd515079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:62:5a:85:7c:d2:90:7e:f8:5f:da:97:57:
                    d7:20:8b:91:2e:21:5f:55:2e:0a:e7:68:d3:30:03:
                    4d:65:a6:a2:10:4e:b3:f3:bd:78:aa:37:41:08:14:
                    48:08:39:cd:53:c5:d4:68:a5:f0:a2:42:e8:05:1a:
                    dd:cf:07:91:7e:2e:f3:d4:42:fe:91:2b:cf:17:c9:
                    be:28:b0:41:d1:40:e6:73:21:60:fa:c2:ca:f0:f9:
                    1f:2d:2f:c8:32:75:ce:4b:ec:87:f9:aa:87:df:e3:
                    6a:bf:d9:3c:4c:79:b1:15:82:42:a1:62:69:41:01:
                    b5:c8:da:5f:df:1d:1b:bc:ea:76:46:db:6f:7a:82:
                    0e:d8:d4:70:bd:6a:75:d8:e0:e9:2a:db:1b:91:17:
                    b9:49:fb:60:c8:a4:c7:17:b9:42:ba:48:0e:0c:62:
                    bf:b9:70:a6:5c:13:ad:93:61:09:cd:b5:81:94:c4:
                    3a:4b:95:06:83:72:42:f1:c4:de:6b:65:56:89:80:
                    1f:81:45:8f:2d:56:04:de:0e:98:3d:77:91:81:fd:
                    15:15:c9:0d:c0:8c:9d:f1:90:67:57:c6:69:a1:9f:
                    99:fb:f2:7c:d5:5c:84:48:40:65:fe:59:55:e1:12:
                    b1:ff:c6:13:03:19:14:d1:eb:98:32:1c:7d:3d:ff:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:AE:A4:B6:B5:3A:13:7D:22:1D:7B:A0:E0:0A:C3:BD:51:50:79
            X509v3 Authority Key Identifier:
                keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:24:7f:d1:fe:5c:4b:90:ef:5d:fb:42:28:37:98:a6:92:
         7c:6f:4e:3c:92:24:c5:7e:3f:6c:55:c0:76:87:65:64:66:7c:
         df:1e:b9:a0:1d:71:68:83:90:d2:c1:31:f4:3c:5c:5b:20:81:
         94:f9:b6:f0:f3:6c:3a:09:b7:f6:a6:9b:69:32:f0:f2:0b:f3:
         a5:7a:25:e9:6a:19:43:5f:a5:11:91:23:e6:49:8d:35:11:91:
         46:40:ff:bc:8f:62:7d:f5:62:c4:0b:f2:05:ee:46:5a:fb:f4:
         8a:e2:64:0a:20:2a:dd:e0:b0:a4:b1:09:4d:84:d8:94:aa:74:
         4c:21:7d:30:f2:c7:67:c1:b7:51:44:d9:07:2d:05:e6:93:d1:
         14:b8:12:15:b6:d0:56:b2:0f:1b:e4:21:8b:c0:9c:95:1b:b5:
         50:d1:9b:74:0b:5a:d6:96:26:c0:2f:66:b4:90:bb:24:04:cd:
         fb:1d:f1:45:43:96:4a:dd:da:b7:37:cd:09:10:1d:0a:a2:c1:
         9b:6c:b2:1c:ba:69:ef:3b:5a:79:4f:11:a0:66:63:a8:45:ed:
         c8:ab:a0:79:f4:70:20:c8:75:f1:dc:31:31:3f:52:9e:a4:c1:
         0b:e1:e2:85:32:cd:18:14:c4:42:41:6c:4b:ac:33:8d:48:24:
         f3:95:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----