Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File:                     L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier:          cypj+ilUOH4G7bJoS79NqGCgvW8GCOUsh7RjHRP7uyE=
Subject key identifier:   5D:C9:23:8E:02:55:DF:A5:6F:91:0C:F8:6E:A1:3F:1F:20:93:91:D9
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer:       /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial:       01962E2AF183C05C40089AAB8167FDFF5B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number:          07A3
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: RjdJt1h8JvOwTh6isKklqv0JQYgIC7wrXC3cjNoWxF8=)
                          2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:83:c0:5c:40:08:9a:ab:81:67:fd:ff:5b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=5dc9238e0255dfa56f910cf86ea13f1f209391d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:fa:ba:ad:6f:4c:0e:2f:5b:45:3e:d6:54:
                    48:53:59:b8:ba:b8:22:62:9b:5d:08:2a:16:0c:45:
                    44:e3:4b:5b:a0:14:7c:8f:0e:13:6a:d1:11:18:38:
                    92:9e:2b:84:a2:78:b1:60:5c:8a:8d:17:24:9d:4a:
                    9e:cc:28:ae:fe:20:62:8f:65:6a:23:16:1d:61:9e:
                    2a:20:61:c3:05:11:9d:a6:57:34:8c:08:49:71:f4:
                    9c:24:43:22:cb:18:92:e0:47:74:69:bf:de:aa:29:
                    a3:dd:13:19:c5:08:cd:ee:76:95:b1:f0:7a:2f:30:
                    b1:d2:21:b2:3e:c8:cc:b4:89:2f:bc:06:6d:b0:c9:
                    26:64:23:27:40:18:26:a2:39:b2:3e:a2:32:4c:73:
                    4a:af:60:5b:6d:d7:33:79:8b:08:42:5f:28:f0:9c:
                    db:7f:92:98:d4:56:66:a9:cc:82:10:02:05:e4:45:
                    19:91:d1:8c:92:51:db:3a:c0:b2:9b:fc:f4:60:65:
                    55:d0:6f:5b:94:ca:a4:06:60:9e:0a:6c:68:28:78:
                    05:e2:65:74:91:af:7f:37:8e:81:8a:38:9f:42:1b:
                    16:81:b8:8e:57:a5:5a:d4:76:dc:7e:32:40:3b:42:
                    92:8b:6b:75:d3:b8:72:3a:6f:5d:d9:a7:60:f3:ac:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C9:23:8E:02:55:DF:A5:6F:91:0C:F8:6E:A1:3F:1F:20:93:91:D9
            X509v3 Authority Key Identifier:
                keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:db:f8:cb:d5:2b:b5:b6:13:d7:01:c5:50:98:94:08:3d:
         e0:1b:2c:43:80:24:bb:83:24:b0:9f:d4:50:42:3f:f0:13:65:
         e1:8d:cb:b5:d1:e3:02:85:69:88:66:d4:2f:6c:a5:9d:dd:a5:
         a8:f7:d6:46:15:72:53:78:f2:f5:c9:00:fd:e9:0d:e5:a6:4c:
         87:46:62:85:82:14:4e:9e:02:6e:3d:d5:78:a1:06:73:1f:7a:
         a4:44:b6:da:d8:c6:6e:d4:cc:13:5c:fd:fb:ca:ed:8c:d3:2e:
         31:c4:a4:92:06:ab:09:89:16:8b:e0:01:f7:b1:90:1d:c2:52:
         4e:d8:4e:71:4b:5f:49:bd:7e:b8:e0:69:32:b4:ad:37:c3:d3:
         89:27:1f:c8:dc:49:6e:7f:26:8d:1f:49:e1:a1:32:ee:a4:91:
         2b:e2:6d:37:74:a3:e6:36:4b:df:a0:a0:c6:1d:ab:7d:2f:12:
         4a:8a:8b:2b:82:41:56:e5:87:4b:61:04:b8:ab:f0:be:5d:84:
         d2:60:48:63:51:80:ac:2f:aa:03:41:8b:36:73:39:02:56:a9:
         a2:b2:0e:89:84:20:29:76:ad:9d:11:8b:53:ff:54:40:a9:28:
         16:2f:e4:d0:eb:e7:0e:f4:33:a9:e0:37:a5:07:39:92:43:80:
         4c:e8:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----