Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File:                     L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier:          jNJ+DC3Db+99HfMJfQoNAqH1ZNyLbp1DjH7N2Pg6TNY=
Subject key identifier:   B2:C2:3F:CC:83:62:C1:0A:CF:96:98:A8:A2:77:E5:8A:E1:CB:C9:A4
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer:       /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial:       01962F3D356C0C75CA1A2B1C0BC69B81338D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number:          0598
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: RLbMCzUcZT3+9GOBuFcf6FEvZTznjV6LwtjyZAQPCWo=)
                          2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:35:6c:0c:75:ca:1a:2b:1c:0b:c6:9b:81:33:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=b2c23fcc8362c10acf9698a8a277e58ae1cbc9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:00:a1:a6:0a:7f:08:59:66:74:5e:0e:ba:
                    8e:40:87:6c:9e:02:d4:90:10:dd:a9:f1:fc:23:46:
                    64:86:28:3e:89:90:2a:60:f3:5c:02:21:19:4f:16:
                    81:21:a6:59:eb:9a:49:4e:c6:99:f7:41:6e:f2:65:
                    da:5e:0e:58:19:5e:48:a1:b9:8f:db:b8:15:a7:cb:
                    ef:ea:9b:ef:0a:ae:a6:1e:f9:89:cd:4e:ec:4f:ae:
                    a8:70:78:41:08:96:ce:7d:1d:db:f8:c5:eb:3a:fe:
                    42:11:62:49:56:42:38:58:f8:72:52:5b:fe:de:74:
                    fa:d3:ec:d5:c7:51:ad:b5:ad:33:88:dd:a5:c7:6a:
                    53:80:65:5d:ce:58:e1:2f:bc:12:59:f2:10:29:ca:
                    ba:53:76:cd:f2:a1:38:b4:ff:be:78:99:67:e2:ce:
                    23:38:7d:d0:23:23:ed:be:a5:dc:df:cd:66:ef:7a:
                    6e:1b:69:c2:dd:57:d6:52:7f:dc:cc:1a:c1:fa:b2:
                    8d:6d:1e:52:3c:59:ec:78:27:12:f3:2c:f4:d6:d2:
                    20:fd:95:80:4d:ee:20:5f:fa:09:43:9e:b7:44:1a:
                    cd:7a:6d:fc:2c:0b:ca:e1:b7:8b:0d:12:40:2e:f2:
                    40:66:8a:88:0a:84:16:8f:5e:80:77:78:f4:7f:97:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:3F:CC:83:62:C1:0A:CF:96:98:A8:A2:77:E5:8A:E1:CB:C9:A4
            X509v3 Authority Key Identifier:
                keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:90:f2:09:44:9d:7d:c4:76:e0:a2:85:b9:53:98:1b:6b:d0:
         5f:80:f1:d8:ac:3b:d1:55:4e:1f:37:c3:fd:9b:46:24:60:d4:
         c7:2f:3d:16:8d:0f:26:cf:13:6a:4a:ab:0b:b7:a8:8f:c4:36:
         2f:7b:a9:4b:9d:87:5f:08:3a:1d:a8:a3:e6:96:8b:6e:9e:cc:
         19:ea:8d:e0:c4:4e:43:f1:7f:5e:b6:83:dc:3d:f3:e3:52:e0:
         fa:a0:8e:9b:33:47:07:41:2c:66:b1:a2:a5:f8:e2:26:95:8d:
         dd:f1:db:ca:76:18:9c:5c:f3:24:c3:32:ae:27:1e:ac:1f:05:
         ad:39:9c:57:08:5b:de:d7:d1:02:52:dc:de:46:54:7d:61:e9:
         47:28:c0:61:45:d6:b9:be:02:30:a5:33:00:06:1c:89:44:57:
         a1:60:fa:bf:5b:bf:88:c6:f5:87:fd:e8:9b:28:39:cb:49:22:
         3e:54:d9:c0:02:c1:0a:91:a1:68:74:5e:13:70:b9:96:2b:d8:
         0f:c1:fa:47:29:97:90:cd:3a:23:dd:95:d5:e2:9a:fb:f7:85:
         b3:47:c6:20:2b:55:e9:e0:12:fa:64:a8:9a:3f:75:a6:8b:25:
         38:cc:c1:52:e8:ee:ec:40:7b:9d:30:ce:69:21:5c:fd:65:ac:
         80:8d:cf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----