Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File:                     L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier:          vqogp0vc6QGcoKK3LLGM3ePS8y9c2tgX7u9PdpVtMUY=
Subject key identifier:   0A:84:59:BD:E9:D9:BB:D3:43:68:94:A0:EC:51:5B:94:52:0D:78:80
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer:       /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial:       01962F06448C0A71F1E3A7AC423A998EF9BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number:          0331
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: Ib3SsjbGIFwHbsmoxR7KvkLGC66O8+f1JtdmSGW5lj8=)
                          2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
                          3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
                          4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:8c:0a:71:f1:e3:a7:ac:42:3a:99:8e:f9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=0a8459bde9d9bbd3436894a0ec515b94520d7880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:4d:59:c9:88:4c:2a:6d:50:7a:1a:13:6c:
                    eb:85:f0:be:a2:f2:f1:68:9c:dd:ad:39:b1:5f:b8:
                    18:f2:e1:8c:a1:14:1c:b1:cb:bf:ca:53:ca:35:e8:
                    2e:b7:e4:3b:c8:34:6d:c7:76:5c:ac:da:26:00:cc:
                    14:c8:04:e6:97:47:82:f3:46:fe:d4:26:22:c5:79:
                    7a:b4:fd:70:6d:6f:12:b9:5f:5c:4d:74:db:d3:4e:
                    e9:d4:8a:ab:d7:8a:98:76:1f:3e:ed:a4:f2:41:cf:
                    97:e0:2d:7c:47:50:a1:2d:d6:3e:a9:13:74:43:9f:
                    4b:46:05:05:bd:b1:40:b1:30:ce:84:24:4e:9b:ac:
                    74:c8:6a:20:24:88:e8:16:b0:e7:bc:21:db:bd:06:
                    e2:3b:25:b6:38:4c:6c:9c:09:34:2a:d6:7e:8d:51:
                    fc:f2:56:c8:cc:31:74:09:4e:35:ec:71:94:d2:34:
                    e2:c9:83:25:1c:8e:41:ca:72:a4:88:67:df:ac:67:
                    47:80:ed:0a:d2:d9:12:b4:9c:13:2f:89:1d:46:f1:
                    3a:11:6e:4d:59:44:f9:9b:63:df:59:ab:f1:da:76:
                    91:7b:00:29:05:c8:85:1d:b5:0a:73:2c:3b:01:7c:
                    90:27:bc:86:ce:18:bb:c7:42:f4:ee:ee:47:d0:26:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:84:59:BD:E9:D9:BB:D3:43:68:94:A0:EC:51:5B:94:52:0D:78:80
            X509v3 Authority Key Identifier:
                keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:a7:48:c8:fb:3e:86:28:3d:8d:a6:39:19:fd:f7:36:e2:
         ce:63:78:93:c8:42:77:f2:65:df:c9:5e:13:4a:13:a6:b8:cc:
         3e:45:14:54:2e:71:a7:6f:1c:1d:ff:f3:8b:a8:6f:31:cf:0f:
         8a:d2:8c:2b:9c:06:54:da:76:fc:f7:98:f8:34:c3:5d:4d:14:
         da:dc:00:ed:e9:aa:cf:c8:11:5d:45:91:08:eb:90:75:fc:e0:
         f3:24:3a:4a:81:84:b6:59:d9:d3:25:d1:19:ca:23:41:f0:b2:
         80:b6:42:a7:ec:b3:8d:be:82:19:fc:08:62:c5:ad:44:76:aa:
         99:3a:0e:56:04:90:f0:1d:98:8f:ee:a5:ba:80:3d:01:a3:e6:
         83:65:a4:c6:ba:c6:d5:65:cc:96:b9:ae:86:7a:8c:70:e3:1a:
         c7:0c:fd:3e:ca:0c:3d:7c:30:d6:d2:fb:45:c2:aa:21:b2:7f:
         1b:cf:42:9e:32:4a:0e:13:0e:68:6f:0b:43:7d:f7:63:2e:ca:
         b3:2f:f0:64:e1:8c:16:88:3b:4f:15:a9:5a:cd:05:21:07:9e:
         d0:ea:78:bc:db:a5:1b:74:2a:04:b4:d2:15:0f:3b:5b:e0:cc:
         f8:bf:1e:81:7f:6f:f4:ea:54:37:7a:56:84:75:f8:b9:52:de:
         de:60:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----