Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File:                     Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier:          j3WUihnAUqdGf29ObEyOMsAfd2cjp6UmBjTX+IRcNAI=
Subject key identifier:   12:12:E8:55:81:53:8B:6E:7E:5E:7F:32:5A:83:05:4C:C3:5D:17:76
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer:       /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial:       01962F3D3E47F8F8524430BFFE11FA6BAF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: VPFExEhUGMKCy0s2Rjpa3r9L5ChfKAmuzfEunez0US8=)
                          2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
                          3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3e:47:f8:f8:52:44:30:bf:fe:11:fa:6b:af:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=1212e85581538b6e7e5e7f325a83054cc35d1776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:7e:9c:43:9a:c2:d1:98:d9:69:1d:0c:21:
                    92:7f:cc:f8:b6:1d:7b:35:c1:ed:05:d7:7a:7a:e6:
                    9e:eb:21:6a:ba:43:97:3d:99:68:b6:32:2d:01:52:
                    b9:23:ba:de:5c:2b:96:0f:27:a3:ab:50:43:44:77:
                    dc:8a:3e:3e:06:e6:54:95:6c:d2:d7:db:a6:53:fe:
                    25:9d:68:27:68:9d:1c:7a:47:c7:61:06:81:23:6a:
                    3e:0d:d2:54:7b:48:3c:ce:3a:74:28:58:67:dc:a5:
                    2c:44:bd:7f:1b:32:d2:d5:8c:69:cb:10:b0:16:4a:
                    25:26:46:84:f7:4e:f9:da:15:89:d9:4e:ab:c0:14:
                    1f:d1:74:c4:a6:c2:03:46:fc:d7:a0:8c:3a:b2:65:
                    5d:49:f5:d8:91:ff:eb:00:1a:b6:e8:99:41:5e:3c:
                    57:70:25:30:ed:9c:fe:43:69:0e:83:da:00:d9:7e:
                    8a:e7:28:97:13:a1:3b:9f:12:3c:06:74:f2:0e:54:
                    61:b4:1a:e4:2a:ac:11:bd:13:4b:ea:91:a2:d2:f3:
                    b7:b4:33:4a:8f:67:0a:24:da:e4:ad:9d:f3:f1:e2:
                    79:48:5c:b0:a2:c1:90:d6:55:6d:33:3a:7e:2f:97:
                    e0:5c:0a:c7:92:67:a3:26:f2:65:8c:3c:68:41:21:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:E8:55:81:53:8B:6E:7E:5E:7F:32:5A:83:05:4C:C3:5D:17:76
            X509v3 Authority Key Identifier:
                keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:cd:82:96:5e:ea:57:9e:54:4a:d2:7a:c9:e6:0b:d0:0f:
         90:6b:73:d7:06:71:0d:73:fd:4a:c9:8d:31:51:73:ac:e1:e8:
         45:5b:98:39:a2:ce:ae:75:01:8b:33:23:00:51:58:ae:f8:fe:
         3e:2d:63:64:16:46:d0:24:76:61:3c:3c:bd:8f:2f:ea:c4:1b:
         ac:44:dd:6f:3c:74:95:fc:3d:45:37:fe:75:b4:d9:66:3e:97:
         35:ba:0f:0d:7e:92:78:64:43:b1:1e:20:f1:bd:8d:ad:e0:29:
         30:d1:0e:8e:20:0e:0e:0e:f2:81:1c:f2:17:b4:ec:f2:2f:84:
         60:d7:24:02:37:ef:74:1e:20:67:a5:c8:19:84:ac:91:b0:9e:
         a1:70:08:8f:b8:3a:3d:d0:5f:53:8d:de:d5:20:bd:89:39:f8:
         80:49:e7:2b:9f:bf:86:32:12:3e:97:45:85:53:a0:41:7b:25:
         82:61:8b:b7:40:ee:03:9e:6b:60:67:9b:6f:6e:17:1a:9d:23:
         5a:72:3d:7b:c3:17:84:c9:c3:a0:af:41:f1:99:dc:c9:34:7a:
         24:61:d7:c1:f8:d0:93:bd:b6:f6:4f:dd:85:56:41:6d:7d:f8:
         73:ea:6d:e0:da:a4:06:6d:df:88:ff:37:07:72:39:49:c2:86:
         0c:75:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----