Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File:                     L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier:          1p69fZh4Y2DuDzD2+lKQX9H1z3MFAhYy4uz7UKpr8Vs=
Subject key identifier:   9B:62:D4:C5:81:D9:C2:30:A3:62:79:33:75:CF:F8:E0:A4:A5:32:52
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer:       /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial:       01962F74A66E9079122ABABEBF167715ABC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number:          14D3
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: 0fsYb3G6NggmYRazvDKNtWXw1qdw6+bTlj+vIHvtMDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a6:6e:90:79:12:2a:ba:be:bf:16:77:15:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=9b62d4c581d9c230a362793375cff8e0a4a53252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:e6:35:2c:c8:82:72:2d:ad:c1:1c:2e:43:
                    18:a0:51:cf:57:34:09:71:72:f9:c5:d9:56:6c:3a:
                    f9:70:1e:d0:2e:bb:10:80:22:21:08:f6:16:af:92:
                    e6:dd:a9:73:dd:76:a1:14:55:e8:7e:b4:32:f7:f1:
                    f6:82:54:0d:87:ab:fe:b0:fc:98:45:33:29:a6:aa:
                    f9:fd:6f:c8:ef:4a:40:ae:59:cc:3e:f0:27:34:c6:
                    be:a7:f6:76:96:72:bf:e3:40:ab:80:e8:08:98:7d:
                    71:9f:d4:78:da:ab:c5:a3:a1:64:5d:b6:8a:47:f7:
                    b2:9d:6c:7e:d5:5b:8a:e8:bf:bc:79:31:44:76:87:
                    43:7d:b9:06:06:f8:2a:86:4b:a0:31:7d:57:97:e4:
                    08:29:2e:51:54:02:ea:54:14:bc:ce:2e:2d:e8:c2:
                    cb:87:cd:17:a4:05:ed:f2:5c:aa:2e:0b:b3:99:b4:
                    d7:27:08:f1:41:2f:a7:64:67:20:d9:05:06:b1:3d:
                    37:6a:2c:f7:ef:10:4c:e0:20:ee:c4:7a:df:dc:19:
                    dc:dd:e4:51:6d:23:be:25:d4:fe:36:a4:81:d9:ce:
                    ac:7e:30:75:8e:86:1b:24:bc:e8:1b:d6:78:1d:5a:
                    c3:d3:90:05:c4:c3:e5:3d:b1:d2:f1:91:8e:f8:87:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:D4:C5:81:D9:C2:30:A3:62:79:33:75:CF:F8:E0:A4:A5:32:52
            X509v3 Authority Key Identifier:
                keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:a2:0b:f5:04:e1:5f:04:1e:c2:a8:28:b8:e4:9d:de:fd:
         53:a3:30:2b:da:50:f4:b2:2d:3d:69:d2:05:81:45:bf:0b:6e:
         06:7f:e3:1e:90:b1:5e:45:67:cb:92:d3:af:c4:92:fb:5c:46:
         b6:79:86:2c:a6:ed:3c:0f:48:3f:b8:5b:8d:a4:5f:7e:a8:e8:
         67:b3:5f:55:28:75:d9:0b:53:5d:8a:80:7e:32:eb:cd:a6:be:
         fc:66:e5:38:72:b4:24:01:f3:07:e9:3c:0a:4c:ca:76:5b:1c:
         53:09:ff:d1:71:2c:e7:f2:89:ae:33:8e:c0:d9:1c:1b:60:b1:
         f0:c9:7b:54:b5:08:db:eb:c4:31:be:a6:a4:ab:59:de:3f:91:
         b7:9a:d0:a8:92:f9:ab:47:5c:48:58:6d:55:24:97:84:67:10:
         3d:e3:af:ab:c8:7a:03:45:6a:c5:5c:b4:23:af:9b:95:84:f3:
         ee:4c:2e:b5:79:ce:ce:9a:e2:d9:83:04:83:d1:9d:b7:89:11:
         74:31:00:23:a1:31:59:51:f3:f4:91:f9:9f:e6:ae:19:85:77:
         c6:6d:f8:a4:34:c3:8d:95:6d:df:47:31:f3:dd:61:96:c3:db:
         d2:f3:46:c6:f7:6e:7c:87:76:87:c8:46:71:e3:f1:ee:ef:b3:
         82:0d:93:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----