Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File:                     L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier:          ANxxE+QbxoGlEqjhgdsNd9I197A9HyntZNjbZDJd1Dk=
Subject key identifier:   6B:FE:A2:62:98:29:65:73:93:06:E4:5D:FA:7F:C1:F6:C3:C6:C1:E7
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer:       /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial:       01962F749C291E7CC91EA269356F743C15D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: 1KPrx97Pv0Oa0UhA5Kjiq4kv8s+iVKDoo6/NsnOzPhE=)
                          2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9c:29:1e:7c:c9:1e:a2:69:35:6f:74:3c:15:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=6bfea262982965739306e45dfa7fc1f6c3c6c1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:45:c5:52:f6:95:36:bc:74:13:58:92:cf:
                    aa:0e:13:85:8c:89:89:12:4f:7d:53:c8:d9:9f:76:
                    7e:4a:0a:63:5c:3b:25:b9:b2:91:af:36:5d:ee:84:
                    a4:d1:db:6a:ac:b3:c0:a9:53:27:a2:7c:5c:b3:1f:
                    31:e0:a8:e9:1f:f0:41:11:58:71:37:25:2d:4d:93:
                    85:98:34:97:e6:fd:3e:50:f8:ec:10:9b:90:b9:8b:
                    b1:fd:59:06:23:a1:e3:67:21:d8:be:cb:a2:b2:2a:
                    29:90:c2:c1:1b:d8:21:99:7d:34:15:2b:cb:ce:e3:
                    7f:ad:dc:76:db:66:d4:81:56:7f:f5:80:56:f3:02:
                    61:eb:34:38:40:5d:4f:5f:06:46:a1:78:a8:ab:c8:
                    ac:5e:12:6c:c4:51:3d:99:93:ca:71:02:37:7a:e5:
                    b3:18:5d:52:00:9e:f5:82:b7:02:76:51:c1:80:0f:
                    01:5d:2d:89:d4:ec:2f:26:64:c6:23:98:23:5e:23:
                    3c:1d:61:f6:ec:65:09:31:84:8f:c7:e6:5a:fc:02:
                    84:f2:b1:c2:40:c5:6c:23:ce:c2:b8:b5:c3:37:83:
                    18:f2:51:6b:68:a5:02:80:bc:4e:e0:ff:91:33:5c:
                    68:27:0e:2a:c9:0f:36:53:a8:c5:1e:c1:1f:da:cf:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:A2:62:98:29:65:73:93:06:E4:5D:FA:7F:C1:F6:C3:C6:C1:E7
            X509v3 Authority Key Identifier:
                keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:ce:96:b5:e0:e0:59:f5:2e:22:c8:7c:46:ec:cf:92:a9:
         06:ed:ca:42:66:ac:ac:de:9e:63:17:33:33:e9:52:99:08:f1:
         0d:cb:84:da:b5:90:9e:55:17:41:9b:9c:b4:0b:de:8e:ea:85:
         e0:a2:e9:38:73:6a:55:4b:0c:aa:87:10:76:0b:21:ea:70:6e:
         75:9e:9a:4b:54:ed:05:f0:93:d3:a9:3c:71:84:48:1a:1b:17:
         2e:a6:7e:91:c3:ec:c3:ab:30:3e:86:4a:83:ef:cb:91:4f:bd:
         12:18:85:48:a5:f4:bc:ce:0e:15:9d:66:ef:73:24:a0:e7:15:
         d3:20:6d:20:5d:76:2f:10:45:5a:80:e9:22:fc:77:98:d3:99:
         77:7d:e4:15:54:87:5a:7c:c3:dd:62:42:c8:ea:93:c7:15:d5:
         40:60:a6:c1:6b:4b:82:ee:92:86:6c:8a:25:15:06:c0:3d:57:
         31:a7:04:59:44:67:6c:d1:5e:a5:72:11:33:33:9c:80:1f:12:
         09:eb:ed:cf:46:32:55:0f:b8:3c:86:53:95:56:36:0f:30:ae:
         08:65:ce:cd:90:3e:d6:c1:97:bb:30:fd:6b:8e:09:78:7a:ae:
         56:dc:83:de:99:42:06:4b:fb:92:86:35:0a:bc:69:d7:ac:b3:
         d1:b3:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----