Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          ZrIL7vNbcKP7zA5KixZjUCGsg6O4JZnJtbebCmmJnsc=
Subject key identifier:   0E:F2:F2:FC:CD:7C:7C:B0:2F:D6:B0:26:F9:D2:B6:62:49:A7:07:7B
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       01962FAB44A4FBB35AFACA8784C57A4A02C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          05FF
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: 458XqfA+RkUkSXpqyMaBJxHT7IiuYC0TjzEMJAuXiI0=)
                          2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
                          3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
                          4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:44:a4:fb:b3:5a:fa:ca:87:84:c5:7a:4a:02:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=0ef2f2fccd7c7cb02fd6b026f9d2b66249a7077b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:a5:47:be:72:90:fd:4f:17:65:a3:c5:40:
                    63:56:6a:96:e1:88:1a:5b:65:05:93:03:a0:15:cc:
                    07:9d:63:78:aa:e6:0c:a9:57:eb:f1:cb:bc:80:f3:
                    8a:3c:1c:c9:75:0e:4b:f8:db:10:16:19:df:25:7d:
                    97:48:06:19:32:98:84:43:7c:b9:1c:53:76:f8:e0:
                    a5:a0:9d:62:ca:e5:4b:8b:32:61:72:b9:5e:e8:f8:
                    39:f2:e3:ed:d7:20:6e:c6:78:28:89:7f:9b:10:bc:
                    93:b9:8f:79:b4:79:d1:ef:bc:c5:de:31:cf:2a:a2:
                    9b:72:94:c3:64:d8:c3:88:ba:d0:e7:3f:30:d4:75:
                    3f:1e:07:00:74:8e:ca:59:37:c3:19:96:1b:88:1c:
                    35:84:60:75:b2:03:20:07:30:b2:5c:94:ab:b1:2b:
                    6a:30:da:aa:4e:26:7d:69:e8:79:5e:d3:3e:d0:ec:
                    1a:26:fc:5f:67:9f:4b:36:38:47:af:26:60:eb:3b:
                    56:9b:67:22:c9:09:79:47:4a:0c:9f:e5:5c:3a:d2:
                    1c:90:8a:8f:f9:e6:da:5e:a0:e4:fd:c0:19:4e:96:
                    ae:37:93:81:20:b7:ce:e4:92:57:c4:15:ca:5c:5b:
                    9c:61:01:46:15:e2:60:01:b2:b4:01:69:24:01:c7:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F2:F2:FC:CD:7C:7C:B0:2F:D6:B0:26:F9:D2:B6:62:49:A7:07:7B
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:c8:12:25:ea:9e:79:89:04:61:16:1a:31:3a:63:a3:45:
         f0:c4:08:77:1c:2c:71:13:be:14:13:67:18:42:a0:60:3e:b7:
         db:03:0d:fc:8f:09:af:88:c3:1c:48:4f:da:7d:59:5b:68:85:
         73:44:b1:bf:52:5f:c8:a7:25:d8:52:eb:77:27:c0:11:ad:a9:
         ef:48:37:e8:25:38:93:5d:4c:fa:ab:5b:71:c5:9a:d5:76:24:
         e2:aa:c9:56:67:5a:35:24:72:bc:16:b2:27:47:43:52:90:e5:
         71:23:45:d2:ff:b7:eb:fd:45:66:c9:cd:6a:25:49:ed:cc:57:
         00:9c:4d:1b:2b:05:1e:dc:9f:a2:a1:d3:ef:ff:35:42:25:7c:
         e7:40:ed:85:fd:08:29:0b:b5:a4:8f:52:f8:78:9d:38:0e:c4:
         2f:3d:51:6a:76:73:22:68:54:e1:b6:b4:45:6c:0f:04:ae:d4:
         67:b9:ea:3f:f8:42:24:00:61:79:dd:a6:86:5a:ae:bf:b1:28:
         a8:e8:dc:e6:ca:8d:6a:df:6c:20:fb:3a:f8:db:18:68:9f:38:
         85:61:2a:97:6d:61:bd:00:76:b9:7b:09:56:84:99:60:5a:cb:
         46:d9:19:d1:ac:f2:8f:87:54:ba:9d:61:e3:2c:21:69:b8:3d:
         10:b5:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----