Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File:                     L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier:          rC3DNtud//HrWHghvwIL0usq5NOhfmYn68dgWCuTQ1w=
Subject key identifier:   75:D8:9E:8B:53:C5:55:AC:8B:ED:B5:0C:16:0E:4E:37:82:BD:B2:BD
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer:       /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial:       01962F06FED2B4CAC6CAE842D232BFEE180A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
                          2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: QlrkKZ62UajKSRxssPTJu3e5HHKFaNGKrdKyjQNkkFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fe:d2:b4:ca:c6:ca:e8:42:d2:32:bf:ee:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc20be6167890247303214197658ca7c9676150
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=75d89e8b53c555ac8bedb50c160e4e3782bdb2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:07:a2:ee:ae:c8:0b:c9:9f:79:b9:7a:7c:
                    81:5f:d4:9b:12:06:61:d8:65:d1:8c:87:7d:f9:10:
                    71:dc:fd:df:d1:04:51:9b:fd:70:36:88:9c:69:21:
                    cb:fe:c4:1e:cd:f3:7b:9c:2f:c1:9a:2f:e2:34:fc:
                    42:86:f5:cc:69:34:78:0e:11:1d:66:24:70:2e:18:
                    11:89:d8:ab:d2:35:16:70:16:4b:ba:ff:e3:e1:30:
                    76:a3:57:5c:df:15:09:41:84:da:62:ca:a0:6b:8d:
                    93:9a:f0:6d:b8:14:d4:b0:f0:5b:9a:1d:64:24:c7:
                    1a:bd:e5:79:d4:51:d6:30:0e:4d:41:a9:e2:29:5f:
                    e2:9a:15:06:59:57:19:4a:0b:01:c6:65:6c:23:26:
                    5d:c2:f9:cc:76:b3:b6:aa:d3:c4:27:d3:57:86:c7:
                    83:f5:45:c9:d4:b1:bd:df:6a:35:45:37:24:7a:67:
                    a3:99:16:66:ae:a3:fa:c9:cb:04:0a:df:27:b3:3e:
                    97:a6:90:30:8c:e3:a7:f8:a1:d4:f2:77:20:63:37:
                    50:7e:b9:3c:62:b7:c8:a7:ba:b5:ab:89:87:fd:f7:
                    83:db:b6:6c:1b:6d:b0:e1:56:02:36:1b:88:e0:ea:
                    0e:ba:74:9c:0d:68:01:1b:1b:ac:4e:25:21:a0:67:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D8:9E:8B:53:C5:55:AC:8B:ED:B5:0C:16:0E:4E:37:82:BD:B2:BD
            X509v3 Authority Key Identifier:
                keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:ce:ae:b8:76:50:2c:4d:c2:ca:34:29:63:17:97:df:9b:
         08:c4:ec:45:47:7c:03:97:5d:55:78:09:91:94:8a:ee:e2:84:
         b6:4d:75:5c:63:09:5b:20:09:de:50:7f:95:2e:c4:17:8a:16:
         a3:ac:d2:fa:b3:6b:9c:b8:8c:9f:eb:47:4b:b9:76:e1:6d:68:
         79:99:69:d8:c8:93:89:43:5f:56:9b:0c:2f:b9:6f:39:ef:0b:
         46:c1:73:58:70:b9:2d:ce:ca:bb:38:70:57:69:52:d9:5a:46:
         77:56:16:35:ed:a1:dc:91:13:2e:88:31:91:68:69:7e:9c:5e:
         40:d2:49:bc:1e:c3:57:a8:f4:e6:47:14:f4:f7:b1:58:bb:2d:
         b4:a9:bf:57:66:d9:d4:d4:e2:a1:a7:69:8a:7a:73:04:8b:a1:
         2a:42:5f:45:39:a6:c5:98:ca:6b:7b:df:7d:e6:cf:df:a5:52:
         47:f4:38:24:6a:8b:fc:a7:da:96:54:d0:ca:12:2d:11:01:e5:
         76:1c:05:59:01:76:e8:9e:84:3f:40:f3:c9:c2:23:fc:e6:93:
         85:95:ba:63:df:9c:30:b5:e1:04:ae:8f:52:b1:5f:da:97:74:
         10:a2:b5:b8:5f:c2:89:9b:1a:07:53:63:d0:81:fc:8f:29:75:
         ce:18:2e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----