Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File:                     L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier:          mVj/3pmU1WAIrjQn9Hbg1uYJo0GVyTx1i2G1CiZEVGo=
Subject key identifier:   72:F8:26:3A:C6:23:2C:53:E6:96:7D:99:56:EF:41:FC:84:2E:B9:27
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer:       /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial:       01962E993B5D9453ADE920C68DA2F23185D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: +yB5wMAXcBrEhaovuzMvvD+u4CI4OTbS4gA/fBeThMM=)
                          2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:5d:94:53:ad:e9:20:c6:8d:a2:f2:31:85:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=72f8263ac6232c53e6967d9956ef41fc842eb927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:65:da:c1:d8:54:a4:49:87:bc:c4:30:74:
                    44:88:0b:b6:4e:d3:11:8d:9d:dc:4e:9f:af:fc:a4:
                    5b:90:18:da:84:f2:21:a8:26:ab:c0:96:b5:e6:09:
                    bf:fc:ff:9d:7d:67:7d:b9:34:85:60:9b:61:72:76:
                    07:ac:f6:c6:28:7e:28:ee:1a:3c:56:76:2e:85:ad:
                    7f:50:25:c6:9f:cf:ff:29:66:11:18:46:ec:78:9c:
                    07:55:5c:65:c4:1a:0c:eb:46:07:bc:9e:d1:2c:4a:
                    87:ea:cd:db:4c:97:dd:de:7e:7f:90:f4:fa:8e:12:
                    34:18:32:8a:bc:18:7d:1e:f9:d5:53:12:79:cf:5a:
                    34:6d:b1:90:20:48:ab:ba:2e:60:86:a6:b6:8c:18:
                    7b:ea:06:16:c9:04:bb:70:4a:5c:93:1f:8b:e4:7f:
                    ee:71:1c:89:34:cd:ce:20:eb:1b:46:9d:5f:52:d2:
                    77:6c:df:2c:e5:e7:d7:0d:64:99:af:5b:eb:f2:6f:
                    a4:49:5f:36:96:58:b9:f0:6a:d7:4f:69:43:61:10:
                    ad:c9:25:3c:d0:9a:f7:89:66:09:7d:2b:c7:5f:ba:
                    65:55:db:e3:5e:81:f5:c7:8f:4e:c8:9d:18:30:cd:
                    68:ce:4e:eb:ee:03:a9:2b:3d:15:9e:44:4a:38:4d:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F8:26:3A:C6:23:2C:53:E6:96:7D:99:56:EF:41:FC:84:2E:B9:27
            X509v3 Authority Key Identifier:
                keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:08:7a:8f:b2:37:ed:e3:05:47:51:1c:a9:4a:e0:e7:89:f0:
         01:08:18:16:1f:18:30:6f:52:f7:d8:74:0c:a2:58:8d:6a:e9:
         0d:40:82:c9:71:ad:a5:af:1c:f2:21:62:0f:2d:ac:f0:02:a3:
         ee:ee:5c:12:8a:87:c9:4e:a3:90:13:4b:6c:31:df:22:2b:f0:
         38:d8:16:e9:45:62:ce:6f:b7:a8:ab:9f:b9:7b:5f:6c:e3:94:
         62:fd:62:d0:22:ba:37:e7:1e:e0:51:d2:d4:4d:cc:32:dc:83:
         43:44:bf:64:2a:1a:57:fc:2c:75:fd:58:c6:f6:f0:4d:09:30:
         32:50:10:66:07:37:c7:0f:84:54:2a:c1:0f:69:84:09:5d:5e:
         db:8e:05:56:03:b6:f1:1e:52:1a:a1:9a:ce:54:a1:c4:75:92:
         fd:61:d2:3c:0c:b6:e0:93:83:ac:04:72:72:3d:a3:55:a1:2a:
         62:18:07:99:dc:11:ff:24:51:06:5e:9f:90:82:af:25:15:dd:
         c7:93:65:96:d0:e6:10:72:8c:93:f8:04:67:48:75:8d:09:2d:
         ef:0c:c5:cd:50:92:b9:36:2a:e8:3d:8b:e3:7c:df:80:89:58:
         0c:46:35:67:b1:64:cc:1a:c5:86:fd:59:72:cc:9b:17:19:84:
         86:aa:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----