Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File:                     L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier:          PaAUMJ8IAnEmGOst8ewELXJmh7IrHoNye0UBdiRSPDI=
Subject key identifier:   AA:89:22:24:38:BC:BE:C3:FD:F4:63:4B:07:64:48:23:D9:F0:1B:F2
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       01962F3D9CA314B0CC1CE16BD6CB2FC2F518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: 6k22GIrWtpQ8TT1ecXO1b0GpadOp1aqhGq1haxCa/YE=)
                          2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:a3:14:b0:cc:1c:e1:6b:d6:cb:2f:c2:f5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=aa89222438bcbec3fdf4634b07644823d9f01bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:6a:51:3f:ef:2b:27:89:bb:a4:68:46:d2:
                    d8:14:de:af:18:01:73:ce:27:b5:1e:f4:58:15:de:
                    44:7f:10:10:1a:4f:5f:56:19:96:b8:0a:b3:3a:9b:
                    e3:eb:8e:34:94:68:84:ca:4e:dd:7d:36:f9:36:e5:
                    e3:b9:d3:5b:6d:53:a9:3a:53:1a:f3:26:4d:0e:e4:
                    f1:9b:28:e1:4a:8d:4d:19:28:ee:0a:4c:f2:a6:84:
                    b8:de:84:8a:4d:7d:77:81:07:06:96:da:34:a1:14:
                    70:46:31:ef:8b:3b:2a:e9:65:91:51:14:d7:9e:b8:
                    0e:49:52:4f:93:a0:ee:89:78:77:be:a0:21:95:49:
                    72:24:7f:72:60:03:45:5b:ee:df:90:a0:95:33:53:
                    eb:f7:5c:cd:9d:a1:8d:1c:39:16:d0:38:34:dd:a4:
                    00:d9:d7:79:4d:ca:62:9a:96:59:e3:e9:c8:ce:9a:
                    55:d5:60:dc:e4:e9:a8:9c:80:9c:04:2d:8d:fa:fc:
                    ee:12:0c:e8:9a:ee:6b:7a:c4:d1:63:a8:0b:ec:a3:
                    08:e8:0c:bd:f8:22:ab:01:54:93:79:dc:70:3d:ad:
                    15:b7:16:26:4c:27:76:7e:6c:ee:a2:aa:ad:c9:b7:
                    d8:8e:1c:1d:9e:48:f9:0d:7f:3c:44:7b:76:6c:04:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:22:24:38:BC:BE:C3:FD:F4:63:4B:07:64:48:23:D9:F0:1B:F2
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:f3:6e:63:77:e0:f9:7f:01:05:be:a2:2b:52:a7:78:33:
         21:08:a5:42:34:d0:12:d8:9f:5a:33:b7:73:c3:a7:d0:dc:12:
         ad:58:6d:33:73:0d:15:80:19:dd:ab:0c:61:e7:fc:75:77:ee:
         af:33:e2:78:0e:2c:69:04:e7:cb:ff:41:9c:59:ea:f3:aa:f2:
         b8:56:b4:cf:6d:4b:43:94:89:8a:a6:80:cb:1b:86:05:9d:4c:
         bd:8b:40:84:97:2b:74:45:4e:47:50:e4:c1:54:84:d2:d2:8e:
         54:08:c6:46:e3:9f:89:97:14:78:a2:b9:91:be:f0:1f:21:02:
         f4:d7:04:cf:f2:d5:38:f8:ce:b4:7e:6d:86:cf:e3:1b:66:94:
         41:31:ea:5e:a1:3b:18:58:8e:f7:b5:8d:74:26:c1:a2:6d:25:
         c3:a6:7d:ea:1d:08:b3:34:71:a6:97:08:6a:ac:32:6d:cf:e6:
         18:e9:85:69:8f:e2:97:76:82:1e:a2:61:15:af:37:27:11:4b:
         c9:62:30:51:c5:6b:3e:50:c0:88:0e:d8:3b:ca:be:3f:15:05:
         8a:00:6f:9f:4f:65:e2:8c:82:b8:46:ca:bf:b3:cf:a4:8e:e2:
         41:fa:da:69:81:30:a7:8d:c3:f6:51:db:80:03:4f:e7:96:2c:
         51:31:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----