Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File:                     L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier:          phYF/WELY/jc0qUpigBv5r+pw07rmI4uAOKgfGVkGII=
Subject key identifier:   CD:94:EA:3A:FE:D4:CF:17:C6:99:2E:BB:11:07:BB:A5:67:EF:24:D7
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer:       /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial:       01962F74C45FC7FE5103C0F4E7762BCE40F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number:          0C24
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: YLXE0KdM50uFvWyajY726fivE6TqZs8/kKR5wIyN3lc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:5f:c7:fe:51:03:c0:f4:e7:76:2b:ce:40:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=cd94ea3afed4cf17c6992ebb1107bba567ef24d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:25:33:64:fe:34:ea:ca:43:f3:8a:c8:82:
                    8b:b6:7f:d1:4a:50:cf:5b:4e:f3:b1:8b:fb:3b:41:
                    ad:1b:4c:c9:bc:c9:b2:34:e0:31:7b:75:ea:c3:07:
                    04:d4:1f:d9:bf:a5:30:ee:cd:ec:c9:6d:3e:49:5f:
                    b1:d9:a4:3c:87:75:95:da:9a:f0:0d:87:34:02:95:
                    55:fd:0f:6d:ea:2f:7b:f4:29:3c:d3:67:04:97:b4:
                    b6:21:43:1a:a2:1c:6a:0c:5e:c6:c7:c4:91:08:5c:
                    9c:dd:74:54:ea:2f:77:e6:7e:8a:98:51:0b:c2:b1:
                    67:97:19:b0:26:75:87:98:03:e6:de:52:2b:a6:c2:
                    d5:16:87:da:08:7f:22:e8:43:c2:ab:63:c7:be:17:
                    99:99:aa:42:6e:b5:6f:fa:d9:e6:22:b0:1a:50:96:
                    97:34:40:60:70:43:37:9c:46:6a:55:30:9d:bb:b3:
                    9f:22:2f:0b:65:9e:ef:58:84:61:dd:ec:8f:6a:62:
                    00:32:da:f5:6b:81:a4:fe:cc:97:fc:5e:bf:7c:04:
                    11:7f:26:3f:8f:7e:6d:57:33:a7:fb:37:8e:25:84:
                    ed:0f:b4:25:0d:7f:69:20:e0:01:88:53:5e:78:9e:
                    16:45:6e:34:db:9d:4a:f3:c6:49:93:be:13:a0:f9:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:EA:3A:FE:D4:CF:17:C6:99:2E:BB:11:07:BB:A5:67:EF:24:D7
            X509v3 Authority Key Identifier:
                keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:80:8e:a5:79:d3:6a:50:5e:d3:f6:fa:42:f6:97:22:f4:1c:
         a7:3b:74:df:c5:b8:88:aa:44:bd:8c:5d:c5:2f:5a:c1:07:f2:
         41:5c:15:05:6e:77:a9:04:ed:3a:bb:4e:af:47:71:06:7d:6d:
         96:71:a6:b8:fa:e2:5e:ca:48:25:48:21:cb:f6:84:1e:1c:e0:
         ac:27:db:87:4a:59:25:e8:0f:a3:e7:3b:e6:cb:78:c8:8b:b2:
         f0:36:f7:aa:c4:28:51:39:60:53:30:1d:f1:ce:44:43:c1:38:
         f7:83:d5:eb:fc:17:51:cd:31:15:b6:61:8c:29:e0:39:13:9f:
         f7:12:2f:13:0e:9a:ed:12:ee:5b:a2:bf:b8:59:79:3e:df:65:
         0e:fa:ff:6d:ad:ec:97:af:0e:f2:15:17:07:a1:c4:07:4c:a4:
         6e:39:dd:1d:e5:72:11:04:a7:c3:50:e0:a6:d0:58:53:a4:6e:
         47:0a:27:83:79:e3:f9:cc:84:0d:4a:da:a7:65:86:0f:14:a7:
         1d:4c:50:e6:d7:ca:df:46:af:61:44:d2:2d:aa:9f:d7:cd:a5:
         df:9e:1c:36:e3:64:2f:9d:a3:4b:01:52:78:c1:ef:16:99:cd:
         8f:1c:f2:80:e5:f2:65:b4:30:05:9a:97:6f:70:3b:26:52:45:
         28:d8:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----