Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File:                     L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier:          t8ME82qtBKMP+ahthJkxmYkkW3nZFm6EL4ZvRVMkluY=
Subject key identifier:   20:92:57:86:5B:F3:E1:AC:1E:57:1A:47:9F:8A:90:90:06:BF:15:78
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer:       /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial:       01962FAB8137BDFA2AB8A4171854926A0357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number:          08ED
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: UjDlVT0Sra5aYxzzZ4OCHG1PoU5Ai5132NpR1Ba04L8=)
                          2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:81:37:bd:fa:2a:b8:a4:17:18:54:92:6a:03:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=209257865bf3e1ac1e571a479f8a909006bf1578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:2f:fe:60:0a:d7:d1:d2:97:bd:af:76:23:
                    bf:82:82:61:ba:da:54:a1:f6:09:af:81:af:ab:70:
                    6d:f6:9b:69:a5:6c:ca:5d:c1:ed:26:05:86:89:0f:
                    6a:96:86:b9:30:2b:25:55:67:f5:dd:89:c3:1f:4b:
                    e0:e2:93:07:9e:ee:06:8f:e8:eb:57:5d:8f:11:a5:
                    3e:03:79:b4:ff:4b:a9:58:ff:3d:37:90:c0:b3:de:
                    bc:89:81:a9:ef:1d:29:75:fb:d8:f4:ad:43:77:1b:
                    03:bb:3f:e9:eb:f1:87:f2:5d:fa:df:55:b9:83:7e:
                    07:a5:12:4c:fc:48:ad:0e:96:9b:16:66:a1:79:0b:
                    c0:92:38:f3:2f:05:d9:2a:a0:24:7a:3a:26:48:be:
                    73:63:aa:52:bd:6d:03:3e:b6:4c:65:b8:89:86:c9:
                    59:49:70:7d:a4:c4:13:14:f8:da:12:98:e8:cd:40:
                    a0:2d:14:24:b1:50:54:eb:37:a5:ef:ef:a3:30:45:
                    ac:89:11:ff:01:cb:ff:e0:76:6f:41:fc:46:c3:de:
                    3e:ac:e4:5b:02:0b:7c:7d:62:97:02:79:c4:61:fd:
                    70:8b:e2:96:04:43:2f:b5:d8:c5:1e:bb:d0:a9:27:
                    4a:1e:a5:89:79:80:0f:1e:06:0f:57:41:f6:a0:01:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:57:86:5B:F3:E1:AC:1E:57:1A:47:9F:8A:90:90:06:BF:15:78
            X509v3 Authority Key Identifier:
                keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b3:22:4c:86:27:a7:72:f0:41:7d:04:9e:37:40:07:bc:a3:
         6c:f3:4f:52:88:f0:32:d3:64:5d:1b:d0:5e:b9:22:0c:04:bb:
         a0:eb:2d:a9:ec:3c:9d:55:4e:29:38:eb:8e:4a:36:55:4b:57:
         5d:7d:d9:2b:20:84:32:84:75:e2:65:44:42:8d:02:4d:f5:b1:
         81:06:25:5e:e8:ac:ec:dd:25:4e:2b:cf:1c:dc:77:85:20:e9:
         fc:cb:8c:41:43:26:45:9a:e7:ae:35:62:4a:20:82:67:ed:ce:
         60:e4:30:4f:f9:b8:29:81:d6:cf:0b:52:d4:2d:62:4a:34:66:
         28:8c:67:e5:64:6e:ed:6d:f2:b6:a6:2e:41:dc:df:f7:08:a6:
         bb:b0:d0:8e:66:79:0a:f3:5e:01:9e:5d:a8:58:fb:65:f1:a1:
         df:aa:21:f1:85:03:4f:3e:d3:4c:83:42:fd:23:a7:64:82:51:
         10:81:bc:e4:0a:31:52:15:a6:1c:52:18:ff:0a:9c:1c:54:81:
         25:86:5d:7e:43:94:77:df:a4:0d:55:87:dd:95:b8:57:7c:91:
         58:ee:f2:01:71:3f:1a:10:39:3e:6e:b4:47:8f:7b:fb:5e:3f:
         c9:d6:3b:5b:5d:f8:63:2e:23:0e:cb:fa:74:96:e6:d7:00:18:
         8e:8c:8d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----