Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File:                     L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier:          +W1SkyA83LSTGr+a7TlaEq4r8BNq5PCCV3PHKlwzSdM=
Subject key identifier:   14:8F:14:2A:C1:39:5C:0B:A4:0E:75:E1:B8:8C:74:CD:82:20:84:F7
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer:       /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial:       01962F06A301539AFA00BB65F9035A81D347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number:          10F5
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
                          2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: Cy7AdmY/pAebUiNRLUvcRNRjX+jb8vmeGSDMin5LCIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a3:01:53:9a:fa:00:bb:65:f9:03:5a:81:d3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=148f142ac1395c0ba40e75e1b88c74cd822084f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:8c:46:a1:0b:6d:d1:de:81:ce:dd:2f:11:
                    4b:3b:1c:fc:82:e3:16:eb:d5:62:f4:15:1f:37:96:
                    6d:bf:82:04:1f:ee:ff:70:72:33:71:da:c8:9c:75:
                    44:2e:4c:00:74:c6:84:97:49:65:87:4e:44:6b:42:
                    22:c8:32:30:62:85:45:80:ef:3f:07:75:fb:85:0d:
                    30:02:03:13:d7:67:59:a8:19:01:6b:5a:2e:40:66:
                    c9:60:06:a1:e6:9d:0e:f0:56:a2:05:fd:52:bc:6a:
                    8a:85:d6:8d:27:de:f0:12:a6:7d:c8:b3:b0:40:de:
                    c1:20:2a:40:22:36:2b:f1:07:b9:ab:0c:3d:85:91:
                    87:46:21:cd:21:a1:c1:65:38:d9:7b:c5:ec:31:95:
                    7d:b5:44:01:e9:31:3c:b4:6c:6b:0c:bf:0a:58:6b:
                    c3:e5:71:ce:62:7c:bf:c5:33:ad:43:4b:8e:93:e4:
                    54:42:24:df:4c:fd:75:14:70:f8:6c:f7:dc:8b:61:
                    b1:24:e8:4d:ce:20:b4:fa:c8:66:ff:7e:72:a5:45:
                    52:30:72:6f:7e:c7:7a:b1:f7:a9:bf:90:fb:3b:13:
                    ad:8a:40:be:62:36:0b:92:e9:57:e2:15:b3:f2:79:
                    a2:8e:0e:30:1f:1e:2f:c3:6e:92:95:3e:0f:d8:c1:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8F:14:2A:C1:39:5C:0B:A4:0E:75:E1:B8:8C:74:CD:82:20:84:F7
            X509v3 Authority Key Identifier:
                keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:06:c5:6e:f8:63:e6:61:5f:23:03:b3:04:3a:e2:50:a4:e4:
         b4:32:43:41:fd:11:e8:08:85:31:b2:84:cc:71:8e:28:b4:fd:
         21:9a:20:d3:61:da:4f:d8:80:c9:18:55:46:ad:4a:1c:01:b2:
         9d:89:5c:9c:ab:0e:54:bb:b3:23:9b:c7:16:d9:c0:43:a7:00:
         8d:a9:c7:a3:bb:c8:07:72:46:91:7a:0b:3b:b7:83:e5:77:24:
         91:6f:40:3a:2a:f8:bd:a5:c9:4d:a1:65:db:d0:01:ab:98:af:
         9d:8b:09:ff:2e:7c:7e:31:80:86:f4:af:0a:c6:c6:41:43:bf:
         3c:d3:04:6c:bd:16:80:ab:ef:70:12:1d:44:b2:b3:af:8e:2c:
         34:b7:ed:42:b0:ff:5c:c1:c3:67:fd:18:f9:2a:eb:26:dd:81:
         b3:5c:39:56:99:8c:ab:36:47:06:c5:fd:ee:cf:d9:a2:eb:9e:
         66:16:1a:fa:61:11:c0:f0:a8:c3:1c:c7:67:62:1d:f1:91:55:
         df:94:09:22:fa:da:de:23:2d:da:eb:7e:97:36:38:c9:96:16:
         a6:b5:ee:64:ca:b6:42:10:4d:ca:bb:5f:78:8b:e9:11:60:33:
         cd:dc:d5:e7:47:97:ff:78:1b:96:2d:29:77:29:cc:b0:76:f7:
         5a:0a:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----