Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File:                     L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier:          GD2cvD/mdQ8ciJW2Os2iJ9X+kotFnEeAggw/Idta+Tw=
Subject key identifier:   F9:4A:33:40:94:4C:26:2C:BC:4E:79:D7:E3:9A:CF:97:9F:7B:1E:55
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer:       /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial:       01962E2ACD5FB745A3F82A2599925DE660D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number:          1213
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
                          2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: /0eZWe7a4mPAuD0j6GG1TBlk7Fvezr2x7ej5c0+fUyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:5f:b7:45:a3:f8:2a:25:99:92:5d:e6:60:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=f94a3340944c262cbc4e79d7e39acf979f7b1e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:4e:c8:ab:62:f6:d2:d2:ea:31:04:d5:dc:
                    13:8c:b4:12:bc:bf:59:9f:05:d3:c2:7e:78:6f:cc:
                    d4:52:f7:c3:70:95:fe:97:92:ca:17:65:c2:5b:69:
                    e0:bc:20:82:4a:ac:99:98:3f:c0:57:7c:5c:78:40:
                    30:d3:05:fc:e5:68:76:69:be:0c:36:41:bc:88:07:
                    dd:16:b8:fd:3c:28:ac:e1:de:61:e2:9f:8b:2b:eb:
                    92:f7:51:3e:5a:64:fb:a3:5e:9b:c4:e8:c6:74:d2:
                    03:f9:8e:17:8d:e7:1f:45:0d:5d:da:55:da:20:36:
                    e5:49:eb:3f:1f:47:ee:ea:d6:76:6d:da:71:04:ef:
                    92:79:67:cf:9f:97:44:52:2c:05:c5:c0:ef:3a:a4:
                    ca:39:a6:ef:07:c7:e2:3c:a4:c0:11:e8:5f:0d:36:
                    24:63:87:cc:d0:8a:11:a1:fb:c3:26:d1:42:7a:90:
                    b4:d8:fd:5c:96:29:58:d5:fe:6e:27:4b:08:50:ae:
                    6b:ae:17:20:f5:41:16:5d:ce:36:37:3b:86:7a:f6:
                    35:1c:61:26:9d:48:ce:0b:ef:75:f6:5e:f7:29:a4:
                    02:5b:c4:71:83:dc:79:a6:11:af:31:31:50:d2:19:
                    0c:bd:11:b4:69:65:87:c8:3c:6c:c7:e1:62:44:c8:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:33:40:94:4C:26:2C:BC:4E:79:D7:E3:9A:CF:97:9F:7B:1E:55
            X509v3 Authority Key Identifier:
                keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:13:66:ad:61:02:5c:6c:04:b4:a9:33:bc:1a:64:ca:78:d6:
         90:79:03:e2:02:56:84:30:12:01:bf:db:76:30:92:a7:ab:e5:
         4a:40:6e:3b:e2:56:2e:39:4e:77:7a:46:5d:8e:d8:36:ad:fd:
         a1:7f:82:92:5b:32:7d:89:13:3d:f7:54:9b:2a:a3:58:8c:e9:
         80:27:0d:48:95:9a:55:9b:e8:ca:9b:3d:1d:fa:8e:8b:87:c7:
         25:0f:f5:d0:c0:55:d9:af:6d:c1:01:98:c1:7f:03:f8:d8:71:
         54:37:17:60:80:8e:02:41:f4:55:02:02:cb:5e:ef:14:2f:91:
         ff:5e:ad:ed:c9:b2:da:9d:4a:a2:f6:ad:b2:b4:14:72:b0:b6:
         a9:16:3b:ab:f8:93:1e:6a:5f:89:4b:bd:8b:a8:4f:b7:87:06:
         ed:c2:47:ab:f4:df:a3:62:d7:8e:d8:b9:6a:ec:86:8c:40:bf:
         b8:1c:69:42:ea:2f:ca:2e:a3:57:59:40:24:54:62:46:f0:37:
         da:0d:6d:f6:80:4b:07:a7:b1:a5:c0:5f:b5:0b:93:28:ec:c1:
         be:fa:45:67:6a:bf:a8:73:70:56:93:2d:1d:2f:cb:1d:2b:b0:
         fa:08:68:7a:d5:d4:62:45:5c:b1:3d:1b:8a:2a:e0:39:8c:b6:
         46:b2:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----