Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File:                     LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier:          MBWzm8rOTb/xF44oRNyg3orFeUUkajDECcVcedIW9BE=
Subject key identifier:   6F:72:D5:58:E7:E6:BE:6D:DE:AF:2D:BC:ED:1F:93:DC:58:44:1C:25
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer:       /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial:       01962F74CEB900332A53E74FF62BE2D30956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number:          0BE1
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
                          2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: MaVeY7jmyNVSNaGWOoqP9BHg4EWVdIigF50lFVbLGrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ce:b9:00:33:2a:53:e7:4f:f6:2b:e2:d3:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=6f72d558e7e6be6ddeaf2dbced1f93dc58441c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:48:3f:fd:fa:2d:8c:d5:b1:45:cd:92:a9:
                    dd:0f:d2:98:b9:53:7b:45:f3:cf:1b:82:bb:c6:92:
                    93:c8:df:c7:b4:bd:b3:48:c6:9a:7a:09:89:8f:46:
                    70:e2:73:99:ff:c2:cf:0f:ef:fe:40:53:d9:e8:84:
                    dc:d4:57:fc:9c:f9:28:4a:19:4b:ca:d8:79:f4:cd:
                    92:28:8e:64:c2:44:79:31:51:73:7e:e4:f8:7e:8b:
                    50:3e:81:97:9a:a2:bf:37:20:3e:f4:04:be:6e:05:
                    84:0f:70:61:09:77:dc:4b:5c:52:23:95:35:9b:cb:
                    1c:92:e4:08:05:ca:eb:e3:49:45:b4:82:07:5f:4a:
                    02:9a:32:ea:d7:79:23:e4:d9:8e:50:62:d0:20:55:
                    af:cc:e5:3b:41:69:72:f9:5e:0c:95:c4:c0:69:39:
                    f1:67:e4:d1:dd:95:d9:3e:ac:e9:fd:71:e6:19:38:
                    c6:55:f9:f0:49:cd:60:30:fb:d5:94:29:7f:a7:5d:
                    9e:4a:88:0a:d6:fb:f5:e2:d5:ab:f0:fd:7a:fb:7d:
                    f6:0f:6b:d6:58:8e:37:4a:ce:78:97:39:8a:ea:cb:
                    44:d1:a9:86:30:f8:79:22:0e:cb:61:70:1f:81:d1:
                    e9:fc:33:e7:32:e0:67:43:7f:d8:a7:81:97:00:12:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:D5:58:E7:E6:BE:6D:DE:AF:2D:BC:ED:1F:93:DC:58:44:1C:25
            X509v3 Authority Key Identifier:
                keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:60:d4:05:c7:20:17:bf:1d:c5:bf:c1:60:f5:b9:e0:5e:a1:
         cb:78:c6:5a:bd:84:75:77:26:64:ca:cc:c1:0b:71:90:77:3d:
         cd:c3:10:07:4a:cb:c3:1d:e9:6e:fe:0a:1d:55:3a:e2:cd:9c:
         01:c7:47:c0:c8:33:9a:3e:72:26:1f:29:e2:e2:b4:b2:f9:16:
         69:ce:e4:c9:5f:c4:71:83:96:7f:97:67:fe:e2:b3:c7:bf:6c:
         9c:56:aa:08:d8:fd:32:fb:fa:30:ae:19:0e:25:c9:93:fd:77:
         64:b6:04:c0:e6:c8:44:7c:91:dd:f9:f8:7f:98:da:70:0f:a0:
         8a:bf:79:99:f9:cb:49:24:74:fc:be:9e:2d:09:78:a8:b3:b6:
         18:f6:53:fd:b4:8a:6d:56:1d:8d:c0:01:30:af:3b:48:90:70:
         93:b5:4a:0e:d1:54:fc:ae:c2:b1:2d:cf:2d:3c:92:25:67:66:
         de:91:07:64:9d:f5:73:57:60:19:a5:df:d2:86:2b:4e:59:a2:
         2a:fe:10:99:85:25:ee:d4:45:18:12:d1:da:a3:9f:42:1f:7b:
         d4:ef:4e:63:f6:44:29:61:d8:78:85:58:e0:8d:cb:07:6a:70:
         6c:25:d3:f4:bf:62:d0:91:23:35:8e:6c:cc:fc:a4:1f:48:c6:
         dc:6c:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----