Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
File:                     L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json)
Hash identifier:          m3C9SDgIEihczACEIjmIU7aTCEHidQJ+Ne8vauk3qPw=
Subject key identifier:   24:9A:56:2A:BE:46:40:AE:03:6C:68:2C:59:92:DF:50:96:34:1B:D1
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Certificate issuer:       /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial:       01962F071328C4D3A60E0D690E8CD6766A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
Manifest number:          148C
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa (hash: 1Nd8bcLLvnAmE61D+G0tQnrMjss8Eoxbsm1iIYgXgB4=)
                          2: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: /DTuvqJ3+AsP4naXXNXECiaxCUlCixut4mAVLt4u9fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:13:28:c4:d3:a6:0e:0d:69:0e:8c:d6:76:6a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=249a562abe4640ae036c682c5992df5096341bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:47:d8:86:fb:e2:85:ad:59:72:28:29:8f:
                    44:35:95:13:ef:d8:f5:81:b8:d7:47:49:de:be:54:
                    58:69:a8:39:1c:8b:1a:31:2d:7b:31:c5:03:29:3b:
                    10:47:4e:b6:ba:fc:62:8f:18:fd:c3:54:ed:cb:ba:
                    9d:6a:a8:92:aa:e2:b1:64:54:e1:dc:29:bd:22:08:
                    a4:59:92:85:10:e4:7e:ce:4f:4f:8a:38:b5:0d:24:
                    69:d8:ed:5a:5d:9f:ad:18:af:88:86:eb:b5:c0:47:
                    9c:0a:c8:35:22:95:a6:76:31:9e:f0:7e:86:79:20:
                    86:14:8a:88:a0:1c:9f:a1:6c:94:91:51:f8:9b:f8:
                    a5:fb:41:9e:57:25:29:b1:06:58:e5:4f:a1:6e:60:
                    9d:b0:54:7e:18:98:83:0b:74:0a:b0:dd:82:98:71:
                    6e:61:39:24:f7:1b:e5:28:4d:d8:bb:69:a9:f8:5f:
                    df:46:58:23:26:dc:90:3b:c4:e3:fe:c1:5b:de:42:
                    1f:56:aa:67:ae:c2:51:65:61:86:6d:0d:a1:da:11:
                    74:81:5e:99:fd:7d:2b:c4:07:76:66:c1:9c:ca:ec:
                    f8:0c:81:6a:03:6d:ff:95:4e:ed:03:fb:94:b4:29:
                    df:54:d8:78:d5:da:80:ec:a5:27:07:88:ba:37:70:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9A:56:2A:BE:46:40:AE:03:6C:68:2C:59:92:DF:50:96:34:1B:D1
            X509v3 Authority Key Identifier:
                keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0f:17:c3:44:20:41:63:d1:65:14:15:b6:5f:8d:74:0c:20:
         e6:90:09:4a:f7:d4:9d:d0:8d:d3:9a:d5:19:af:81:ce:c8:01:
         e5:a9:c9:8b:24:a6:b0:cb:40:e7:61:b6:8c:c6:d5:c9:8c:9b:
         b1:34:68:e4:0d:f8:77:81:f2:55:aa:69:b2:95:91:79:71:37:
         f8:58:75:bb:93:56:8a:f2:df:3a:38:1a:f2:3b:c2:3d:0d:fb:
         37:b1:64:14:dd:c5:0b:c1:8e:d7:43:13:72:5b:ae:00:3e:81:
         78:4e:15:fa:fa:24:de:8c:17:42:a9:5d:e5:11:0a:9e:68:18:
         cf:ce:95:7e:35:46:c0:dd:4d:71:27:f6:79:b3:8b:e4:03:e4:
         a2:eb:b3:03:04:6c:a9:03:e9:ba:49:5f:6a:bf:12:7e:0e:25:
         ff:ef:59:b3:21:1c:e9:fd:1b:25:af:c4:92:f3:53:38:24:cb:
         5d:1a:4f:67:cc:f0:71:7d:70:41:24:9b:b4:84:09:de:72:a2:
         24:da:3c:8f:21:a5:b2:97:26:91:59:4a:33:78:70:dc:d8:79:
         e4:65:62:e0:3f:66:0c:a0:2b:1c:24:58:50:73:79:c0:aa:c9:
         c6:a1:95:23:e6:5b:d9:40:6f:60:9e:fd:fb:a0:5f:95:4d:04:
         25:33:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----