Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File:                     L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier:          yQwkhmgwO52ey1t6ErhPeGtupdvuNQfA08j26NY+9xM=
Subject key identifier:   43:F3:40:4D:C8:4E:8A:76:F9:6B:D1:DF:32:11:2C:CB:4C:CD:40:5F
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer:       /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial:       01962DF3E98A25C9A37BA65B4F835170EF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: pclzEvJ1Gp9OgsFgL+Jwxpmvnjpn4fsgyD5fGp+yzqM=)
                          2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:8a:25:c9:a3:7b:a6:5b:4f:83:51:70:ef:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=43f3404dc84e8a76f96bd1df32112ccb4ccd405f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:e9:9a:4c:de:64:d5:27:28:aa:79:55:e5:
                    9c:ff:3c:10:f9:bf:5b:a1:65:59:ca:21:3f:4a:8c:
                    2b:c1:67:f0:4f:be:1a:b6:fa:96:b3:43:34:0b:e9:
                    05:d1:ac:b8:aa:cd:2a:06:2d:40:a3:bb:27:57:6d:
                    3f:38:4f:43:b4:84:4b:46:14:ac:31:59:96:a0:aa:
                    20:6a:40:5d:9c:25:73:77:03:5d:a1:b5:68:6d:0d:
                    e1:64:16:50:95:78:bc:7f:99:e6:79:1b:93:45:db:
                    3a:d7:61:f1:70:2a:a4:92:25:d6:e1:58:b3:73:0d:
                    e6:cd:5c:03:76:47:b0:40:42:f4:40:21:9b:83:01:
                    7e:ac:37:84:94:ec:24:ba:9e:bd:78:b0:bd:92:44:
                    86:11:e8:75:4b:a8:f3:70:0e:55:51:0e:24:d3:31:
                    21:81:9f:26:0c:c7:2a:14:e1:fd:87:13:3a:e1:e3:
                    73:b3:fc:85:bb:42:e4:b7:bb:42:5a:eb:a5:fc:5b:
                    6c:eb:c4:f0:2a:ea:9e:3f:4a:55:31:c4:a7:ea:ac:
                    5e:fc:b1:32:d8:6d:4a:cf:df:93:80:29:42:a7:8e:
                    4c:49:83:b1:9c:2d:17:48:07:2e:34:e9:28:d1:00:
                    18:32:78:de:54:35:07:0d:46:ec:f9:58:a7:14:fa:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:40:4D:C8:4E:8A:76:F9:6B:D1:DF:32:11:2C:CB:4C:CD:40:5F
            X509v3 Authority Key Identifier:
                keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:b2:0f:9d:0b:6a:a9:44:fe:e2:32:9b:73:77:d1:54:6d:
         1a:eb:68:f6:46:1c:21:13:ed:ed:69:3f:88:68:4b:7c:8d:a1:
         09:9f:85:42:5f:74:f2:1b:b7:0a:6d:2b:7a:96:48:df:81:b7:
         24:15:32:90:c0:7c:76:91:e2:d1:3f:45:69:5f:41:19:3a:b8:
         57:c9:10:71:2d:f5:65:23:6a:22:5b:a3:c8:29:b8:22:56:9d:
         1c:ad:18:a8:09:29:b9:69:64:e4:87:8c:ed:3d:8d:b4:e4:a5:
         95:55:8f:96:0c:d1:02:c3:9e:cf:b1:d7:75:57:fa:c8:17:5a:
         2f:f6:33:aa:4a:c9:31:d1:09:4e:e4:fd:73:84:6d:b7:24:b1:
         a7:6e:c2:ee:38:8f:19:0c:5e:1b:53:cb:75:a2:73:03:92:b5:
         4b:f4:e5:fb:7d:68:82:ef:c9:36:e3:14:f1:60:e5:7f:a5:bd:
         39:8e:4e:5d:29:ce:d4:32:f7:45:e8:3c:e7:30:e4:08:ea:ea:
         18:77:30:ea:e7:6e:2e:63:3f:17:48:b9:78:e4:cd:ed:33:8d:
         95:72:c1:d7:7b:96:a3:60:99:1e:7f:b9:b7:31:12:a4:9f:0a:
         09:41:ed:f1:61:d8:91:98:fd:f2:89:47:fe:de:b0:97:33:05:
         52:18:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----