Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File:                     L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier:          YbAZoOks/1YjuRkomxXa54MNULhq5R9ukc7OnaxEifg=
Subject key identifier:   3F:25:C2:DB:37:3D:C4:3E:30:F7:1B:BF:6D:57:FE:1C:93:38:3A:07
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer:       /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial:       01962F071177868FE7B52516F66B3F40A148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number:          04B8
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: 545Vm+vPq0O8I7Ny5GzlYgVhEOIsKXkxnHRn1i0CsDk=)
                          2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
                          3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:77:86:8f:e7:b5:25:16:f6:6b:3f:40:a1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=3f25c2db373dc43e30f71bbf6d57fe1c93383a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:a2:9a:d4:86:66:27:61:cb:f2:93:9f:67:
                    62:78:7f:39:3b:8e:87:88:c7:b5:4d:15:e2:b2:e6:
                    d5:88:26:e3:fe:a7:1f:73:ab:8d:79:6a:55:8c:7b:
                    f6:75:dd:6e:6a:04:24:5b:0c:16:00:72:a1:76:28:
                    63:f9:77:8b:1f:ec:1c:09:c6:8d:f7:90:9d:a3:15:
                    0a:89:d4:73:f0:df:64:61:b5:67:4d:f1:3e:79:dc:
                    86:46:88:f2:f5:fd:04:9d:01:c0:45:6f:b0:ea:f3:
                    4c:89:c5:d3:6c:f7:6b:1b:f9:bc:e1:9b:82:2a:ba:
                    52:2d:02:d3:6a:8f:f0:cb:63:e7:11:1d:c1:41:ab:
                    44:9f:5c:be:93:2c:1a:4b:06:e4:c4:43:05:7d:14:
                    f4:60:63:91:c6:d2:72:fc:51:9e:9d:57:8e:52:b4:
                    23:ba:ed:cd:23:ae:53:07:e4:40:fc:e9:96:6e:87:
                    46:38:cd:80:29:20:f6:33:49:26:a4:66:18:5f:0f:
                    ab:76:aa:51:a9:ef:fb:c6:e7:b8:7c:6d:99:c5:26:
                    67:38:91:cb:88:6c:e7:d6:e9:20:b8:d4:e7:cf:72:
                    ae:56:6e:aa:95:9e:2f:bb:2a:62:d8:6f:3e:73:96:
                    32:d7:f3:34:a4:63:ec:b9:0c:97:72:bb:ce:5e:cb:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:25:C2:DB:37:3D:C4:3E:30:F7:1B:BF:6D:57:FE:1C:93:38:3A:07
            X509v3 Authority Key Identifier:
                keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:53:32:33:50:45:b5:b2:23:b7:5a:9e:6c:78:b7:26:da:6c:
         1a:df:3e:df:42:83:00:7c:43:fa:0f:d6:37:4e:f5:a5:54:08:
         d4:4e:62:03:9f:1b:54:ce:82:e0:e5:43:50:1f:db:af:34:78:
         21:e3:52:8d:63:66:5e:68:b0:a4:99:e3:aa:d7:31:7a:0d:1e:
         50:2f:72:80:c3:5b:3f:ad:d3:b6:44:90:0b:c3:7c:86:b2:a4:
         e7:5c:70:09:aa:7f:df:4e:72:c9:dd:44:44:95:cd:e3:1e:e1:
         66:78:44:eb:40:a0:41:ee:5e:b7:ed:99:09:ad:d0:87:8e:07:
         aa:39:b4:cc:c5:33:e1:ab:48:3d:d6:8c:0a:c4:fc:c8:7a:6f:
         05:03:35:66:97:ff:47:62:14:65:4d:37:c9:ec:da:35:c6:37:
         f2:f4:b2:ff:8b:04:46:a8:c8:12:e6:a0:3b:69:67:b6:d1:41:
         2c:85:0f:cc:ed:4e:19:a6:01:ba:dd:18:ae:2b:47:94:e1:9a:
         6e:10:6c:fb:cb:a1:64:4c:23:41:09:ac:0d:eb:b2:6e:a6:94:
         73:04:c2:34:67:fe:d3:85:b0:26:c1:2b:b7:f9:7c:9e:32:50:
         fe:18:1f:f1:e5:05:47:fc:f8:2b:99:b3:73:c9:f5:37:15:82:
         5d:fc:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----