Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
File:                     L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json)
Hash identifier:          q68To7xxSArz69QRh1Uod0qq60voKME3XKCSZUSVgPs=
Subject key identifier:   62:7E:30:81:35:FE:61:3F:23:84:2E:FC:8B:94:9A:09:00:B9:56:C7
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Certificate issuer:       /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial:       01962F3D955AB8649CAF9EC8CAFAEB2C2A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
Manifest number:          0A4F
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: GofoKymii5U39NPDECdDJtD2TH0.roa (hash: ePVDpp/IL/yJ1aEgP104JCCy3cNXznxaF2wO6kp9DYI=)
                          2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: +KPB/JTF4uvTthi+FMr2/+SWroqvt8tp6CW4RN/ZJZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:95:5a:b8:64:9c:af:9e:c8:ca:fa:eb:2c:2a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=627e308135fe613f23842efc8b949a0900b956c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:6b:7c:d2:42:e3:ed:5f:13:b1:a3:98:77:
                    a9:df:ea:81:95:48:0c:c5:eb:e2:c4:26:39:d5:70:
                    a9:a6:21:49:09:17:ee:46:c0:1f:0d:a0:4c:9e:57:
                    00:fd:67:40:a0:fb:fb:5b:38:5b:fa:e5:b4:85:a3:
                    2f:dd:ba:43:01:75:ce:78:82:f2:67:55:d8:8d:ca:
                    ac:2e:83:8c:d2:40:f9:3f:a2:c8:af:61:96:c9:f7:
                    6e:eb:5e:af:a7:52:2e:2a:8e:b4:a0:c3:d1:10:70:
                    86:36:f7:88:66:20:60:05:7a:88:8a:0b:b7:c9:96:
                    73:6f:1a:fc:92:31:3a:c4:c3:ed:01:d9:66:33:c1:
                    33:fe:55:df:f2:47:5b:58:0a:f8:99:f8:b9:b5:b9:
                    e1:8b:32:4d:ae:90:f1:df:bf:12:8a:2e:f8:c6:23:
                    b9:25:af:7f:2c:1f:01:56:da:4f:df:74:50:80:d5:
                    dd:fc:66:9b:51:f4:26:2e:da:22:c9:7f:d6:2d:83:
                    f8:06:8f:8a:9f:e4:2d:27:87:a8:ef:58:52:45:cc:
                    9a:47:43:84:c6:36:c4:6a:19:f0:7b:8e:ec:56:28:
                    cb:ed:85:b6:6c:88:6c:c7:9d:51:20:1b:69:27:dd:
                    cf:46:53:89:bf:12:c4:83:14:f1:82:7d:ed:f0:49:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7E:30:81:35:FE:61:3F:23:84:2E:FC:8B:94:9A:09:00:B9:56:C7
            X509v3 Authority Key Identifier:
                keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:33:ab:e8:6a:b6:91:d8:be:de:c4:13:58:be:37:f3:81:75:
         58:87:4c:1b:48:9c:a1:ba:5f:f5:66:5c:1d:6c:95:d7:ad:b3:
         b7:44:2b:a1:16:2b:8a:47:ce:7a:b7:da:5f:20:38:21:44:bc:
         5c:96:d2:90:69:0c:cf:6a:95:c8:a6:a2:43:cf:35:67:2a:ca:
         d7:fc:33:9b:0b:12:93:06:da:f4:2b:4c:0f:5d:db:d1:5e:40:
         65:05:63:8e:e3:8f:23:0d:38:05:a9:53:cf:5b:59:b6:cf:ec:
         fa:a5:e5:fb:a1:60:e0:ce:f5:99:e6:f9:aa:91:cb:58:72:a2:
         b9:5d:e7:0b:c3:07:64:f0:bb:7b:6a:f1:c5:10:40:ca:06:0e:
         cd:37:86:c9:b7:63:ea:6c:77:6b:23:f6:3d:db:e9:83:98:cc:
         87:97:e0:fa:46:07:39:0b:1e:50:09:18:df:77:12:34:59:f7:
         8f:d0:d6:e6:f7:0e:68:78:8a:fd:3c:58:c3:87:51:e8:8a:ee:
         3c:92:91:d5:45:2d:5a:2b:4b:1c:41:dd:6f:9c:84:23:59:fa:
         97:6b:61:78:bf:0f:df:48:ac:6d:ad:15:8b:57:b2:01:9d:63:
         a5:c3:17:1d:9b:0f:3a:b2:56:65:90:6c:ea:28:aa:e5:76:ef:
         31:2d:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----