Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File:                     L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier:          cOHLW8zFK64RjqsklZOvHebPUM1n1kJh0LdcVjM4BfE=
Subject key identifier:   73:66:9B:F5:E1:3E:F6:F3:99:A9:1C:93:56:1C:7D:28:F3:9E:DC:82
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer:       /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial:       01962E61F81DC8A893AA8E9B1DBCE0352260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: vfi10G93OMSnalyy7nYKVoqMIwo+po0R78twP2C60q0=)
                          2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f8:1d:c8:a8:93:aa:8e:9b:1d:bc:e0:35:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=73669bf5e13ef6f399a91c93561c7d28f39edc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:8f:cf:15:39:85:ad:25:1b:76:72:64:b4:
                    69:3a:0b:45:70:96:03:4e:90:06:38:9f:7a:fd:0c:
                    7f:1d:c8:ce:83:9b:4f:db:2f:69:c7:a9:26:9d:90:
                    62:7d:3d:b2:fb:b3:b5:f5:6c:dd:11:55:ff:52:a0:
                    fb:e8:0b:3e:54:7d:12:d9:e0:54:22:94:7f:9e:3e:
                    7e:ef:f3:db:d6:39:d7:96:c6:a1:d7:21:11:f0:53:
                    2d:1b:0e:6e:c8:a8:14:cb:61:f1:90:05:ba:e3:95:
                    c3:59:9a:eb:e3:74:71:b5:10:ab:a2:20:da:a3:64:
                    13:8c:60:b8:b2:59:db:cf:74:2f:df:46:79:28:74:
                    c0:df:81:71:65:8b:64:52:b7:84:b8:f7:89:e7:79:
                    82:3d:ee:ce:eb:0e:f0:80:12:fe:51:03:6e:94:64:
                    45:4a:d3:18:54:cb:1e:eb:e8:c1:15:9e:be:19:64:
                    d5:32:b3:cc:31:e0:1f:5e:32:34:9c:67:54:80:37:
                    df:66:32:65:44:cb:d7:5a:26:1e:9c:0c:f3:f8:c4:
                    8d:7f:04:ee:b5:30:dd:4c:00:41:57:17:3e:30:cd:
                    16:cf:8e:93:b3:bb:5e:85:2c:d1:5b:c0:55:6f:36:
                    0e:90:27:d5:95:02:c2:96:1e:3f:0e:15:a0:90:da:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:66:9B:F5:E1:3E:F6:F3:99:A9:1C:93:56:1C:7D:28:F3:9E:DC:82
            X509v3 Authority Key Identifier:
                keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:22:c9:63:79:e7:5c:b1:06:00:59:44:4b:51:fa:ef:17:07:
         03:02:fc:14:da:0a:79:fc:80:40:63:62:6e:0c:70:6a:dc:dd:
         e3:f1:7f:f7:cb:5a:94:44:73:be:28:13:d3:b7:41:05:21:0c:
         73:0b:b5:0b:c2:ba:0b:5c:71:3e:9b:73:a5:18:64:4e:10:ac:
         a6:b8:f4:19:f5:92:48:90:14:2f:f7:c0:ca:52:7e:5d:f8:f2:
         6d:04:35:07:f0:ab:82:7f:19:79:5b:28:a8:5f:bb:7f:60:42:
         67:86:0d:86:b5:da:d6:94:57:f1:60:b6:ae:ea:36:42:c0:bd:
         8d:fc:e4:d2:22:3d:4a:c2:4e:60:1b:96:54:b9:7b:19:e6:22:
         9d:23:52:c4:7b:1a:1e:15:01:75:2f:09:70:bf:66:10:82:dd:
         fb:eb:df:c3:6b:df:e5:f1:bf:bd:d0:66:06:aa:40:fa:f3:30:
         53:b3:52:70:5b:37:67:ad:76:ff:3e:6a:d1:7e:0f:60:2e:46:
         40:7b:44:3c:8f:39:8f:e5:60:00:bc:e8:e2:d2:9a:ff:6e:d6:
         40:17:87:07:db:72:25:1c:0e:0a:6c:db:2d:f8:c5:55:3e:13:
         60:2b:c0:db:6b:49:12:10:c5:59:72:0e:6e:5b:8e:ec:23:bf:
         fe:22:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----