Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File:                     L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier:          qFO4/W1ewTf9jCFHb9dtx2pRjwt84f68glSK9EGBVCk=
Subject key identifier:   7B:76:AA:E6:6B:48:ED:D2:5A:32:27:C0:2E:5F:69:D0:D0:6B:1B:00
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer:       /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial:       01962E994D57B91933B125C7D40BCC73EBDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number:          0733
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: 2rbvcXcHBIdKFxPoALEfwbj+0hs9Tlbw6y9hbVC/gT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4d:57:b9:19:33:b1:25:c7:d4:0b:cc:73:eb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=7b76aae66b48edd25a3227c02e5f69d0d06b1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:ad:55:7c:ef:8b:5e:47:63:83:28:5f:6a:
                    16:bc:cb:27:e0:cc:27:33:75:fd:71:94:89:b5:ee:
                    8b:16:f9:95:8b:38:d1:87:ce:4c:19:2d:ec:26:bf:
                    16:7a:d5:ff:be:a9:2f:8f:1f:c5:81:4d:ed:8b:19:
                    c2:c7:15:eb:34:bc:5a:07:54:09:89:8d:f1:cb:75:
                    99:6f:d8:a6:b4:98:5f:c6:dc:61:87:27:ee:84:2b:
                    a6:db:5a:11:20:4d:f8:22:9c:2d:bc:05:a6:7e:91:
                    be:31:bf:48:d0:bf:b7:69:fd:c4:52:38:45:b0:fd:
                    c4:3e:b9:f3:04:43:da:4f:da:85:db:06:5e:b5:bf:
                    d3:89:12:24:d2:fc:a7:f1:58:74:2a:1c:84:01:34:
                    7b:55:13:b5:6b:eb:85:ff:4f:32:a7:83:d2:6f:bf:
                    27:5e:65:13:8c:ef:18:55:c9:f0:aa:83:91:16:0c:
                    a9:10:cb:32:11:17:71:1e:b4:fc:f7:83:ba:9d:2b:
                    28:ce:47:39:8f:41:b3:ed:1a:ff:ff:6e:b8:36:9e:
                    0b:0f:4e:44:4e:35:18:4c:97:05:67:26:dd:f5:4b:
                    07:7e:40:96:d8:9c:56:45:57:d5:7e:c9:08:0b:30:
                    bf:96:21:fc:95:2d:8d:a9:44:2d:59:c0:51:28:53:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:76:AA:E6:6B:48:ED:D2:5A:32:27:C0:2E:5F:69:D0:D0:6B:1B:00
            X509v3 Authority Key Identifier:
                keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:23:53:85:e8:52:51:a3:60:06:83:b0:cf:ad:62:0f:50:d1:
         61:ef:37:27:71:7e:ea:db:ab:4f:fd:4b:f0:7f:48:92:af:3e:
         26:d1:4a:1f:c5:70:14:49:1a:64:e6:4f:96:a4:98:c5:c9:07:
         a1:38:12:64:00:97:a2:7a:02:d4:fa:ef:b2:53:a0:14:9c:00:
         e3:c5:13:bf:5f:73:42:c1:f0:48:c8:08:8a:0f:ba:c7:44:e0:
         af:48:80:ec:0b:05:64:12:7b:4c:a7:2d:49:b1:13:b5:28:e4:
         27:ff:4a:8f:9e:d2:9c:9f:05:bd:a8:ba:33:24:a0:92:9f:33:
         b6:f9:4b:54:53:1b:bf:72:ba:59:fc:2b:c9:6c:4f:6e:ee:98:
         54:7b:b1:0d:94:cc:87:e1:ee:11:9a:c4:83:58:bb:d2:60:35:
         41:68:a8:82:c2:65:63:d2:6b:72:d9:32:49:5b:a6:30:7b:eb:
         6e:fb:8e:9e:ee:0d:a1:35:6a:b4:86:54:48:a5:f1:6a:b1:30:
         02:9a:97:f2:3d:41:3c:45:b6:53:27:95:9e:66:ea:19:80:a7:
         81:cb:02:61:72:7c:76:4e:b4:de:0c:be:42:fb:fd:25:e5:e2:
         ae:ac:96:bd:c8:7f:53:7b:f0:5e:53:7d:cb:1a:ec:8a:86:9b:
         c3:74:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----