Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File:                     L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier:          HZOmPxkLjRZMtOBBmR7OqbMH1cEYAr96E6Js09qh0Ik=
Subject key identifier:   D3:04:18:88:FF:3B:EF:19:CD:20:4D:CE:C8:AF:E9:08:21:00:6A:17
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer:       /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial:       01962ECFCE963E1F54EA70A349EAD2ED0296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: fTMteRFStAwwfFctSS17S1H27J4eVUcF8SVtL459yRo=)
                          2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ce:96:3e:1f:54:ea:70:a3:49:ea:d2:ed:02:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=d3041888ff3bef19cd204dcec8afe90821006a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:5d:2c:b1:68:96:54:20:ed:40:62:d7:87:
                    59:59:18:8b:9c:4d:d0:cc:fe:85:d8:ce:81:e5:8c:
                    63:35:15:4b:8c:49:31:74:e6:c6:2b:39:bb:87:7a:
                    dd:75:5a:3d:f3:d4:56:32:61:5f:0e:c3:e4:a9:d7:
                    fe:da:64:47:26:6e:25:95:2b:60:dc:29:20:4e:14:
                    1f:75:a9:81:15:ed:78:ac:57:68:ef:8b:ce:68:06:
                    df:b0:4d:7b:75:dc:b3:1f:e9:ac:11:e4:36:05:74:
                    8e:92:87:f5:72:f3:37:36:39:92:b8:92:97:9f:a3:
                    8d:bf:ff:1f:f8:ba:b2:85:a6:37:3c:36:7b:1a:1b:
                    46:54:9a:83:72:33:2f:cc:c9:e8:d4:a8:4e:ca:87:
                    04:45:a0:fe:b8:ce:7b:43:f8:63:b8:e2:a0:c0:69:
                    c1:cc:b2:d2:d1:8c:89:2e:5c:db:4d:c8:ea:52:b7:
                    98:7d:6a:66:fb:8f:10:b8:14:b3:4d:5a:34:f8:76:
                    cf:cd:40:89:9b:4f:da:b9:c5:1e:53:c6:cd:e8:55:
                    f7:81:17:80:7e:8f:bd:66:8e:c5:18:43:d2:4d:9d:
                    27:46:74:4e:f5:00:99:18:ba:79:41:fb:30:ee:de:
                    0c:f5:e1:45:31:72:eb:f1:04:d6:5a:eb:d5:7d:69:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:18:88:FF:3B:EF:19:CD:20:4D:CE:C8:AF:E9:08:21:00:6A:17
            X509v3 Authority Key Identifier:
                keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:8e:0a:5e:c0:5f:e1:c1:ce:04:0d:d4:ed:7e:fa:eb:90:
         e8:f6:1d:1d:0d:a8:85:c2:9f:3d:bb:f2:76:cb:5a:59:b1:97:
         6d:dd:6e:a1:78:21:f4:6d:a5:ed:e8:2a:46:8c:2f:fc:37:d9:
         90:3a:33:87:ba:65:34:13:ed:65:c8:78:24:15:58:46:8d:4b:
         cf:88:a9:a8:60:56:fd:22:12:f2:73:96:f2:83:57:51:63:e2:
         8d:26:ba:49:cc:6b:eb:23:96:ed:3b:84:04:a5:43:df:3b:e3:
         7a:35:02:7d:c2:5d:08:df:be:47:6e:18:28:0a:88:64:9d:a0:
         ca:6f:57:ba:36:db:79:8a:2c:86:06:64:0c:d6:c7:36:eb:cf:
         72:3c:fd:c3:a0:8a:a2:09:da:e6:a4:d3:37:fe:1d:41:d2:42:
         23:9c:4a:70:9e:01:e8:0c:46:00:4a:fa:bd:47:db:48:4f:4c:
         fa:87:67:e0:29:bc:36:5e:9a:20:da:55:5e:7f:a3:b8:77:db:
         4f:18:74:95:32:5e:9e:cc:50:0e:55:fc:96:5b:40:b7:b7:68:
         39:c9:f1:64:2c:92:7c:4f:bc:7d:09:c1:ab:f5:ab:ea:03:d8:
         c6:87:40:96:e1:1d:34:5e:fc:de:94:37:2b:a4:2d:8d:35:d7:
         95:c2:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----