Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File:                     Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier:          rMfF/iP3mjP1cpuh1A5eK4u/Ly6Kx1aiLU+rW3CG3Ho=
Subject key identifier:   E7:1E:70:41:54:6B:37:AD:22:D7:FE:2C:13:14:FD:A0:E0:63:F8:3B
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer:       /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial:       01962F3D81623BA9C32C5898DF4016445454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=)
                          2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: egtM8Lr8TnzVjN+QdMHWOkLk6lN47LetfmOeU0/etuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:81:62:3b:a9:c3:2c:58:98:df:40:16:44:54:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=e71e7041546b37ad22d7fe2c1314fda0e063f83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:77:ac:8f:c7:b3:61:47:0f:76:78:f0:f1:
                    20:2d:b3:2d:2c:3e:cf:1f:9b:c6:7c:4c:af:7b:13:
                    63:9c:28:ad:00:cd:86:72:6b:c9:6c:18:9c:06:a8:
                    2e:78:6b:f0:0a:16:10:2e:74:06:1b:b6:92:df:85:
                    86:70:2b:dc:0f:a0:fb:74:81:9f:5c:a6:0f:6a:05:
                    cf:9d:a1:8d:d7:b7:cd:ea:5b:67:cc:11:8e:4c:c1:
                    3d:fa:c0:fc:fb:ce:7a:48:b8:f8:a5:a9:52:42:56:
                    24:5c:db:6e:b4:1f:98:ea:e7:eb:44:39:38:6b:ae:
                    66:94:90:e1:6b:07:a0:4f:20:3a:73:1b:21:0a:32:
                    73:6e:84:21:bd:e0:01:8f:48:12:55:24:6c:b0:08:
                    8d:64:74:d4:65:0a:f4:61:c6:21:f5:7f:35:5f:c7:
                    66:d5:52:3c:94:f9:8e:d3:4b:23:e3:d5:01:f9:a2:
                    68:5e:3d:2b:b9:6a:f8:09:d8:4e:b4:c8:f9:f5:e0:
                    6b:07:35:01:6e:66:76:3f:e6:e0:69:03:e3:0a:e8:
                    b4:29:24:d1:69:70:7e:f9:9b:2f:ee:32:b0:98:98:
                    d8:ba:94:9c:8e:e8:78:79:80:7d:1a:c9:8b:35:43:
                    72:76:46:51:5e:f0:f1:22:10:93:70:ad:3f:55:bd:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1E:70:41:54:6B:37:AD:22:D7:FE:2C:13:14:FD:A0:E0:63:F8:3B
            X509v3 Authority Key Identifier:
                keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:e8:ed:36:2c:03:c0:3d:32:cd:8d:b0:6e:41:15:49:e0:
         a8:73:87:ef:2e:4e:f9:e3:cb:5a:45:b5:61:26:ee:8b:42:6a:
         81:26:79:62:4e:3d:3a:0e:43:7d:78:28:26:c8:d1:67:47:c6:
         49:bf:7b:72:2c:97:ab:d9:15:a3:22:55:a2:d7:b1:4e:e3:94:
         7d:64:54:48:d3:20:5e:78:0d:fa:67:50:c4:2b:af:33:55:b5:
         a2:af:2a:55:f8:bb:b0:74:85:52:69:84:8e:91:38:ab:69:6d:
         e8:fc:cc:ed:54:a2:31:35:5c:1f:29:93:d1:e5:0b:e8:d3:70:
         12:22:73:d3:c0:06:f5:16:cd:62:09:86:a6:79:02:4c:4f:53:
         3d:3a:c2:d4:91:cc:a9:5f:27:39:14:fa:59:80:7a:7e:07:a7:
         a2:2e:02:50:7b:f4:b6:9e:0e:6b:bc:fa:51:f4:c4:bb:47:bb:
         c6:30:a2:fd:4d:c6:d9:77:f0:b1:1c:91:52:80:e1:c5:4e:69:
         ef:20:fd:ef:c6:13:24:1f:94:7c:cb:f7:93:73:3c:8a:d9:9c:
         0c:d4:39:98:cd:57:85:5c:ae:ab:91:b3:fa:d1:8e:fa:cf:60:
         01:9d:f5:9d:05:b3:3b:de:89:29:f5:3e:4f:16:05:3b:f6:80:
         87:5a:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----