Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File:                     L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier:          vrbI93hdwac/ySAwrTuJ83ncoPf1cDVRK26VH9CLuP0=
Subject key identifier:   29:D2:37:F1:DC:07:4C:C0:FE:A0:A2:1C:D6:2A:4D:AE:EC:0D:A2:51
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer:       /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial:       01962ECF942A8E7C0AC2B78BF22B0D61D447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number:          11EA
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=)
                          2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: s9NiRIZ8XEj4il/Od78ImfDdJZxlrxM4h7ZXxNST7eM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:2a:8e:7c:0a:c2:b7:8b:f2:2b:0d:61:d4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=29d237f1dc074cc0fea0a21cd62a4daeec0da251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0e:b3:7f:5c:e2:83:b4:a3:a5:08:5e:85:25:
                    6f:92:b2:b8:dc:0a:1b:14:b8:40:6b:03:b2:e0:3d:
                    8a:a8:fc:c2:a6:b2:aa:63:da:e3:40:d0:78:6d:a9:
                    d4:0d:ff:7f:c2:3f:90:76:2b:60:92:1b:f8:24:f7:
                    17:1f:a3:a2:4d:7c:cc:fb:e7:d7:a7:ad:f3:39:5a:
                    f3:5f:b9:b9:b0:ae:f8:e8:c4:b2:02:3b:bb:db:a8:
                    1b:67:23:37:3d:85:b3:bc:3e:2b:7c:0f:d8:ed:b6:
                    0e:a4:1e:a2:83:a6:d9:fc:8e:d5:ff:11:51:a8:26:
                    57:06:b3:fc:bc:e1:30:13:b0:b8:01:92:e7:85:ea:
                    44:c3:68:eb:e0:d1:7a:d4:7b:a4:c6:0d:3f:13:36:
                    52:b2:16:d0:c9:99:ae:0c:e6:6f:e7:85:a9:88:f2:
                    40:c3:31:1e:51:57:81:8f:54:c1:77:b9:af:9e:ff:
                    fa:62:60:da:3c:a0:98:fb:54:50:4f:45:c5:de:3c:
                    43:3e:d8:ec:40:24:be:8c:df:41:c7:a9:65:89:36:
                    05:af:37:87:92:1c:84:1a:15:6d:44:59:5b:10:7e:
                    4f:b0:f6:65:07:44:62:6e:91:1e:49:ed:b7:20:54:
                    0a:ce:b9:d9:d9:fe:dd:d5:2b:0c:a1:7e:15:fa:ce:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D2:37:F1:DC:07:4C:C0:FE:A0:A2:1C:D6:2A:4D:AE:EC:0D:A2:51
            X509v3 Authority Key Identifier:
                keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:d7:29:e1:95:f6:87:f6:d1:17:ee:29:22:58:af:b1:04:
         25:92:e0:e6:0b:bd:ff:47:eb:3c:cc:5e:40:7c:fb:91:1d:9d:
         cb:7b:4e:ae:e4:06:b5:e2:52:8c:f2:bd:f2:d0:3f:f8:41:9d:
         5f:5e:da:c8:5a:87:95:34:ec:79:c3:7b:e8:1e:dd:cd:ca:ba:
         a7:cc:9e:84:e2:af:2a:de:1b:f3:39:5b:41:f9:a1:3a:fc:a7:
         42:02:04:b0:ce:44:44:51:37:67:39:98:27:ae:58:2b:32:d1:
         f9:a7:84:f1:6a:85:31:16:4b:ec:b9:82:cd:83:17:38:95:88:
         b1:ae:08:b7:bc:a0:f5:03:ab:96:84:1a:a4:b1:d6:05:98:26:
         6c:93:3c:3e:5f:e8:f6:cb:8a:ef:09:ef:70:cd:aa:96:7e:34:
         e5:6a:96:2c:38:08:b0:96:1f:ad:6c:24:34:95:94:59:a8:ef:
         23:45:a5:c6:2e:f1:6c:b3:9e:70:ad:0b:a3:5b:23:9e:1e:1a:
         c9:36:a6:27:7f:64:3d:1f:e4:6c:7a:71:20:2c:18:4a:41:00:
         65:56:8e:8f:22:79:99:bd:cd:db:50:8a:96:58:60:4f:73:6f:
         68:f0:2c:30:9b:97:ed:d6:eb:10:f6:bb:42:4d:ac:c2:cc:fe:
         33:1a:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----