Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File:                     LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier:          qLt6yrJ5psiWbF46eJW90VoF/lAZ/gDbctiqfxO3X1Q=
Subject key identifier:   75:14:AF:D7:63:DE:A1:17:DB:4F:72:E7:34:99:82:14:61:9F:B7:05
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer:       /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial:       01962E617357A123F2E5B3D60855B13A0B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number:          050F
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
                          2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: xDA5Tv8eD5xRxwDAluL6b3SIj2hBy6G7FecJ+j9f58Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:73:57:a1:23:f2:e5:b3:d6:08:55:b1:3a:0b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=7514afd763dea117db4f72e734998214619fb705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:30:97:22:c6:c3:bc:87:80:f6:5c:58:59:
                    a3:3a:bd:99:dd:15:d2:c3:07:d3:26:00:27:2c:94:
                    b5:f6:25:40:05:f0:16:41:12:10:b9:62:bd:9a:47:
                    d8:71:e8:7d:fd:17:65:4b:6a:6f:b1:41:54:b9:e2:
                    e9:20:46:1b:56:5e:39:67:62:48:1b:80:95:91:45:
                    b3:a9:e3:3f:19:50:12:04:98:a1:69:7b:0b:4b:87:
                    4b:74:b6:7b:4e:a6:22:bd:50:0d:20:43:b1:c7:df:
                    0f:cf:1c:ab:f3:a2:47:41:54:0a:e2:bf:88:b5:79:
                    20:72:36:b2:4a:57:88:1c:39:30:7c:c3:74:e9:78:
                    3e:b0:ed:94:9d:98:0d:24:04:b8:49:1d:e9:05:41:
                    a8:d1:0f:8a:3d:45:21:15:37:3d:d9:46:e9:88:34:
                    9f:cc:86:f7:e5:59:3b:16:d3:8e:05:f6:e7:f7:ef:
                    d4:4a:36:b7:4d:20:2d:6b:9f:78:d6:04:dd:0a:9e:
                    69:d1:62:f3:7e:6e:eb:54:07:bd:7b:cd:55:e8:7a:
                    41:d6:72:dc:bb:1f:fd:bf:27:81:93:d4:9a:8e:9a:
                    20:14:e7:cd:47:6b:85:b8:b3:a5:7e:94:80:c3:d1:
                    99:ce:47:62:85:c3:36:c5:8b:c1:92:e5:37:4c:d0:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:14:AF:D7:63:DE:A1:17:DB:4F:72:E7:34:99:82:14:61:9F:B7:05
            X509v3 Authority Key Identifier:
                keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:7e:19:3e:6f:1f:3c:d3:cd:74:9b:74:3c:a8:1d:0a:1b:
         78:9b:36:f9:93:60:52:79:9b:0b:49:97:31:03:d7:5c:7c:d7:
         1f:70:5f:ac:d9:2d:6d:96:2a:c4:95:d1:5b:7c:8d:dd:28:2d:
         46:db:7c:79:8f:e5:10:2f:0f:cd:8c:9e:8a:3d:50:0e:60:fb:
         c9:d8:67:1f:e0:83:90:b3:93:3d:7a:5b:e9:8c:a4:00:aa:53:
         a1:07:79:e5:7a:6a:8d:ad:f9:fd:ca:b7:a2:29:f0:13:f9:a7:
         2c:dc:0f:13:ab:f0:d4:79:bf:0f:e2:3b:5e:1f:7f:ef:a7:d8:
         26:ce:9f:63:ed:20:0b:3b:82:6f:8c:80:e4:a8:d0:7e:f8:24:
         87:c0:6d:3a:51:38:3e:32:74:81:a9:1c:fe:f9:a0:55:bc:26:
         60:22:fa:9b:e5:a8:aa:f3:66:94:ae:31:57:dc:4e:0d:5a:60:
         74:1a:17:3c:8d:cc:ec:80:80:50:c8:ee:b8:d7:77:fb:69:40:
         38:25:34:48:38:39:e9:54:fd:bc:85:8e:f0:45:a9:28:35:0d:
         d2:dd:56:db:e3:ae:99:d1:35:49:2d:d1:12:11:bb:c8:72:f2:
         56:9a:ca:ab:35:0e:aa:58:e9:ad:3a:e1:f1:07:a3:43:29:09:
         31:52:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----