Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File:                     L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier:          H7TBXSyvRz+asaNmdUD+eZFPXs77U5AuOy54RwWpLP8=
Subject key identifier:   67:A1:F0:6A:ED:10:58:BA:14:97:96:DD:5A:1D:E4:FC:71:C2:04:54
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer:       /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial:       01962F06A739EA820C64A53528EB046FBE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
                          2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: WTRv3C++YOcnvR6jePw7TmyiA6IAsDG5eA+4f3KzhqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:39:ea:82:0c:64:a5:35:28:eb:04:6f:be:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=67a1f06aed1058ba149796dd5a1de4fc71c20454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:2d:d4:88:14:ec:2c:39:f8:b1:c4:8e:90:
                    17:e5:34:93:d0:e6:95:3c:e2:d5:02:d5:86:44:09:
                    ba:80:4d:2d:c5:87:fd:47:54:c8:63:bf:24:2c:78:
                    af:ad:61:49:51:31:b3:3e:35:21:2a:88:97:3f:1d:
                    39:bb:d2:2b:77:be:be:26:fc:ae:94:55:bc:63:e6:
                    5b:29:78:a4:6b:cc:28:2b:c8:f2:72:81:97:43:c6:
                    f2:60:9c:1a:c1:4c:d2:fc:06:df:70:af:2c:f2:9f:
                    37:79:90:2c:b7:e3:c3:5e:ed:02:34:b4:f2:a2:57:
                    db:ea:41:b1:68:6d:f0:e8:b4:cf:d4:20:65:fe:df:
                    7e:da:21:a6:78:f1:77:16:f8:6b:ee:05:74:53:dc:
                    da:8a:8c:96:d9:80:0c:75:a5:ba:52:a2:00:a5:b8:
                    c2:56:2c:39:ad:7c:4e:ae:ec:9b:7a:dc:1a:38:63:
                    3c:46:33:74:d9:00:a9:e4:50:af:04:2f:75:d2:98:
                    e0:bf:0f:75:3d:f8:9b:e0:45:68:0d:33:24:80:ed:
                    8e:52:34:b8:ac:01:89:70:72:a0:62:7b:8e:71:b9:
                    d1:65:72:bb:48:1f:e5:2a:78:c3:d2:3f:27:60:b1:
                    86:7f:47:c2:50:f5:12:ba:a1:09:d1:93:1f:e1:12:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:F0:6A:ED:10:58:BA:14:97:96:DD:5A:1D:E4:FC:71:C2:04:54
            X509v3 Authority Key Identifier:
                keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:82:1d:4b:56:17:36:da:c0:71:71:6a:01:21:10:c0:0b:d5:
         d8:7f:03:48:aa:05:f0:db:e7:a8:94:57:15:cb:d6:e9:b9:42:
         de:37:fb:01:85:b6:02:d4:99:2b:e0:6a:36:14:30:25:81:9f:
         26:f6:c7:b9:9b:6a:e6:48:b3:58:69:9b:24:8f:53:fa:8c:cd:
         bf:99:fe:59:e6:f4:cd:b7:2a:19:fb:a1:8c:25:d3:df:6d:28:
         6b:e4:74:e3:6d:10:35:4c:89:48:89:4b:e3:2c:48:4a:c9:05:
         22:f6:0f:2f:2d:f7:07:96:21:bb:5e:d2:f6:a3:61:55:f1:f1:
         a9:6f:ef:d7:8c:f2:9d:f4:fc:48:64:39:dc:b0:92:e4:da:35:
         04:dc:5f:8c:43:4c:13:db:c6:bc:11:ec:a4:48:9d:fd:6e:9e:
         26:9f:2f:da:2b:5e:aa:6f:63:c5:db:68:48:96:8e:69:47:72:
         29:51:b7:0e:a6:b9:90:e5:80:e1:9a:b2:97:a5:42:df:62:c8:
         5f:cc:dd:90:b6:62:e9:d7:5c:a4:0c:ea:83:4a:c0:ab:1d:33:
         56:50:d5:b1:ae:41:c9:63:2f:7d:bd:59:95:18:4f:06:52:c6:
         c8:93:bc:b9:52:2e:c7:bc:03:ba:67:a5:01:a1:1d:74:83:12:
         cd:76:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----