Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File:                     L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier:          0woVFfSat2E2I2ZOVISFUh4DA8or2pCKKMY6zU9vlk4=
Subject key identifier:   72:1E:18:77:E0:EB:B3:51:DE:67:1C:EA:53:B3:47:76:06:17:FC:06
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer:       /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial:       01962E986136F7FD2BAE9B61E55EFC714770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number:          03F1
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: CV+Wq6673wlhZXlQ/oz60oV4W2j9TE0enoKtYBti6MU=)
                          2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
                          3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:36:f7:fd:2b:ae:9b:61:e5:5e:fc:71:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=721e1877e0ebb351de671cea53b347760617fc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:e0:67:23:b4:4a:e0:b2:ce:ea:4d:4c:9e:
                    98:33:77:ae:14:b1:26:5a:10:aa:0b:b3:87:1f:e9:
                    6d:e3:ab:ba:77:5b:17:c4:22:05:db:cd:15:21:bc:
                    b7:bb:5b:e6:2f:8b:89:fa:c4:48:97:bb:e8:5a:66:
                    81:88:8e:af:e8:e3:14:31:5a:68:d8:6e:ea:7f:bd:
                    27:09:b3:ee:4f:df:76:be:7c:66:0c:2b:c9:3e:cb:
                    42:43:7a:a8:48:23:03:0f:1b:ec:73:74:b0:af:5d:
                    22:9b:fa:e4:92:13:08:27:0c:a7:70:75:e7:cc:bc:
                    b3:ac:b7:82:43:b7:f2:c5:83:46:2c:dc:db:3d:c4:
                    a9:84:82:b7:22:dd:7b:b4:f7:f2:61:3c:21:21:c5:
                    d0:7e:53:da:bf:92:1c:08:32:31:b6:ba:59:31:42:
                    fb:b9:e1:fc:85:c4:3d:58:b0:a8:7a:ff:d1:1f:1e:
                    41:a1:a2:1a:4f:09:2c:93:72:52:f8:81:b9:89:ec:
                    3a:0a:d8:e1:24:c0:fd:de:5b:9a:53:77:f3:04:ad:
                    1b:b3:b9:83:33:15:9e:ed:b4:73:02:e3:7e:91:a3:
                    f3:37:cf:2c:9c:af:9c:ee:4d:fb:b3:40:58:d2:86:
                    a7:20:14:fa:4d:50:be:75:0e:66:7b:7d:41:e3:71:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:18:77:E0:EB:B3:51:DE:67:1C:EA:53:B3:47:76:06:17:FC:06
            X509v3 Authority Key Identifier:
                keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:00:fe:b9:0b:7f:b1:3b:18:08:4b:ef:ec:f7:81:e8:ba:bf:
         c0:58:97:b3:a0:8a:3b:42:a9:7d:c0:6b:b7:a4:1f:a3:fe:11:
         41:ad:87:8f:ab:ab:34:13:81:36:0f:b7:05:6f:6b:ff:0d:64:
         62:cd:2a:2c:67:a9:df:45:b1:38:d6:d2:a9:85:df:93:d3:98:
         1b:93:8a:3a:a0:ae:38:8c:24:52:c6:80:8a:1c:4e:f9:f6:ac:
         f9:75:5c:ae:da:cc:1a:fc:a7:5c:5c:ae:1b:8d:c1:e2:d6:95:
         9e:d0:07:96:0a:93:00:16:9c:e7:36:38:94:11:2f:db:0b:56:
         ed:0e:f5:55:97:de:29:82:76:15:f8:04:80:8a:24:f0:b1:25:
         96:9e:88:f7:cf:92:ef:9a:ec:bd:70:ae:ce:6a:60:13:34:56:
         8c:32:37:20:06:9d:e3:d7:a6:eb:ef:bb:22:3f:c7:60:eb:9c:
         05:e3:62:bb:3c:54:3d:32:cd:8e:9d:86:86:2e:c8:1c:74:c6:
         6c:19:ef:da:df:83:f0:76:5b:48:68:4c:01:27:3f:2b:d3:7a:
         a5:71:ce:ec:68:ee:8b:0f:8f:af:70:46:70:c4:ca:be:a2:c0:
         9e:bf:e2:92:2e:85:a7:42:65:cd:ed:55:3c:c0:9b:c8:08:9c:
         b9:bf:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----