Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          5agiuYPIo7ty3Y6eAHt2Sdv/Y06DTuSOFjrsM3GFI70=
Subject key identifier:   F2:68:22:B9:AB:F7:C9:3F:FC:45:C7:78:8E:75:01:0B:B1:B6:E8:2A
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       01962F3D2EC0BBF0DC8C32DA70D80028F6B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: DpIzmPef9sMfGB3pt3OaEX9SG6rRtRlRoZIZf50L/ek=)
                          2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
                          3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
                          4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
                          5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:c0:bb:f0:dc:8c:32:da:70:d8:00:28:f6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=f26822b9abf7c93ffc45c7788e75010bb1b6e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:9e:98:f9:f0:f6:cb:02:15:59:e4:5e:c3:
                    c8:4e:00:45:76:82:d3:48:cd:a0:f7:27:20:de:56:
                    16:93:6f:5f:3d:44:65:65:ec:6c:a2:f9:a1:cf:d7:
                    ee:a5:3e:5c:89:4b:d9:ce:4c:3e:d1:a7:37:9a:89:
                    18:97:d3:13:e8:7f:61:41:94:32:6c:22:51:c7:3a:
                    a4:0c:f6:ab:c9:d8:61:5a:ae:10:18:c5:94:2c:79:
                    63:a8:79:a6:dc:18:f0:29:fd:bf:df:fc:54:2a:8f:
                    28:38:9b:7d:06:dc:22:12:77:92:90:32:32:a5:18:
                    bb:9a:3d:85:2b:99:3a:66:bd:32:89:36:04:75:49:
                    fe:35:0f:70:28:8f:5a:d9:15:e9:19:0d:82:ba:2b:
                    8d:76:2d:1f:0d:5c:fa:43:16:8b:f0:b6:c1:3c:31:
                    84:4e:22:27:92:df:b8:32:32:ea:28:cb:e3:52:e5:
                    1d:d0:df:2d:9a:46:56:72:53:55:ab:b1:32:a5:ef:
                    03:e9:16:91:36:a0:ed:f4:48:08:83:a3:51:a7:a3:
                    28:bb:b4:a3:d2:93:f3:b5:9a:17:f1:bb:f8:82:46:
                    89:09:58:59:e1:68:21:f0:1c:0b:8f:77:99:fd:4b:
                    7f:2e:fd:f5:0d:fe:89:32:e1:a3:1a:5b:51:21:1a:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:68:22:B9:AB:F7:C9:3F:FC:45:C7:78:8E:75:01:0B:B1:B6:E8:2A
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:24:21:c7:c2:bb:80:ff:88:14:85:40:6f:4a:34:d8:f3:bd:
         d5:b4:52:22:fc:a2:3f:d3:c9:b3:7f:03:95:86:a2:33:8b:75:
         46:18:d8:02:a7:5c:9f:8a:59:93:66:b3:b0:54:7b:b9:f4:6f:
         1f:3b:69:e5:e7:e3:1b:5f:87:23:52:e7:af:0a:4c:4c:23:c5:
         ba:8b:90:00:37:a4:fd:c0:51:dc:e6:98:84:ac:6d:df:44:74:
         30:8d:63:4e:6e:12:10:c0:e5:8e:dc:e3:4b:7a:f9:56:8a:fd:
         60:2e:95:47:d6:89:cc:63:d9:18:6d:5c:0f:a7:9f:8b:70:60:
         06:01:93:53:de:b2:5c:8a:56:9d:b9:28:e0:29:41:f6:ad:75:
         b5:77:25:54:9b:45:be:60:6f:e4:70:54:b8:83:76:d1:36:79:
         15:89:a6:fe:92:93:56:f9:97:f4:ca:12:07:d9:2b:dd:0a:14:
         3b:62:fb:cc:c6:f5:91:8a:3b:73:71:ee:14:02:cd:cd:e4:1c:
         3b:bc:04:d9:8b:31:c9:13:10:03:66:25:e8:74:41:d3:c6:57:
         18:62:8d:be:aa:dc:82:00:18:9d:1d:e8:df:60:a8:ce:35:0d:
         b4:1b:1d:e7:29:ac:b5:eb:fe:25:6b:8f:91:5f:90:77:0a:f4:
         62:ee:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----