Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File:                     L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier:          RowSmFDidodG+N6ZP5jY5Uv9aixTa+725av72ShQi9Q=
Subject key identifier:   27:B1:44:D2:3C:F2:D3:FF:40:45:B9:C8:13:C4:84:26:BE:B9:A3:32
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       01962ECF5D0E9D3D4841538A6A983E7FC267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number:          0CF6
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: RInBC9X9fY9wTsmq1G27TOci3pLoiWou+1CWxQ0Wryc=)
                          2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5d:0e:9d:3d:48:41:53:8a:6a:98:3e:7f:c2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=27b144d23cf2d3ff4045b9c813c48426beb9a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:e8:f5:74:cf:d8:c3:74:15:cc:4f:95:b2:
                    3b:2c:08:e9:aa:58:03:15:f1:71:62:cf:e8:2d:e1:
                    6b:fb:88:80:a4:21:fa:0e:fe:ed:26:1b:8f:75:33:
                    f5:fd:eb:8d:53:d2:0d:10:46:5f:bf:3b:7a:f5:bc:
                    7e:2c:8e:04:e3:91:f1:4b:ce:ca:ce:ef:8f:37:f6:
                    5f:e2:53:2e:ac:d6:5c:58:91:c0:81:14:3a:98:76:
                    c8:db:0f:15:9c:08:81:98:ac:00:56:a8:51:89:4f:
                    34:09:04:eb:d6:b0:95:18:89:ba:64:fb:a8:f9:eb:
                    05:5c:75:45:40:78:e0:8f:d0:9d:43:0e:7f:a9:44:
                    ed:fd:b1:47:81:8a:45:47:4b:28:8f:ac:9a:04:77:
                    d5:9d:8a:d3:29:11:1d:d7:c2:cf:10:88:9e:6a:09:
                    ee:c5:7b:19:d9:dd:59:de:9e:26:50:b2:5b:59:f2:
                    7a:36:7f:2d:91:24:b1:a5:7e:56:29:fa:b7:dd:9b:
                    ee:e3:20:89:56:a5:b6:e1:df:06:81:b8:93:de:f1:
                    8f:70:cf:14:41:49:83:db:d9:2b:8e:7b:ab:5a:9f:
                    cf:81:2a:f4:f6:20:cd:b5:ab:e7:12:c1:38:b0:b8:
                    6e:71:65:03:75:32:d2:26:a2:6c:82:eb:d6:d0:81:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:44:D2:3C:F2:D3:FF:40:45:B9:C8:13:C4:84:26:BE:B9:A3:32
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:56:83:bc:97:e6:5b:5f:d0:e8:a3:01:d0:e7:7c:67:3e:b8:
         34:c9:f2:ff:7d:56:e3:c5:59:82:00:da:db:6a:48:61:03:59:
         29:39:04:ee:01:9b:82:80:04:69:b6:7b:eb:4e:b0:41:54:ba:
         ff:d7:7a:9a:ff:a3:43:91:76:85:37:0c:31:42:3a:ba:b5:50:
         06:cd:4f:e0:dc:7d:aa:bc:d4:e4:a9:10:1c:c1:68:41:f7:60:
         ba:80:79:aa:24:fd:0f:bd:33:b1:8d:ea:50:78:cc:d7:05:b6:
         9d:e1:d3:b5:0f:dd:37:52:8f:ef:34:88:3a:3a:58:68:ac:b2:
         b2:51:43:a0:f2:d7:53:8b:60:b3:0d:b5:f3:1b:0f:bd:7f:49:
         15:5e:d8:fc:13:10:98:8f:4b:2c:17:84:db:14:08:a7:76:5e:
         6f:d4:08:e4:55:85:2f:3c:c6:5e:6e:9e:6b:11:57:d6:11:d3:
         31:fe:cb:d5:a9:2c:10:d2:77:2f:2b:b3:3a:8e:15:81:2a:a1:
         ab:ed:08:cb:15:4c:43:14:05:d9:32:44:7c:fa:72:58:53:3f:
         e0:d7:07:18:d1:59:e5:6a:3c:c7:f7:f0:8c:e7:c3:bc:60:c1:
         1a:fd:72:7e:aa:c6:13:ed:63:58:82:ee:2a:a9:66:2e:5a:4c:
         91:bb:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----