Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File:                     L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier:          e9B4wYLfkC/UjM2zsGXVl7OmCibxOGVWwKuQ0eGoF+0=
Subject key identifier:   B5:1E:51:D0:10:57:85:A4:6C:BC:7A:A5:74:AF:F7:BD:27:5F:2B:6C
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer:       /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial:       0195DFD95C903057B34A09D2F85828BBC7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number:          10CC
Signing time:             Sat 29 Mar 2025 03:01:58 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:58 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:58 +0000
Files and hashes:         1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
                          2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: v4K/ZeP5BWhlbUZS2oMQBsM1NrmFwFISIUm3zSLv1NU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:5c:90:30:57:b3:4a:09:d2:f8:58:28:bb:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
        Validity
            Not Before: Mar 29 03:01:58 2025 GMT
            Not After : Mar 30 03:01:58 2025 GMT
        Subject: CN=b51e51d0105785a46cbc7aa574aff7bd275f2b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:07:bc:4e:69:5b:29:23:b2:b5:1a:c1:da:
                    ec:81:99:63:f2:8a:28:a6:7f:2a:3e:db:f0:df:13:
                    03:aa:fd:89:89:5b:58:5e:8c:99:c1:a2:b8:bd:f2:
                    63:d7:a5:92:49:cc:7e:a6:1d:0d:d7:9f:21:0c:7f:
                    58:a0:4c:b4:88:f8:c9:63:35:01:ee:b7:c0:a6:fb:
                    14:e1:08:2c:c7:53:54:8b:2c:7f:89:7c:d8:77:f8:
                    33:22:e4:7a:df:d3:4d:a8:ce:2e:83:28:b2:0a:e2:
                    0f:b7:ed:04:1c:23:6e:84:f8:e2:3d:2f:dd:15:b9:
                    6c:6e:cf:94:13:91:1d:c3:f9:c8:7d:7f:ae:59:61:
                    f0:65:0d:c8:8e:cc:b8:6a:64:d6:0b:12:46:ff:18:
                    d8:c7:b3:74:39:b4:26:d5:a8:28:2c:53:4d:6e:4c:
                    e2:b7:dc:68:c4:9b:83:f7:18:bb:da:75:4f:70:38:
                    2f:df:1b:70:c5:80:24:a9:5d:ca:49:6d:5d:04:29:
                    dc:e2:ed:7e:41:14:3d:16:0f:1f:c3:08:41:56:f1:
                    ec:dc:41:62:9c:fe:7b:73:41:04:4e:a5:88:21:53:
                    b1:02:e4:4d:3a:ea:9d:4f:55:97:bd:af:54:9e:c3:
                    36:dd:c3:1c:3c:79:a7:e0:7c:a0:61:04:b8:68:1e:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:51:D0:10:57:85:A4:6C:BC:7A:A5:74:AF:F7:BD:27:5F:2B:6C
            X509v3 Authority Key Identifier:
                keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:26:a3:1c:ab:2a:1e:84:47:f4:03:c6:2a:14:92:2f:55:93:
         a2:10:01:96:b1:92:d3:b1:f8:82:a8:b8:21:23:d0:0b:34:cc:
         2c:df:c8:81:ed:aa:d9:4a:a1:cb:fe:67:11:25:a4:31:f6:9f:
         f9:e6:0c:e4:f2:85:b3:91:9c:a8:db:90:c8:c2:75:89:f6:3d:
         9a:20:62:af:5f:0f:ae:c6:1a:12:d1:25:6e:bf:28:18:62:b7:
         a2:01:8d:77:05:8f:5c:52:b7:65:e4:04:7f:23:aa:b5:96:d5:
         8e:1a:9e:b5:b4:eb:ec:70:2e:80:ea:b1:e5:6d:df:82:13:0a:
         35:fb:e1:63:9c:6f:02:39:58:93:34:e2:be:09:f6:a1:5a:70:
         1e:af:d7:a3:47:95:2e:b6:d5:63:a0:05:3b:e5:f3:5b:c8:b6:
         63:3b:22:d9:cd:de:c4:73:ea:9d:aa:3b:5c:55:93:85:fe:da:
         5a:73:5a:3d:99:82:58:46:ce:39:ce:86:e1:58:2f:cb:2c:9a:
         17:48:0c:ca:08:c3:8b:92:fd:f8:ce:23:3d:aa:eb:cf:0d:f6:
         7a:6a:fc:b5:21:50:fc:46:bf:fe:fb:e6:a3:22:4c:41:ff:af:
         71:0b:b6:74:24:15:e1:e2:28:54:d1:08:13:46:84:d1:24:c4:
         e3:cd:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----