Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File:                     l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier:          4kxaU1JxVX5Xs3ve9uDt1AxQKTwDQZNQLcDWOAtQdLM=
Subject key identifier:   95:CE:E7:59:3B:7A:FB:8C:33:85:AA:B6:A1:98:59:08:58:93:FD:D3
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer:       /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial:       01962E99682B493212FC727937C7D40F47F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: CCPppue5SC78bA6R6fyH/sBx48RkcdGnMWwQHP+D4a8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:68:2b:49:32:12:fc:72:79:37:c7:d4:0f:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=95cee7593b7afb8c3385aab6a19859085893fdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:35:24:f8:b1:0d:d1:3b:51:92:8e:8e:ca:
                    a6:c5:9a:fb:dd:a2:4e:51:1a:fd:08:ba:c4:29:cf:
                    7a:83:4e:96:fb:c5:d3:92:4b:d2:2b:44:d4:45:84:
                    cb:5d:8e:b6:22:ec:2e:95:4c:0a:ec:09:88:7e:cc:
                    67:8b:f2:c2:88:9e:a9:1d:52:8f:82:68:ef:fb:9e:
                    2e:c1:e5:85:eb:e7:95:11:cc:92:e8:c9:0a:07:73:
                    e1:ca:4a:ab:52:e6:7e:1a:b9:99:ea:93:a8:f3:9e:
                    91:e1:86:ed:fa:75:de:66:ec:73:b6:96:9e:d6:88:
                    3e:9f:d0:ec:20:9e:80:8d:bd:7b:a2:79:ed:b5:58:
                    0b:9b:30:34:a7:0c:6a:1d:da:28:62:75:76:f8:f2:
                    b2:3d:e3:ed:f2:90:df:ba:a7:6f:32:f2:9f:c5:c1:
                    b7:8f:73:41:43:eb:2e:a4:95:07:d2:4f:a1:3d:e1:
                    f8:f0:86:1f:00:92:83:e0:e3:98:f8:cf:8e:ea:62:
                    08:08:91:3c:a1:1e:19:20:cc:dd:a2:33:70:61:5b:
                    66:e5:06:13:b8:94:d6:ee:f5:0f:ca:19:9d:8d:30:
                    7a:12:d4:e6:0b:eb:b5:93:21:8d:b1:f5:56:10:f4:
                    f4:90:72:48:d8:57:b4:da:ed:c0:06:4f:37:1b:9a:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:E7:59:3B:7A:FB:8C:33:85:AA:B6:A1:98:59:08:58:93:FD:D3
            X509v3 Authority Key Identifier:
                keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:d3:48:e3:d3:8e:bb:a5:35:a5:57:ea:c7:a0:56:26:42:
         ff:b2:80:5d:22:2d:38:2b:08:40:8d:58:53:83:d4:3d:53:d4:
         70:a0:26:17:00:fb:1f:58:bc:5b:c6:6d:28:75:57:b1:e5:c5:
         3b:af:c9:1a:78:de:82:16:60:d2:fa:9d:22:fe:55:56:5f:a4:
         7b:6a:17:c5:7b:5a:f8:bc:54:98:d9:3e:4a:0e:40:18:c4:eb:
         2c:ac:00:41:00:17:2c:dc:14:1a:ef:b2:02:80:1f:a6:45:d6:
         ae:33:75:c6:8d:42:89:d2:df:de:55:74:4c:b6:8c:08:10:76:
         6a:27:7e:71:e2:ba:26:fa:72:c8:17:58:f3:6d:ee:45:d4:e1:
         25:ec:94:42:4b:90:8e:ef:fe:0a:9f:ac:9d:9b:5c:5c:c6:00:
         43:fd:62:9c:77:c0:52:72:bf:32:19:1f:9f:69:82:e8:b2:56:
         b1:c2:8d:3e:b7:58:cb:77:60:01:ca:b0:d3:43:b3:c6:d4:cc:
         76:84:84:7b:a3:a3:eb:64:b9:f6:38:c9:6f:ff:32:67:ca:e4:
         58:3e:6a:55:f5:9f:3a:29:81:49:87:d5:de:06:07:b5:4d:3f:
         5e:77:d5:b9:ad:f2:67:df:f7:ab:dd:94:c1:33:0f:96:62:51:
         7c:d7:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----