Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File:                     l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier:          XJ6o7GHxYv5k+ZayVQPBX7V/7EgsSmwrowU/tFoUshs=
Subject key identifier:   A6:8E:30:E0:FC:A2:6E:86:ED:59:50:65:35:12:DD:F4:10:6E:10:04
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer:       /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial:       01962ECF51DBA98950499776323DC9756E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number:          0DFE
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: IDB5RjL2UBwC+9qzrrbJ/PXmu0pEw5Bpu/bgsYOrjzE=)
                          2: oEKdXw4w7e_1s4z2e7tOx4lNx0c.roa (hash: YjHL6/typreJGiDTssJHq0i4gZ1mztxzHYUdqtYA8ns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:51:db:a9:89:50:49:97:76:32:3d:c9:75:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=a68e30e0fca26e86ed5950653512ddf4106e1004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:52:0b:37:29:d6:16:de:de:d4:1d:bc:25:
                    4c:41:92:08:21:0f:68:f3:57:7e:4c:a1:19:b3:35:
                    6c:ee:ba:ff:40:92:e4:a1:b4:be:21:b7:4f:f3:83:
                    97:75:82:46:05:ec:23:a0:09:93:62:e9:45:4a:5c:
                    a7:76:b4:e9:11:fb:8b:11:13:d5:e8:a6:82:61:0c:
                    b6:b8:ef:e4:2c:2b:63:b2:b7:7a:8a:e4:97:97:cb:
                    59:01:9d:a4:65:81:59:0f:c1:70:93:85:19:9f:3e:
                    a4:26:f6:b1:cf:17:ad:7f:98:45:49:7b:c1:7f:1d:
                    2f:36:33:7b:6d:02:b3:e3:0b:72:14:3e:34:71:53:
                    4d:1a:67:09:00:c2:b0:19:1c:5c:ec:60:94:50:1c:
                    cc:e7:46:52:74:cb:62:09:44:64:fd:e0:03:e7:57:
                    e4:8b:79:99:ba:5a:11:8f:b1:f0:aa:54:bd:c9:ae:
                    73:26:4e:8a:e7:6f:7f:eb:34:2d:5e:2d:a3:da:07:
                    21:e9:f0:5f:f0:9d:f9:31:62:f1:49:3f:8e:85:9d:
                    72:10:d0:d2:78:2d:bc:32:59:f2:0f:1c:f8:60:31:
                    cf:ee:e3:89:72:45:11:0a:b2:0d:10:5b:c1:f8:9c:
                    b8:a6:a7:fe:67:25:2c:b5:a4:cf:38:68:ca:8c:ce:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8E:30:E0:FC:A2:6E:86:ED:59:50:65:35:12:DD:F4:10:6E:10:04
            X509v3 Authority Key Identifier:
                keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:06:55:bf:f9:82:b5:a5:3f:15:0f:f5:99:28:28:40:14:
         3a:91:96:d2:f9:c2:4a:e0:15:0e:85:83:ea:2c:bb:49:97:a5:
         43:4d:07:81:51:72:08:8b:91:99:99:15:95:95:47:34:90:30:
         a7:f5:01:18:cd:96:a1:15:9d:6c:bc:29:7a:3f:a5:3a:2e:17:
         a0:fa:be:57:7c:43:55:f8:3a:ec:67:b2:e3:7c:dd:8c:ae:77:
         9c:d0:c2:19:a4:f5:ff:d8:f3:69:4d:93:08:28:aa:57:63:36:
         92:34:2b:7f:25:36:32:70:f1:35:78:50:ba:ba:c4:f4:f2:97:
         75:bc:ac:62:07:c2:3d:b8:6e:89:5d:83:8a:b2:30:64:78:2d:
         a5:2a:ae:f9:dd:6a:e8:d8:f9:17:3d:fb:f6:e5:51:7e:6a:75:
         58:ce:6a:6b:d6:24:c0:19:c4:3e:45:29:92:b8:1c:b2:8b:90:
         b6:e8:a4:8e:a5:5e:0e:17:d8:c2:03:19:09:9c:1e:7f:51:d8:
         06:92:e8:43:60:87:c9:0f:5e:57:9d:65:72:ac:83:47:e5:c5:
         8d:6a:5f:e2:d6:c9:98:12:60:ca:ed:31:d3:8d:69:f7:10:d8:
         2d:24:3e:12:60:25:19:20:f4:8f:9e:f8:2b:05:f8:c0:e3:5c:
         94:42:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----