Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
File:                     l2aFR6QzND3em7NllbyQO08UlgQ.mft (raw, json)
Hash identifier:          /t8PDOGJbRa9LSCyq6ei1EsxGGsVBB1FjTWNW4dTu+0=
Subject key identifier:   9C:5E:BB:A7:82:5A:A8:C1:49:CA:50:7B:9F:1A:9D:26:1B:14:97:F4
Authority key identifier: 97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
Certificate issuer:       /CN=97668547a433343dde9bb36595bc903b4f149604
Certificate serial:       01962F74260D8ED0BA3746E6AF4F8D9744AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 4iS4euTiQtItVR9HBATrZ2d1jzs.roa (hash: Nz/wJMhE4IZvQI592qdr0LdN9YN/43igAFLk6lhCh5w=)
                          2: l2aFR6QzND3em7NllbyQO08UlgQ.crl (hash: pJPHlYa8HLEl7CDp0X2LGaSowzn32tl78Bop3BkMQ9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:0d:8e:d0:ba:37:46:e6:af:4f:8d:97:44:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97668547a433343dde9bb36595bc903b4f149604
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=9c5ebba7825aa8c149ca507b9f1a9d261b1497f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:a2:33:bf:06:eb:f4:2f:38:a6:8a:df:e8:
                    f2:f8:3a:b3:f4:c0:75:4a:70:2e:d3:07:a5:76:e2:
                    51:39:49:14:20:04:77:ff:f1:ae:41:bd:49:04:2c:
                    87:de:6f:ef:fa:ee:34:98:25:31:ac:3d:91:be:12:
                    cb:d8:64:8d:16:bf:91:5e:c7:3f:66:c8:09:31:af:
                    b0:cc:fe:1f:b0:0d:3f:da:ba:89:66:d9:e7:c9:1a:
                    11:c9:64:f5:c0:4c:b2:05:c5:cb:91:c7:56:7f:d9:
                    c6:95:e5:c5:3c:a9:d5:cd:de:50:c1:fd:fd:d0:02:
                    f9:57:21:6f:3c:0f:e0:10:4d:4f:2a:45:79:e2:4e:
                    e9:7d:06:00:4a:83:d5:90:2d:39:39:11:b8:5c:cf:
                    1a:34:a2:01:e0:53:ce:d6:98:1d:d3:fd:f5:8e:46:
                    ab:1b:74:80:0c:62:7d:f1:11:00:82:36:c7:48:71:
                    bc:ef:d6:8f:80:15:33:4b:74:df:f2:4a:3d:22:b5:
                    a2:10:37:1a:6b:5d:9c:f1:3e:18:5a:f6:a0:e2:38:
                    6c:a6:1d:12:3a:cc:e2:ce:df:3c:20:88:8e:2d:c0:
                    04:dd:a2:bd:16:ac:ca:26:8e:ec:ab:88:4a:f6:84:
                    f8:af:7e:b5:e8:e7:d1:f4:71:f7:31:f7:90:ec:c2:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:BB:A7:82:5A:A8:C1:49:CA:50:7B:9F:1A:9D:26:1B:14:97:F4
            X509v3 Authority Key Identifier:
                keyid:97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:25:bf:6e:46:09:2b:c5:70:84:8a:8c:d4:8c:9a:69:c3:
         1e:bc:eb:e8:c5:89:9f:50:8c:c5:73:9a:db:5b:91:35:21:65:
         dc:fc:2a:86:6d:e5:3b:10:a6:62:18:11:57:ee:71:92:57:d3:
         51:86:50:ec:b0:82:3b:95:87:03:97:58:43:df:79:4a:f7:c2:
         98:65:5e:8f:4e:c6:4f:6f:95:fa:42:f7:15:ea:74:d1:32:f9:
         9c:ce:7b:85:1a:57:15:39:34:cd:f2:e0:89:35:39:d4:38:0e:
         55:14:52:de:16:62:64:5e:b0:40:b1:b1:e3:af:20:e5:ae:d7:
         fc:09:21:45:d7:06:db:09:bf:cf:e3:c5:13:30:74:4e:f9:11:
         78:1d:3b:9c:b8:5d:9d:3e:5c:96:05:77:91:ba:d9:cc:a8:a3:
         5b:4e:c8:28:53:a7:e6:d1:e6:fe:ee:d3:a8:8a:fe:dd:c1:92:
         a4:49:63:96:67:17:ad:0b:f1:1c:2e:15:9f:60:b7:c3:0f:3e:
         a9:28:29:aa:83:bf:28:de:95:06:3a:89:db:31:29:b8:99:b9:
         de:c2:7a:73:fd:0b:3d:a5:ca:cd:35:cc:5c:29:7e:d9:6a:9c:
         c2:b5:13:6c:d4:52:83:1b:8d:a7:51:81:6d:3a:71:80:f3:b2:
         f7:0d:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----