Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File:                     l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier:          cMjnzIzWO7aYNVaBlzX7R2rXXhgpa1rulHpv5RuysB0=
Subject key identifier:   4D:73:01:60:A7:61:A7:D2:33:1B:34:33:C3:BD:FE:A2:92:59:D4:EE
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer:       /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial:       01962ECF9CCB55B5C8CF1E764E7EA69525DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: Eem0N3GXMChoR9TCOhSTBkWIdjc.roa (hash: igndwr3EyynLXRXaxAnOCIr8pyhy15Y9vo4ph2wbRZ8=)
                          2: LOx2cabYCE0tgOiS27-I9gK-m30.roa (hash: HNokoXSpjSBytS57660YCLBUuzQoNnbg74bXQOtebTY=)
                          3: SZcqM2MymNLwtybzmnw-E1d2RJk.roa (hash: jRh3gj1EqHTeeiOWY5OcArwxYUApFn4YAZHaSARNuyY=)
                          4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: I47+d3voqbf569CJ9LbUTPazNIIPaS13cNuunbmzec8=)
                          5: safrg3kATgNbdktyHNaBTUQ20Fg.roa (hash: rMOUfy4ZM5vd45QmK8llUEFz0T+7f/LFtDqbEYg/alc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9c:cb:55:b5:c8:cf:1e:76:4e:7e:a6:95:25:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=4d730160a761a7d2331b3433c3bdfea29259d4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:38:37:69:d4:39:50:8a:1f:39:22:f3:18:
                    ae:55:f5:cc:47:d6:f0:95:49:6b:a7:f2:31:7e:55:
                    a6:ba:38:f7:ba:22:23:e6:47:16:47:c2:b1:ac:3a:
                    83:77:91:07:e6:bb:db:75:a5:86:ae:4f:c7:f2:fd:
                    dc:57:d8:d1:9b:28:75:c5:8e:7a:43:9a:d2:9a:ec:
                    7d:c4:94:9b:7c:96:69:c1:5a:2d:71:99:ff:5c:ec:
                    19:d4:4f:19:f5:e7:0f:84:1d:34:16:ea:a3:27:6e:
                    b5:56:6d:5b:3f:03:96:b7:cf:b0:2c:69:a6:d0:12:
                    81:6e:4b:b5:90:6e:1d:08:40:a9:fa:4a:9f:55:62:
                    ed:03:ef:82:5c:cf:5d:1e:59:b6:49:ed:b0:eb:8e:
                    a5:95:7f:a9:0b:65:16:4d:83:02:6a:93:b2:d5:cb:
                    7e:cd:d5:ef:10:1b:03:ea:0f:fb:9f:e3:d2:07:ae:
                    cc:39:bf:2b:23:a7:ea:0b:e8:4f:d6:4b:06:9b:d0:
                    4d:40:de:fc:b5:2b:a9:1b:af:55:5f:62:c5:b9:2a:
                    ad:40:ff:85:2b:98:4d:c9:54:cb:03:31:59:d7:ab:
                    c2:9e:97:85:8a:bb:d6:8b:e0:ea:a6:e2:1f:d0:1f:
                    bb:d3:19:7b:14:b2:50:2f:fe:09:7f:b5:7f:99:84:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:01:60:A7:61:A7:D2:33:1B:34:33:C3:BD:FE:A2:92:59:D4:EE
            X509v3 Authority Key Identifier:
                keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:a2:9b:fc:7e:75:2a:51:34:a5:f7:ce:aa:b7:bc:f1:02:
         f2:6b:1f:cb:02:2d:b2:67:a6:64:63:b8:ea:5b:8e:cd:b6:07:
         30:a3:d7:60:6b:4b:94:76:68:ef:1c:ff:83:56:44:ee:c8:b8:
         22:d3:04:53:33:9b:ca:f8:b4:0d:c3:8c:96:54:8a:5c:4d:c2:
         d3:d2:f7:20:f7:61:25:0b:ae:39:5b:be:5e:bf:16:e6:39:23:
         a5:f0:c4:17:c7:5e:e3:73:5e:bd:30:4f:29:86:ed:22:19:c5:
         9f:77:0d:0c:c3:75:0a:33:87:53:89:11:27:ba:ea:c7:60:d6:
         97:02:70:f4:21:0c:0b:6c:50:4b:e5:85:52:99:dd:9b:05:10:
         c8:78:ed:e1:c7:ba:52:3e:78:ef:e8:6b:d4:45:a8:ae:bc:90:
         6b:77:35:5c:b3:0d:45:42:d0:85:32:9a:f3:08:d4:b3:36:3f:
         b3:2f:56:19:67:52:fd:d7:39:bd:dd:1c:6d:26:ca:dc:1f:c8:
         91:1e:25:0f:a4:b3:91:fb:75:52:83:89:a6:d5:c9:db:a4:28:
         95:60:89:51:5f:fc:3e:b4:9e:22:85:ab:71:8a:35:8f:7c:98:
         58:8a:d4:d0:39:b0:fa:03:64:ec:8b:89:b8:ec:87:80:17:f5:
         b6:5c:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----