Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File:                     l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier:          JkWBMa2jcUbQo1BcpDFVxSivGhcJFnZKe+RGPtu7dEE=
Subject key identifier:   4F:BB:05:32:6C:73:30:E9:4C:2A:34:5A:C5:A0:9F:8E:31:7F:81:F8
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer:       /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial:       01962E6177E98C32C6047AAFD1223054C72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number:          0573
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
                          2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: CyKXWX8HOYyJtFaLMwLR0vsFh4f+qafV9ta9rVbVqHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:77:e9:8c:32:c6:04:7a:af:d1:22:30:54:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=4fbb05326c7330e94c2a345ac5a09f8e317f81f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:9e:d1:fb:42:20:6a:b4:0c:c6:9b:1e:32:
                    b2:ff:6b:aa:d7:44:99:3a:d5:70:c2:af:a5:e0:80:
                    cd:48:3a:ab:b0:52:e8:1a:2f:66:81:56:06:88:39:
                    6d:e3:f3:46:3f:bc:c6:0e:35:ee:bc:48:3a:d8:c0:
                    44:ec:9f:1c:e0:66:4f:50:15:aa:b0:d6:96:cf:e9:
                    61:f3:dd:3e:99:e5:fd:91:66:56:f8:0d:f6:e4:50:
                    1f:4d:c2:a3:9d:63:a5:ab:88:81:3c:40:73:eb:fb:
                    9e:fa:a5:10:55:18:87:50:a3:01:90:6f:23:de:e2:
                    aa:aa:b2:43:3d:79:43:d3:9d:e3:c1:00:5a:60:a3:
                    77:fa:bd:6f:e8:71:df:73:04:44:62:3b:2c:6b:17:
                    9d:80:1a:6a:64:ae:b4:f8:ca:80:71:bb:7c:c7:e8:
                    da:f7:98:1a:5b:4a:76:40:dc:0f:00:3c:c5:4b:0a:
                    a4:2b:e6:da:19:95:8a:91:3c:ef:b5:b4:b4:21:7c:
                    f8:35:42:ad:0f:9d:3c:95:9d:3a:91:c1:6f:2d:0a:
                    93:b3:80:e8:d8:47:ea:e3:6b:db:23:c7:c5:95:21:
                    98:c6:50:79:f0:31:bf:a9:a5:d3:04:77:14:20:aa:
                    8f:f8:91:7e:db:d6:30:c5:6a:9c:88:49:4c:48:b4:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:05:32:6C:73:30:E9:4C:2A:34:5A:C5:A0:9F:8E:31:7F:81:F8
            X509v3 Authority Key Identifier:
                keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:47:b5:21:24:52:ed:1f:bb:ef:4a:d4:21:14:5e:74:41:
         c2:31:94:e1:55:a8:35:6d:e4:2d:24:cd:3b:10:ad:9a:d3:1a:
         c3:1d:c7:49:75:df:8c:f2:6f:30:83:c7:55:e4:b8:1b:60:e9:
         4e:7f:64:60:17:8e:d0:9b:d7:73:8b:22:29:91:d8:0a:bc:1b:
         e6:d6:bb:73:56:98:9d:04:f3:86:6d:2f:b0:06:a0:00:97:f0:
         6a:6c:86:64:eb:c2:11:e5:23:4f:b8:0b:9f:82:8d:6d:51:7f:
         c1:27:42:e3:bf:fb:ad:fb:87:8a:b0:8c:21:8b:34:ca:2a:80:
         88:db:93:e7:74:3f:0b:f0:f8:f6:49:6b:43:9c:bb:22:ac:af:
         8a:38:7f:39:36:c9:d4:5f:76:cb:83:6e:bd:65:ce:c2:e3:a8:
         0e:47:73:aa:a9:c7:9a:a7:8b:a6:ad:8a:a1:5a:a3:8a:ef:4c:
         83:83:13:bb:72:5d:2b:56:7e:79:91:6f:34:b0:52:71:bf:15:
         ec:4a:60:91:a4:e7:6f:8f:61:ce:40:79:71:7c:b3:15:12:84:
         86:09:42:24:b4:ee:c3:bd:ba:cc:39:b8:d9:5c:72:a5:ae:d5:
         67:ae:ac:07:8a:24:91:7a:c7:30:e6:45:f9:72:d7:02:da:27:
         5e:d6:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----