Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File:                     l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier:          8FW92LTuzFfbwcTZQGOFT8t/Dnd6RCN6ASc/F0AyH5A=
Subject key identifier:   3F:B4:E3:4D:85:FA:3E:A6:4E:5D:B1:A2:1E:EA:BA:F1:45:CE:4C:D4
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer:       /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial:       01962E61AAD23E99F66DF8FA9DB1DB822AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number:          09E5
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: I8agxO/led5UUndKBZGJPgnQLYYGmkeRTA5HGYS+xlk=)
                          2: wvepJ_S5tr7m_zhxo8MkVscbOBo.roa (hash: 3bW1rADdI6dgzgPslPIXDLnlwFBtZeQLDvcY24JdJFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:d2:3e:99:f6:6d:f8:fa:9d:b1:db:82:2a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=3fb4e34d85fa3ea64e5db1a21eeabaf145ce4cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:e2:2b:c6:18:c6:07:82:c6:bc:7b:6b:ee:
                    49:b5:4f:f9:ea:3b:8c:21:40:a5:59:11:fe:65:e1:
                    42:24:2a:81:61:93:b9:cd:4a:c7:5c:7b:8e:b6:3b:
                    39:ed:27:c2:fb:c7:3d:8d:0b:a3:b2:71:bb:0b:92:
                    3d:89:7c:d4:36:6e:5c:f0:8f:26:7e:4d:15:09:0e:
                    86:2e:13:57:df:ea:f7:a1:dd:6a:b6:b6:4e:99:51:
                    03:d1:f3:c4:05:4d:01:97:57:5d:e1:a4:33:23:32:
                    e2:7c:cf:b0:c9:8e:8b:a8:2c:46:2a:5b:c3:8b:c8:
                    7a:c8:42:6b:33:52:f4:e0:9e:0f:fe:88:c3:e5:8f:
                    87:e5:71:3b:24:d8:e1:26:c0:52:fe:09:2c:6c:39:
                    03:93:41:e0:3b:3a:42:58:71:ac:86:01:a7:fc:ed:
                    e6:d3:fb:1a:5b:83:93:4c:d6:1a:76:bd:b8:94:2b:
                    94:de:fb:e7:b4:d3:09:90:63:d1:ab:a7:3a:7f:fc:
                    9f:37:27:35:62:e2:97:c9:ad:27:2e:49:1d:18:68:
                    f8:ba:9c:f4:be:cf:cb:63:66:b6:8d:f3:f4:c6:ee:
                    63:c9:dc:aa:d2:ab:29:65:6e:62:5f:c2:1b:c8:76:
                    9f:bd:99:04:24:21:37:23:d1:54:0a:5e:fa:b0:09:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B4:E3:4D:85:FA:3E:A6:4E:5D:B1:A2:1E:EA:BA:F1:45:CE:4C:D4
            X509v3 Authority Key Identifier:
                keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:93:26:81:cd:37:c4:f6:d6:f7:92:29:c4:ea:7e:e8:db:
         99:c7:cc:1b:93:97:d4:96:92:e6:30:5d:12:c1:69:fa:c5:50:
         e9:c2:87:5e:f9:d0:f2:47:3b:c6:06:25:23:97:7e:94:fc:8e:
         dc:f0:5c:9d:a3:e9:e1:15:54:8f:ce:e0:2f:0f:14:7d:03:47:
         28:27:8c:90:4f:10:ae:8a:33:5d:28:6f:ee:36:fb:ea:14:bc:
         c1:8d:f2:47:51:2a:b6:9b:13:d4:12:25:5a:8c:f8:c7:12:57:
         9a:38:9d:fb:a3:fb:2b:c7:32:0c:b9:30:8e:79:09:93:0b:d9:
         c6:10:f7:63:12:9a:ef:3e:6d:35:20:27:11:32:5c:e8:d6:b9:
         f9:49:98:0e:cf:98:4a:82:4b:3f:60:f5:7c:21:ab:24:d8:dc:
         8f:64:96:83:03:36:8a:1a:ad:d9:a3:8c:cc:79:80:a6:74:e0:
         ca:3e:8c:24:11:6e:6d:58:32:5e:a7:0b:e9:3b:ca:f7:4d:a9:
         0d:9a:bc:45:a7:cf:b8:c7:d8:07:c8:9c:0f:98:a8:d9:a4:28:
         2b:bf:30:01:0d:90:fd:a4:64:ee:7a:2d:8c:a9:ad:f8:cb:7a:
         29:fe:61:f7:a6:1f:62:1c:e8:7a:16:17:fc:71:d4:36:af:59:
         2d:7b:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----