Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File:                     l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier:          ckqlH+EnFWC0oVq9od6ixJf1qk/u11YN9e+dljQnJDs=
Subject key identifier:   E2:10:45:C0:1F:1D:84:AF:08:87:A8:F6:B1:B1:60:01:4D:60:E2:39
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer:       /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial:       01962E61EA7DE90AA17A98BA01CBD8A7956B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number:          12FA
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
                          2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: /V2CWQozypzsOr0kuIac3BHWnIF4hq9B7u1LeQdMlKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ea:7d:e9:0a:a1:7a:98:ba:01:cb:d8:a7:95:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=e21045c01f1d84af0887a8f6b1b160014d60e239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:89:82:ad:ca:43:fd:04:fc:74:a7:08:c0:
                    cf:64:f0:b0:4e:6c:11:e5:10:80:81:7a:14:15:f7:
                    65:9e:07:3a:c3:9c:60:27:99:49:34:57:c7:57:bf:
                    10:3c:dc:e5:d5:3d:4c:85:f9:ec:10:1d:ef:f2:31:
                    ec:db:d9:a9:8b:dd:0f:85:4d:eb:8a:a4:64:8e:ce:
                    75:ac:62:0c:bb:78:69:bb:07:44:41:de:1a:84:11:
                    fc:ee:b1:a6:39:3a:9b:08:8d:b7:c8:70:c3:a8:72:
                    3b:0e:01:82:67:d5:ae:fc:b4:9d:13:03:6f:aa:a4:
                    1e:c3:2c:b4:35:cc:bb:40:0b:43:fb:02:0b:b6:59:
                    d5:94:5e:1c:cc:c4:e0:bc:a7:8b:c9:34:0d:19:5f:
                    ff:97:3b:3f:1c:5a:10:39:32:4d:b2:b3:e8:42:d6:
                    b5:14:c2:35:04:ed:1f:a7:aa:c7:62:be:61:59:0c:
                    75:e6:b4:22:58:aa:6d:ad:f4:e6:cc:81:c0:e2:66:
                    34:29:c7:1c:8b:1f:8a:b8:06:c2:93:a6:59:03:33:
                    1c:11:5b:6c:d5:c8:44:84:ae:ce:87:73:10:01:8b:
                    fd:b3:0c:5e:82:c7:d2:ef:7b:fa:ba:8e:80:9f:67:
                    2c:0e:a1:b7:65:46:34:90:54:04:ea:31:77:57:8b:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:45:C0:1F:1D:84:AF:08:87:A8:F6:B1:B1:60:01:4D:60:E2:39
            X509v3 Authority Key Identifier:
                keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:9a:c4:9e:28:ad:32:5f:ff:14:9f:5c:6a:94:ff:0a:83:
         be:7e:25:3f:0b:79:1f:60:d8:16:de:e5:46:66:3b:69:cd:cb:
         01:0e:39:e3:bf:8f:fb:f4:c3:1c:86:7f:8a:3c:c9:c1:16:b6:
         04:5c:9c:1f:87:22:ad:d8:62:0a:fb:9a:af:08:02:07:ff:71:
         99:d6:35:ba:53:df:12:da:8e:16:50:24:4f:8c:4b:14:7d:2d:
         96:39:7b:23:f4:95:4e:b1:06:06:21:20:91:48:7b:46:73:d3:
         0a:d5:3c:31:6a:0c:e9:9e:6c:d1:b0:c6:a7:b4:91:05:d4:2a:
         3d:f5:0a:d5:e5:73:83:82:b5:fb:27:c6:f5:a8:75:8c:d8:48:
         09:64:f6:3b:2d:4e:97:7a:42:12:92:ba:a1:58:43:96:c4:b7:
         0b:6e:32:33:b7:0c:6d:e4:fc:89:a4:d5:d6:87:c7:95:b3:68:
         87:81:b6:32:d4:91:f3:b4:9c:83:9f:22:95:e9:56:be:4f:b1:
         59:bb:49:8e:7c:f8:68:22:50:ed:79:f6:02:e9:f2:81:79:34:
         24:98:96:a4:7c:3f:04:22:e7:29:1b:44:13:d5:43:49:56:f3:
         66:0d:2c:5b:33:69:07:d3:ba:85:02:f0:68:80:40:dc:8c:cd:
         fa:57:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----