Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File:                     2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier:          oaoHz7LfZ5Qv0PS/lrh8x6hvhzre/SFju/QF85dB6B0=
Subject key identifier:   92:61:E9:4D:6D:21:F7:50:8D:3D:96:5D:81:EA:AC:9C:D0:CE:0B:9E
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer:       /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial:       01962ECFD8335476CE22C6B0766A67038F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number:          0199
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: 8IGJDWOsVNjkYpWJMqDhPG2EmFjVYYFxVN3jEHBHjSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d8:33:54:76:ce:22:c6:b0:76:6a:67:03:8f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=9261e94d6d21f7508d3d965d81eaac9cd0ce0b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:b9:e4:00:d8:c4:27:fc:6e:d1:58:b6:b3:
                    9e:4e:56:47:9a:c3:b9:71:20:52:5f:13:83:85:93:
                    e2:c5:75:66:f8:6c:6d:23:ea:4d:ad:60:e7:51:96:
                    9c:31:65:74:67:df:bf:4e:5b:54:4e:65:6c:e8:e3:
                    b7:7f:91:af:76:19:25:73:8d:99:54:1c:25:20:94:
                    d6:0c:2e:05:ad:2a:92:3c:6d:36:60:a9:1e:d4:57:
                    48:a9:8b:63:b3:ac:ee:c8:00:ea:24:b7:97:56:2e:
                    40:b8:5d:8c:6e:1e:bc:00:3f:dd:50:35:64:f1:d3:
                    8f:62:7c:41:5c:1e:47:6c:87:7d:f4:45:b0:f4:b4:
                    6c:b6:cd:b5:08:91:31:eb:8a:3d:53:c6:8a:80:b7:
                    02:de:82:dd:da:97:bb:6c:a4:fb:d9:70:b7:50:61:
                    d4:b7:91:ff:0e:4d:c9:b3:61:06:b9:3a:bd:56:76:
                    2d:a6:97:c9:a6:07:ea:94:22:07:2e:c5:e1:3a:e8:
                    7e:ac:4b:6e:bb:b3:f2:69:d9:bd:98:39:84:46:1c:
                    96:30:91:ea:dc:7d:f2:89:91:4c:ae:b4:25:a6:a9:
                    a8:66:52:bd:9f:31:0e:12:33:f0:2a:8d:ee:25:00:
                    11:8e:fd:60:bb:f7:04:f5:38:f7:6c:66:25:b9:ba:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:61:E9:4D:6D:21:F7:50:8D:3D:96:5D:81:EA:AC:9C:D0:CE:0B:9E
            X509v3 Authority Key Identifier:
                keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:49:8f:46:77:e7:c9:02:51:e3:58:ee:31:74:b4:69:c1:c1:
         57:2e:d0:0e:6b:51:b7:b6:96:8e:fb:a9:7c:76:c2:9e:a7:6b:
         65:c4:ec:43:ec:8e:71:e9:83:87:fe:4e:d6:86:8f:55:f0:13:
         bc:05:a9:d5:95:bf:9f:b2:95:48:9f:ec:63:98:03:21:24:f5:
         cc:f0:2c:a7:9d:58:32:08:f7:93:46:8f:74:a2:f2:65:33:36:
         bc:bd:17:b6:b0:92:94:d3:3a:a3:54:e3:a5:95:f4:f2:c3:7e:
         cb:69:53:2f:28:c1:06:6e:c2:df:f1:8f:e1:bf:1e:60:fd:5f:
         29:4d:24:a0:1d:c0:0e:04:81:fc:39:59:ed:ce:b9:be:78:42:
         36:93:d6:85:b4:fe:6d:ac:2e:d2:e6:6c:4a:54:bb:f2:80:0f:
         b7:dc:14:99:6a:2b:d0:63:97:ee:f6:d8:6b:2d:05:ca:7f:11:
         d4:f5:6b:ad:0a:78:aa:21:e4:dd:1f:89:c1:86:cf:dc:d5:2d:
         3d:5c:cc:81:b1:86:c0:6e:7b:a0:74:9d:7e:65:8f:94:72:ec:
         4d:54:95:ed:c0:c0:e7:fc:46:08:a6:26:c7:5c:82:c3:4b:7b:
         98:7e:97:57:b3:09:f2:89:7c:7d:39:90:96:88:50:11:cd:7b:
         05:23:bc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----