Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File:                     llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier:          ktxCOv8AlkYZZzZUw9YnkuWitT5jOnlQEM++5RRK9Sg=
Subject key identifier:   22:A7:C3:55:C5:10:24:0C:FC:F1:F6:B4:FB:CF:35:A9:3D:FE:05:03
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer:       /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial:       01962E61DB298B4E64E141BBC307E9534CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: qLL/YzF63AQrYdGBkxm6q6YXE8xntiol1A65plZzirI=)
                          2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:29:8b:4e:64:e1:41:bb:c3:07:e9:53:4c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=22a7c355c510240cfcf1f6b4fbcf35a93dfe0503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:d6:16:ad:02:da:27:44:9a:37:88:ae:18:
                    a9:a1:a7:f1:47:9c:22:be:40:22:96:08:45:49:13:
                    43:4b:41:d5:f5:29:51:ad:1a:59:bb:39:36:d8:89:
                    57:30:3c:81:4c:74:a5:5c:20:29:67:b9:dd:6c:00:
                    a0:31:2b:6e:e1:6a:68:5f:5d:ef:1d:41:4f:cb:60:
                    56:44:4a:36:ac:95:d8:d3:ef:29:9c:e4:2b:75:b7:
                    1b:a2:e1:42:b6:a9:14:4e:db:9f:6a:61:73:6e:f1:
                    f9:be:f4:05:03:f4:47:6e:6f:bf:9f:c0:36:d7:24:
                    97:28:77:27:5b:ea:ac:76:42:6d:c4:92:a8:a0:da:
                    3d:10:06:79:7a:3f:d9:f2:d1:2d:54:d6:39:35:f5:
                    24:d8:4c:61:ec:ea:03:b9:df:ae:68:a3:bb:cc:a0:
                    c7:5a:b4:7d:96:ed:7b:5a:7d:18:1e:9a:f5:5f:6a:
                    04:5c:9f:22:82:eb:e8:95:66:00:16:f2:4f:b0:1b:
                    9a:76:28:79:69:fd:a6:95:f8:45:24:bb:1d:35:19:
                    94:8c:fe:3f:c7:71:8d:38:67:81:9d:77:ec:4d:56:
                    1c:c3:0c:bb:84:33:28:e1:e6:56:c5:3b:6b:d8:8a:
                    75:ab:2d:d4:ec:f9:77:8e:64:e1:03:f0:a6:f5:af:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:C3:55:C5:10:24:0C:FC:F1:F6:B4:FB:CF:35:A9:3D:FE:05:03
            X509v3 Authority Key Identifier:
                keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:53:b8:03:5a:d9:aa:1b:ab:12:c2:a7:8e:5f:23:0e:a1:60:
         8f:11:de:98:ae:23:42:de:57:12:ed:7d:a5:8e:7e:42:55:bb:
         59:29:d4:d7:52:fe:4d:09:49:1a:21:81:eb:ca:d1:09:69:1e:
         b4:3b:e1:fd:45:fb:7b:15:e0:ae:fe:9b:1b:43:40:19:4d:2f:
         ef:46:9f:7d:00:b8:e9:ec:bd:a7:0f:ac:4c:bd:90:9c:6c:76:
         3c:44:bc:9f:4d:18:13:cb:6c:9b:bb:bc:4c:fc:43:b0:ca:8c:
         ee:46:6b:fc:23:73:ae:0a:4f:71:03:86:70:bc:7d:46:5d:67:
         6a:f7:7c:f0:6a:63:4c:3b:91:f1:1a:0b:e9:af:bd:e3:40:87:
         55:11:61:a0:6f:1f:3e:12:08:75:78:3b:9d:54:b6:5c:81:7a:
         8e:1f:54:06:6e:c0:2c:82:86:c1:51:14:35:c3:91:8a:8d:09:
         41:1b:fd:39:da:ab:d6:64:c8:b3:23:f6:05:b5:cf:ae:94:37:
         a5:17:f4:e0:a4:3e:39:e4:20:f5:f6:28:7b:94:ec:57:f5:1b:
         a9:75:e7:82:b7:52:92:da:51:44:0c:18:5a:13:c5:81:3f:32:
         69:24:10:ac:59:35:89:c3:c8:05:49:cb:b6:4c:1b:ac:ea:35:
         56:9b:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----