Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File:                     l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier:          iRt+nOeDFZkGRYAiLbGCb+xlYovv5ljT2C84naom4UQ=
Subject key identifier:   CC:E3:B0:81:25:DA:D1:76:01:A6:A5:6C:26:06:40:A5:E7:8C:61:C8
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer:       /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial:       01962E99370A24D1979F7A85DF249222ADB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
                          2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: TMAkm1CMzYc9KM7usIIDkv7U86CxWuNq7oa2u3zOe34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:0a:24:d1:97:9f:7a:85:df:24:92:22:ad:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=cce3b08125dad17601a6a56c260640a5e78c61c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:c0:c8:3a:87:e2:64:09:fc:8b:b3:b2:0e:
                    7b:c2:68:2f:48:0a:db:d2:5f:27:77:94:1c:c2:c7:
                    aa:25:53:7d:00:ad:9f:d4:72:08:26:49:78:27:fe:
                    00:ae:84:66:de:e2:17:56:91:9b:43:2c:20:1c:a9:
                    9b:99:56:fc:a1:f1:1a:9d:e6:77:ab:4a:85:72:28:
                    7b:11:eb:48:ca:c8:61:18:f4:d3:77:56:d9:dc:02:
                    9a:c6:b6:8d:05:f7:e0:b5:19:e3:c5:28:9f:78:52:
                    ef:fc:58:0e:1a:3a:4c:dc:e2:b0:f7:5d:05:3e:ca:
                    0e:9c:2e:6e:79:23:75:db:85:cf:dc:f4:0f:eb:c3:
                    6f:72:df:96:91:36:75:fc:f0:b3:5e:11:a9:f4:d1:
                    a3:14:36:5b:ca:8a:c9:a9:53:75:d8:20:75:f7:a2:
                    cc:b1:99:82:6c:67:cc:cc:2e:4a:a6:2c:21:e9:8f:
                    24:39:77:19:5d:6c:47:59:c7:1b:77:c1:26:ad:7b:
                    cc:10:e2:6c:55:a3:c0:3b:4a:0a:d0:d6:11:42:09:
                    69:99:61:54:25:17:1e:1a:2c:49:98:e4:6b:2c:17:
                    b8:b2:2c:56:47:91:eb:df:0f:02:d5:26:0d:68:4a:
                    f1:7d:1a:19:7d:af:89:16:d6:a7:00:8d:a9:ba:eb:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E3:B0:81:25:DA:D1:76:01:A6:A5:6C:26:06:40:A5:E7:8C:61:C8
            X509v3 Authority Key Identifier:
                keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:83:94:03:21:b8:cc:d8:b1:a7:50:24:87:3c:47:8f:55:
         ff:22:b3:7a:ea:c3:04:43:5b:3f:3e:78:0c:0d:2a:c7:83:ba:
         95:62:b9:52:69:01:c8:62:d6:ee:c4:db:c2:11:f0:a0:a5:7d:
         b9:aa:a2:fb:71:9c:3d:20:fb:fb:d6:50:d4:c2:a6:55:64:cd:
         1b:d2:b7:8a:de:8f:c8:1f:e6:f4:e4:65:33:c1:36:11:a3:95:
         95:64:d4:ab:a9:a4:db:1a:d0:e3:5f:4a:9e:ec:4c:26:c5:6f:
         0c:45:bb:e8:1c:ef:75:c2:de:70:98:c9:39:1e:ed:67:d6:b2:
         c1:ed:d5:75:20:6e:74:57:ad:ed:d3:b4:e4:00:67:9d:10:5f:
         33:fc:0d:42:d0:f7:a9:28:e2:db:f0:df:0d:d1:0a:d3:4f:ee:
         00:45:53:3f:2e:9a:5a:6e:bc:36:f9:f0:1e:dd:5e:b4:90:83:
         e9:ef:5e:52:ea:6e:f6:95:71:3c:e4:2b:7c:75:0f:9a:ba:a9:
         66:97:c2:27:a2:81:93:4a:7c:b5:62:d1:d4:38:8a:b4:a3:f4:
         4b:f5:a5:c0:69:98:6e:f3:dc:e2:69:14:25:62:f5:a6:29:77:
         e4:05:06:65:53:a2:ea:8d:b5:65:8c:92:93:32:fd:f8:03:66:
         f6:fa:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----