Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File:                     l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier:          m4gwMy60wxK+G32urBa/O+cy5w4yaq0X+viAne2Bkiw=
Subject key identifier:   E1:E1:17:AA:9F:56:9E:D7:2D:D2:96:FF:B3:46:A9:F1:48:30:67:BE
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer:       /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial:       01962E9976960FCB693B78EAD87FB5F1CE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number:          14D0
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: yniiHPvOPTDfhgG/0nrcF1xZ5cl1TvbsLoq7Rx3nSAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:96:0f:cb:69:3b:78:ea:d8:7f:b5:f1:ce:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=e1e117aa9f569ed72dd296ffb346a9f1483067be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:c2:b8:e4:e6:da:b0:58:8b:ce:d7:6d:8f:
                    28:8b:b2:b7:e4:7b:6b:ab:e5:4a:7c:9e:6b:95:f0:
                    7b:ca:f0:b1:2c:c6:19:73:e7:d7:4b:2f:12:8d:12:
                    c5:7c:2e:b3:61:94:d7:ba:13:1c:f0:7e:96:dc:5e:
                    d9:70:25:90:05:e2:a8:c9:34:5b:86:b8:03:51:34:
                    e5:e6:d9:df:79:81:f2:8b:3f:b4:05:1a:8c:9e:b8:
                    fb:31:be:59:b5:fe:fc:ac:14:17:74:1a:6b:74:a3:
                    ff:8d:8a:4d:8f:18:ec:6f:5e:d3:39:38:0e:fa:00:
                    6f:4c:1a:10:ac:8b:55:d8:66:79:02:a9:cc:b0:44:
                    a5:51:52:0b:bc:83:9c:0e:67:5d:87:a1:a2:0d:9b:
                    ab:39:ee:17:6c:25:3c:6d:50:c1:86:e2:0e:fd:78:
                    6f:47:90:d9:98:08:8d:98:89:b0:a3:21:46:65:38:
                    d1:de:36:0a:b9:cb:3c:a2:51:8e:7e:a7:9e:ec:f5:
                    9b:f2:b1:9e:0e:1f:cf:d7:1f:9a:bb:f3:b4:06:81:
                    42:77:94:6f:f9:ba:ef:68:bc:5f:e1:a5:97:86:1d:
                    b9:be:b2:48:0a:d2:83:43:c6:1f:0d:aa:8e:55:55:
                    e6:d8:4b:5f:29:0e:d9:d4:2a:76:d5:b6:c0:01:f2:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E1:17:AA:9F:56:9E:D7:2D:D2:96:FF:B3:46:A9:F1:48:30:67:BE
            X509v3 Authority Key Identifier:
                keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:78:a8:b9:1b:e5:f4:18:79:d0:08:28:3b:77:f7:63:16:06:
         6c:fb:23:71:16:31:a8:eb:0c:00:63:24:a0:03:92:8e:bc:50:
         26:e8:8d:ee:ad:4a:40:6c:74:d1:b7:26:06:60:f1:4c:f7:0c:
         d8:12:7f:f3:64:bc:fb:d8:70:9b:88:81:be:cf:61:ce:6a:98:
         3f:eb:bd:92:9d:69:3f:b7:08:9b:ff:fa:29:97:44:95:97:a1:
         ac:a5:b8:3c:dd:d0:f0:7f:9d:ee:4d:eb:88:07:c9:3d:7e:36:
         73:59:27:b7:58:3d:65:23:93:2c:6b:46:28:94:ec:b2:0c:9f:
         87:ea:ea:9a:cb:d8:5c:c4:15:09:0b:85:95:68:a9:bb:2d:a0:
         89:49:11:29:51:73:26:b1:f7:81:cc:7c:10:18:7f:ae:db:99:
         53:5d:ad:1e:24:8f:70:ea:88:d0:e4:b5:fa:b1:40:82:b3:5c:
         e8:6e:06:a6:ef:44:89:de:5c:5b:a8:13:8d:ef:ce:d0:06:1b:
         d3:e0:86:5c:21:56:59:ee:ea:48:50:52:f9:23:bf:60:c3:7e:
         f9:1d:8f:1d:d0:4a:e4:32:3a:92:e7:d5:35:9a:20:d4:ad:f4:
         76:d5:9a:d1:e7:64:5e:ef:0a:31:17:84:19:7c:d6:c4:f9:58:
         80:54:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----