Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File:                     l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier:          TZmIZ5ihTWKk0nghfdUW1EFy+I4wupl1m7zEV1FNXn8=
Subject key identifier:   44:71:BA:8D:88:F0:45:33:5F:5C:7D:D7:14:67:30:A9:98:68:2B:9C
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer:       /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial:       01962DF3F051189A6F581CBB13AEB0F5A2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
                          2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: GkfsxCaJFAe6fkfGhM9D/+N95sgMLughg+/UZsJN/6E=)
                          3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:51:18:9a:6f:58:1c:bb:13:ae:b0:f5:a2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=4471ba8d88f045335f5c7dd7146730a998682b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:53:52:e4:43:9c:5d:39:14:ec:03:ce:42:72:
                    60:f4:1b:14:ef:4f:07:33:20:7c:82:e2:ec:4b:d7:
                    19:7e:27:a6:c2:f7:31:2e:5c:39:85:40:75:1c:d8:
                    fa:cc:b0:49:01:61:b9:df:f1:f0:2c:e2:05:8a:4c:
                    d2:42:a5:4e:bb:52:2d:c8:d0:4a:34:d1:81:07:dd:
                    b4:17:a0:01:5f:b8:9c:67:39:46:0b:d5:93:de:85:
                    9b:be:08:89:66:c1:23:a9:d4:e5:3a:f7:f8:0b:eb:
                    de:ca:58:5f:ad:a7:a3:a4:84:7c:d1:dd:10:ab:61:
                    cb:50:fc:25:b1:a1:ba:db:cb:c4:b2:b7:70:83:ae:
                    94:cf:1f:61:6a:0f:07:c3:96:62:e9:a5:19:03:f5:
                    fd:ff:35:2d:6e:45:a1:c7:13:73:73:12:03:90:cd:
                    b3:69:8e:71:e5:2b:f5:b2:b3:98:da:1c:b2:27:48:
                    d9:79:73:96:69:bb:a1:8b:fb:f8:f7:c2:61:a5:a0:
                    0b:42:41:db:e1:69:ce:4a:62:ee:c9:2d:e7:c4:0f:
                    73:a0:7a:a4:d3:ec:0e:e4:9e:fe:60:43:5c:ab:cb:
                    78:d1:99:3f:2f:6c:39:1b:57:14:7e:ca:c4:c9:7f:
                    ce:a0:27:14:f2:57:00:cf:87:d6:94:74:00:27:e7:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:BA:8D:88:F0:45:33:5F:5C:7D:D7:14:67:30:A9:98:68:2B:9C
            X509v3 Authority Key Identifier:
                keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:f5:3b:23:48:9c:19:ad:fb:e0:75:71:0f:87:9b:99:dd:
         42:0f:65:49:4f:aa:71:bc:f6:7d:7d:c1:4d:76:dc:2b:ef:ff:
         54:14:a9:cf:5a:a7:83:06:c3:95:3e:e0:88:c8:0e:fe:a0:93:
         c5:36:51:10:d3:76:fe:bc:30:21:e6:ea:8f:82:ee:d4:9d:8f:
         51:6c:7d:b9:04:cc:bc:76:ca:82:aa:7f:30:1d:ba:1d:6e:ca:
         df:65:1c:0a:72:95:f4:12:55:a0:32:47:a2:16:1e:8d:2a:8b:
         26:df:51:6d:69:a6:76:d6:cc:94:03:d9:4f:92:f5:ef:b8:b2:
         2f:18:da:6f:c7:bc:8a:92:72:0b:fe:5d:b3:ab:a4:18:ad:c4:
         7e:13:af:36:1f:21:50:88:59:b4:a7:ff:fc:e5:fd:93:68:d6:
         f7:e7:15:91:2e:d1:70:df:c5:47:df:95:5f:b7:4e:b4:f3:f5:
         d2:9a:27:7b:19:41:7f:6b:d9:06:16:88:e3:bf:43:b7:6b:38:
         c1:8a:90:b0:a4:32:35:40:0a:6e:b6:1a:6e:13:07:07:42:52:
         ef:97:06:2a:11:51:34:2a:8c:eb:16:a3:cd:71:0b:d1:fd:7d:
         d2:66:36:0a:7b:23:f7:19:36:28:58:bc:04:4f:5b:c0:93:ab:
         6b:c8:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----