Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File:                     l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier:          0DUkZhKsDd1ld9Qj8LXwX+PofdjV3GnnCP5v3A0HVWs=
Subject key identifier:   FF:7A:3F:A7:87:B6:31:EE:DF:BD:47:99:95:BF:F6:F9:00:BD:A0:F5
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer:       /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial:       01962E98928C2EE0B9451F9F9E534E00CEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: L+vhwyGePadkMwKhi0cw76DbhesRkQ1heY1YTNhY+/A=)
                          2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:8c:2e:e0:b9:45:1f:9f:9e:53:4e:00:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=ff7a3fa787b631eedfbd479995bff6f900bda0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:27:a3:41:a3:d4:25:18:2b:a6:fc:90:9f:
                    c0:c0:8e:8e:36:cd:5f:5f:be:c6:61:ab:23:31:44:
                    24:ba:ee:dc:d2:cf:dc:bb:da:54:06:a7:e5:08:52:
                    3d:1b:27:91:30:9a:dd:65:ee:26:1e:b2:29:74:f1:
                    1f:04:7b:93:71:be:9b:d0:86:88:e4:14:bf:fe:45:
                    9d:f7:5c:7d:d3:b3:68:07:f8:a6:9b:92:c8:5c:8a:
                    c9:b3:c6:6f:06:7c:bf:ae:4e:db:01:3c:7b:2d:e2:
                    ca:9f:81:dd:c7:94:dd:18:3d:91:8e:af:dd:42:52:
                    60:b5:fb:1a:0f:52:d4:a4:33:ff:9d:60:db:7f:96:
                    c3:5a:39:51:3d:4b:2a:15:09:82:5e:c3:5e:3e:b6:
                    1d:12:65:54:7e:6d:e4:e7:db:aa:e0:92:dd:0d:00:
                    a4:12:fb:1a:f4:ae:16:95:2a:8e:dd:b7:17:02:a1:
                    8f:6f:de:4e:91:bb:e6:78:ee:d8:b7:9d:12:b6:36:
                    7c:4d:d8:b3:c9:97:38:8e:47:d2:ad:b8:8a:ce:f1:
                    bd:31:da:a1:42:fa:f8:6f:a1:52:11:9b:05:81:89:
                    06:c9:db:74:ff:14:fe:e2:40:8a:92:83:26:93:6d:
                    b5:8a:8f:9f:17:be:a3:47:31:9b:a5:08:7b:e3:9f:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:3F:A7:87:B6:31:EE:DF:BD:47:99:95:BF:F6:F9:00:BD:A0:F5
            X509v3 Authority Key Identifier:
                keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:38:22:c6:ca:4e:52:2d:ee:35:78:8a:8f:b9:83:78:9a:
         48:15:3e:31:66:d7:a1:bd:ad:99:c0:f7:bb:1c:02:89:7a:64:
         94:f3:c8:8f:96:47:05:f9:1c:57:8a:09:16:ef:2b:57:03:d6:
         65:f5:64:1d:81:bf:66:11:3d:2c:cc:ff:6c:6e:eb:5b:b2:2c:
         55:1b:71:3d:75:5c:84:6a:e3:ec:ba:84:68:6c:26:58:c7:8a:
         52:7d:b9:e7:4d:5b:e7:77:7c:e5:b7:1d:72:c7:25:ec:cd:5b:
         0e:30:f8:1c:1b:e9:c0:11:a9:8f:7c:ba:3a:43:97:71:97:4e:
         74:aa:36:71:70:1e:9b:ba:a2:2c:fb:5a:e9:f9:87:7d:5a:1c:
         4b:1e:ab:9d:c3:bb:35:28:13:41:da:14:e6:8c:47:de:df:24:
         48:25:a6:5b:be:fa:d4:7c:99:aa:dd:60:11:29:d9:d5:2b:e4:
         b2:52:6f:3b:a3:42:87:4a:d0:3b:fd:3e:ee:44:63:b3:4b:8a:
         f2:2e:92:71:6c:5c:74:f7:1a:a1:97:95:ed:bb:fe:bc:72:ae:
         ae:5a:78:a2:9f:3f:64:9e:04:05:c1:4e:57:ba:07:0a:54:86:
         ca:d1:4b:09:59:1e:c0:5a:8a:1b:e1:81:ea:59:38:78:a9:94:
         0c:85:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----