Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File:                     l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier:          UIWbGOQFOcR4XNHgL1mdsOym9nQ645Sm0tu6jM5Wj/A=
Subject key identifier:   04:EE:1A:90:1E:EC:6E:29:44:B1:2B:B3:3E:1E:FA:1F:66:41:93:74
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer:       /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial:       01962E61CBB8C373A71ED8A3293541AD622A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number:          129E
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: aMPRUufSIC3BSpnCaSjB3R1EWjU.roa (hash: PznJuTDoIXsWz9HXtvvwD92eU5XcI97tyAGmTVxGT4c=)
                          2: jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa (hash: 5AMIR+nAOYfoGTd/SNFuAJTTjyBmPlK6SsLZWPzLm6Q=)
                          3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: hj+KQlpEFjW8wjfz5C60rK8831qrpdXqytTgjFBq/kc=)
                          4: vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa (hash: yR9f2kZ/nIXVrv9dXrEzRY+6fv+TWV0eQZK0RZqpM/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:b8:c3:73:a7:1e:d8:a3:29:35:41:ad:62:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=04ee1a901eec6e2944b12bb33e1efa1f66419374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:1f:6a:93:cb:a4:28:78:97:72:4a:e3:33:
                    39:f3:ff:56:b1:f9:50:5a:78:b3:80:2a:77:12:23:
                    0e:ad:60:69:d2:0b:74:31:1f:9d:9b:73:48:d3:cc:
                    1a:8a:ad:26:48:bc:dd:81:01:d1:2f:aa:a8:8d:1f:
                    f4:fe:a1:a6:ca:68:1d:74:f3:3e:22:c6:a0:26:55:
                    e7:da:48:00:71:e0:1f:da:07:7d:2d:0f:48:b9:ed:
                    61:e3:5f:1b:c9:e9:38:6f:12:cc:53:a3:ec:bf:fb:
                    32:32:22:22:8b:be:94:95:74:bc:12:71:ca:20:b7:
                    6b:f4:0b:11:38:f6:9c:0d:58:9a:4b:4c:fa:fa:14:
                    43:ca:02:70:94:ca:11:fc:54:75:5d:54:b1:4e:76:
                    81:49:69:79:5e:9e:ce:83:fd:19:1b:8a:7b:41:9d:
                    7c:ed:36:a1:b0:fa:a7:03:e6:d9:1a:14:13:bc:cd:
                    88:1d:81:59:07:3a:b0:4c:d7:4f:c9:d4:75:03:ac:
                    45:42:82:b7:ea:14:38:fa:48:97:3d:a2:39:f2:72:
                    51:b7:ee:74:ce:8f:44:fe:6b:0e:75:70:14:e6:a0:
                    6a:48:27:33:ae:97:1b:81:8f:8f:bd:ce:ed:41:30:
                    36:c3:99:da:bb:e1:97:77:e0:62:56:82:8d:f5:28:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:1A:90:1E:EC:6E:29:44:B1:2B:B3:3E:1E:FA:1F:66:41:93:74
            X509v3 Authority Key Identifier:
                keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:34:bc:88:9c:3e:98:1d:ce:9c:92:1f:2a:e0:16:bd:c5:
         e1:cb:80:65:8d:3b:d2:26:38:93:65:ce:99:64:40:f2:e9:14:
         3e:7d:66:b0:d2:7a:26:5e:9f:d6:0f:5d:49:37:ba:dc:da:5e:
         27:71:ba:a9:1f:f2:e0:06:fa:d9:4b:06:77:0b:a8:8a:88:db:
         33:e8:20:0c:17:a9:2d:49:f0:20:db:cd:10:db:fa:a8:58:95:
         e0:b0:02:02:1b:49:07:63:80:38:50:9e:c9:7a:b9:91:ef:6f:
         35:f2:d1:64:27:a7:38:1e:32:1a:29:18:fe:0a:38:39:0d:be:
         21:a3:af:9b:5c:c3:2e:af:a2:34:55:f3:3f:9b:c7:d5:e4:5a:
         d6:67:95:10:fb:96:cc:d6:15:0f:ef:6f:34:bd:db:e8:b8:13:
         90:5e:0c:94:ab:7c:4d:b4:b2:2c:86:1b:2a:53:c2:75:b5:25:
         54:ed:b6:c9:b0:29:e1:6c:bf:87:d8:80:da:65:14:22:f5:56:
         ab:e9:2a:6a:83:d6:1a:91:27:ab:b9:98:ba:63:9a:dd:6d:44:
         a5:6a:83:55:11:a5:fe:0b:10:d3:0d:81:34:cf:56:5f:89:14:
         4d:84:03:32:c0:4a:8e:e3:3c:70:ec:66:d7:61:bd:98:54:01:
         d7:36:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----