Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File:                     l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier:          qS1KPFgcxgn+vsjZN8IFrtQQH1dHAfG0MjxUXQ5mO8I=
Subject key identifier:   2B:27:C6:FD:37:BA:05:7A:C5:B1:C9:D4:25:BA:04:0D:09:88:EA:27
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer:       /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial:       01962E2B020EBFDA65DE4EA4A17221BE3D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number:          0DB1
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
                          2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: vh2s0IEbwQYqKiyDfiEOkuwkH9yOR6K8/0z4dnNuwMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:02:0e:bf:da:65:de:4e:a4:a1:72:21:be:3d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=2b27c6fd37ba057ac5b1c9d425ba040d0988ea27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:4f:ba:1f:f9:a0:0f:8e:73:d2:72:91:ab:
                    43:3f:42:6f:88:44:70:0f:1c:b5:c7:14:a1:62:ee:
                    e6:ec:fb:ec:3e:09:9b:0d:b7:1d:28:34:a7:02:d2:
                    0b:01:2c:7e:b4:e0:b4:e5:99:bf:68:3b:eb:34:aa:
                    83:14:35:db:83:d7:0c:45:19:4c:8e:d7:2c:de:ee:
                    f4:43:01:3a:c5:8c:b0:93:73:3e:1b:09:70:ca:60:
                    6c:cd:5f:61:be:7f:c0:78:07:18:04:85:5b:70:2f:
                    9e:84:06:be:88:bc:4d:ca:ae:54:b5:da:55:1a:ba:
                    3c:5d:a6:12:62:cd:cc:5f:64:3a:91:ff:33:cd:a3:
                    e6:c0:e8:ec:0d:49:9a:ae:a0:f4:2f:ba:9b:4d:e5:
                    8b:c2:73:6c:18:6a:45:97:f3:52:46:bf:b7:5f:23:
                    ac:84:fd:89:f2:58:10:ff:a2:17:d5:fb:70:3a:a5:
                    55:d3:c3:6a:0b:a6:fe:59:20:a5:e6:9f:a4:f2:7b:
                    1f:4c:5f:e8:94:b6:0a:19:24:cd:e1:e0:2d:c5:a5:
                    5f:21:35:e5:f2:45:b3:e2:6a:ec:39:79:4a:93:73:
                    1b:73:b4:41:7c:b0:10:fb:4e:be:30:97:67:b3:7d:
                    68:c5:c9:71:b6:af:e9:84:df:8d:28:6d:6e:ab:90:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:27:C6:FD:37:BA:05:7A:C5:B1:C9:D4:25:BA:04:0D:09:88:EA:27
            X509v3 Authority Key Identifier:
                keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:68:35:1f:96:17:9d:0b:20:eb:17:2d:20:8e:a8:de:ad:0e:
         14:7d:89:38:6c:2b:5e:80:9c:a0:9e:73:d0:c8:e4:84:ca:a6:
         8e:77:9d:a3:9e:d0:bf:0b:23:55:2b:13:c1:92:07:67:79:41:
         1c:f9:bf:84:c1:07:d1:44:55:99:0c:38:6a:9a:3e:e9:10:76:
         aa:2f:0f:29:af:a7:e4:f6:48:ff:1c:f9:35:9c:e9:08:52:3b:
         3b:62:0b:73:39:00:c3:0c:4b:4a:43:aa:12:0a:75:03:93:ee:
         c6:b4:91:46:50:23:f5:3a:28:8c:35:b1:c7:ec:fb:f3:e1:1f:
         ba:91:8a:be:1e:56:9e:0d:07:d3:fd:e2:fb:9b:f4:a9:a2:09:
         04:4d:99:b7:bd:f8:17:88:3c:90:df:5c:04:f5:68:90:e3:8e:
         9f:4d:31:6f:5c:47:20:80:24:b5:28:ef:51:be:59:40:ca:e0:
         96:e9:8f:a3:87:ae:85:97:b2:84:fd:71:7a:6f:1d:54:83:dc:
         5b:62:c4:ce:2d:ca:74:fb:09:e0:26:5c:04:86:7b:7c:22:c2:
         87:28:b3:84:19:f1:62:8c:fd:bf:be:16:19:bc:41:7f:0c:aa:
         17:83:96:99:13:13:96:f4:75:6b:47:84:59:5f:de:cc:b6:cb:
         44:79:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----