Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File:                     lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier:          FC8S27mGM7ZT7sPIl1hnpp0fovMttVM4E9oJB6lADm4=
Subject key identifier:   A1:B2:D9:E5:1B:B3:97:1F:5F:5A:09:ED:FB:CD:8B:AA:B9:E4:4C:54
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer:       /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial:       01962ECFD56D4EE51603059C2EBDEC590E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number:          0A1C
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
                          2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: ec/kC3vDldjr6p/tpfzpvZm8lqveL/qlcgXnq25IvOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d5:6d:4e:e5:16:03:05:9c:2e:bd:ec:59:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=a1b2d9e51bb3971f5f5a09edfbcd8baab9e44c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:1a:5b:28:ea:7c:8c:16:eb:e8:cc:b7:81:
                    30:ac:2e:85:b4:4f:fe:b2:4c:00:b0:f9:1e:71:8b:
                    b1:85:a0:0e:b5:86:03:2a:b7:75:58:5b:7b:3d:9a:
                    99:0b:0e:64:8f:23:08:c8:23:f8:25:18:0e:da:3a:
                    82:ee:b9:e4:a3:cf:ef:66:83:6b:6e:fe:2f:d5:09:
                    e5:da:9d:73:9c:7c:97:88:48:df:04:ff:9f:24:41:
                    0d:ad:a1:8c:36:2c:c0:2d:2c:51:d1:9b:cc:a4:a7:
                    8f:05:f8:a8:44:b9:8f:22:80:29:ee:2b:b6:a3:dd:
                    a1:5e:b5:c5:b5:2a:11:f8:c8:80:b3:86:a4:91:6b:
                    81:2b:93:d6:ba:58:ba:3b:3e:cc:27:de:70:c0:a2:
                    95:22:44:d4:4c:1e:4d:c8:d1:eb:e5:77:ff:eb:d3:
                    13:ab:b6:ab:42:9d:b1:af:e4:36:b0:f6:70:aa:f5:
                    f6:d4:d0:31:2f:7a:5e:0c:b1:a9:cc:63:cf:35:9d:
                    f3:11:07:2c:90:7f:b1:36:e5:fd:24:bc:33:66:a5:
                    74:a1:b5:02:8a:0a:c6:86:b5:95:76:1e:9e:51:be:
                    1c:e9:a5:b3:de:a6:c9:1a:d9:02:cd:21:bc:20:90:
                    af:cc:3a:c4:38:8d:a2:67:35:c9:cd:d9:32:41:cd:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:D9:E5:1B:B3:97:1F:5F:5A:09:ED:FB:CD:8B:AA:B9:E4:4C:54
            X509v3 Authority Key Identifier:
                keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:dd:5a:ec:ca:f2:c2:22:00:6a:70:c5:f9:bd:58:f2:62:
         09:d8:96:6a:85:49:86:05:38:ab:c6:b5:54:bc:51:82:e7:26:
         cf:af:fa:0b:48:c6:df:d8:1e:ab:34:11:6c:92:be:ee:01:06:
         36:7c:cb:cd:41:84:c5:1e:b4:ea:52:6d:2c:eb:e3:d7:f9:8c:
         22:a7:4e:30:23:08:25:c7:a7:e5:bb:81:65:e4:a4:38:fc:7f:
         ef:a4:64:8b:62:84:2d:e2:b6:ed:d1:26:2d:5e:41:2a:5d:9f:
         15:fb:75:92:81:18:c4:af:43:60:3d:e2:6f:64:34:39:73:c5:
         d0:de:bc:85:09:04:c2:51:1f:af:35:5f:d6:60:ed:9d:09:42:
         9b:5d:b1:6d:e0:83:30:6f:5c:fc:d6:8d:d8:a2:3c:d6:ef:6c:
         d2:b1:5f:64:f5:1e:66:ac:ef:d7:02:18:2e:99:2e:59:75:9a:
         2c:51:92:a2:2d:68:c7:6f:ce:57:d9:d4:50:86:ef:88:0b:9f:
         66:d9:42:e8:6f:e2:88:aa:5f:bf:44:bb:d0:ce:07:80:6c:83:
         03:3a:0a:7d:a5:52:4f:3d:0e:c0:cb:b8:98:bf:48:ad:4a:d7:
         a2:68:0b:09:e6:e4:80:13:47:e9:02:66:da:3a:d9:3c:4e:a2:
         10:3f:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----