Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File:                     L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier:          emM6JpTrXyf0Ems5ERmjt2J989iAXCraVGIOGcNU1gA=
Subject key identifier:   64:A4:83:11:BD:9D:35:88:BD:99:10:3D:3F:3E:06:49:84:BA:6B:3B
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer:       /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial:       01962ECF90D102562F1BB5058FD5CE62929A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: fU9zkPGG11y0RB7Z7L2amT89lblUWtFFkeNHhmSufng=)
                          2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:d1:02:56:2f:1b:b5:05:8f:d5:ce:62:92:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=64a48311bd9d3588bd99103d3f3e064984ba6b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:aa:fd:cd:69:db:bf:e9:27:6b:c1:f0:24:
                    f9:78:c4:5b:f4:2d:39:8a:bf:1b:5e:5e:46:11:7f:
                    05:60:79:d6:d6:32:89:5b:4b:d0:5c:eb:22:29:9d:
                    df:e6:ab:74:c4:e2:2d:02:75:75:02:17:cf:64:8f:
                    fe:d9:e3:d1:35:71:34:a8:13:b9:91:2d:a1:45:99:
                    eb:aa:d1:3a:cf:ef:78:f2:65:d9:4a:12:b0:4e:1c:
                    cc:fb:78:44:63:6f:b2:01:97:b8:cb:e0:10:29:68:
                    04:51:9b:a3:58:02:a5:19:22:65:a5:ca:b7:97:17:
                    93:25:8e:0d:f3:1d:ac:a3:c1:85:d3:8b:b5:c4:e5:
                    50:f2:13:f5:d6:3b:39:fa:cb:1d:3a:4e:fb:be:3c:
                    3a:d1:f2:ff:c5:6f:03:c6:56:44:38:92:da:8e:24:
                    59:c3:d2:f2:01:c8:16:14:44:77:d3:c5:e1:65:1f:
                    de:7d:c7:d2:1f:00:84:8f:f0:c6:a0:8e:34:cb:51:
                    cd:8f:05:c9:25:23:7b:5d:83:9c:08:33:ab:9e:16:
                    48:70:e4:65:8b:91:35:47:c7:e7:fc:65:1a:8e:fe:
                    aa:f0:e2:30:33:60:ad:86:08:fd:35:2e:d6:37:9c:
                    12:b1:14:0e:c2:73:2b:96:66:6e:73:f8:e0:b2:7d:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A4:83:11:BD:9D:35:88:BD:99:10:3D:3F:3E:06:49:84:BA:6B:3B
            X509v3 Authority Key Identifier:
                keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:77:74:30:17:c7:02:a9:ae:c0:b2:30:5c:0f:c9:f6:05:4d:
         89:35:e8:f2:68:12:12:00:a1:b3:78:5a:a7:f1:df:9d:41:5d:
         75:de:bf:80:e8:b1:04:bb:8b:fc:b4:95:37:18:d3:d2:93:c8:
         21:84:25:13:82:a0:a9:53:1f:32:60:4f:7b:76:58:21:02:0b:
         ae:ca:70:18:fc:65:8c:8e:0c:1e:36:98:2a:93:e9:8e:c1:50:
         f2:7f:e6:74:81:ad:c7:9c:f7:5a:d0:fb:41:9e:15:d8:d8:ca:
         fe:5b:80:55:20:4e:58:1c:4d:16:8c:7b:49:6f:d0:48:78:89:
         8d:5e:7a:df:43:01:58:94:39:ae:f4:79:f8:f3:69:fb:96:9e:
         24:ad:a1:9e:de:98:56:af:ce:a0:d9:60:27:ea:c8:e5:b9:9e:
         7a:4e:0f:43:d9:42:b5:1b:bd:ea:15:2d:0f:b0:76:39:08:65:
         53:8e:df:2b:f0:4c:22:55:7b:51:73:49:0d:b5:18:0c:a4:c0:
         4e:88:68:1c:a0:47:09:d7:dc:00:7a:3c:12:50:e2:ec:e7:97:
         d9:a2:be:32:42:3f:65:22:8d:8e:82:5b:ee:03:52:9e:cb:a3:
         c5:b6:0a:cc:46:c1:f4:48:fe:fb:e4:ed:80:9a:2e:5d:cc:6a:
         ed:bc:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----