Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File:                     L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier:          DxUtIxS7mSGcq6oXllsuvI0v24funalYoTtDYIOrr2E=
Subject key identifier:   FB:C8:DD:81:BC:37:59:EB:3A:97:73:29:09:62:12:C8:76:CE:5B:FD
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer:       /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial:       01962F742A4CF6B3CF71E1B7340411C259A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number:          0DA0
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: li9nIRugrbIEWxogFqolA/j6laUoQK4vkp0ZAk1szyY=)
                          2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
                          3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:4c:f6:b3:cf:71:e1:b7:34:04:11:c2:59:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=fbc8dd81bc3759eb3a977329096212c876ce5bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:30:cc:c1:e5:62:6a:b5:53:1e:2e:dd:07:
                    49:fa:be:cb:27:dd:9a:39:b9:30:bd:c9:c9:04:49:
                    f1:da:a3:d4:ca:2d:e5:aa:a1:da:37:6e:01:c6:bc:
                    2e:01:94:d6:89:b5:eb:33:92:3a:9c:b1:c7:97:1e:
                    3b:87:50:34:59:8c:16:e5:7c:a8:72:6a:6f:5b:18:
                    cc:91:92:5e:b5:13:ac:d9:a9:61:b1:fc:c5:bf:c7:
                    55:3c:a3:5e:43:9f:f1:6a:e0:fc:7c:dc:de:24:25:
                    df:70:19:72:b6:3a:8d:7c:82:06:f6:cf:fd:65:64:
                    3c:e9:7f:ba:52:ca:e5:2b:c2:7f:eb:37:f6:13:0e:
                    cd:03:54:bd:59:00:ca:c5:dc:6c:31:9e:7d:d1:1a:
                    a8:e3:94:1a:aa:eb:8f:55:dd:a1:d4:41:2e:04:f2:
                    6d:61:f5:98:11:06:00:b4:b9:e1:6b:a1:42:5e:d1:
                    f2:38:a7:fe:8b:90:16:3d:e3:6c:fb:12:38:38:27:
                    d9:9b:5f:7e:3f:ed:67:82:96:6d:24:42:99:3d:27:
                    ff:60:51:30:35:bc:b4:31:1f:e0:6a:1b:32:25:1b:
                    88:d8:b2:d9:f9:5a:d5:ac:ca:ec:c0:8e:78:00:fc:
                    46:55:06:8f:f1:89:88:05:68:46:3a:ee:02:b7:ec:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:DD:81:BC:37:59:EB:3A:97:73:29:09:62:12:C8:76:CE:5B:FD
            X509v3 Authority Key Identifier:
                keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:82:52:60:d9:4a:d6:cb:b7:6c:f5:2e:c8:1f:cc:cb:f6:c7:
         c5:46:dd:c0:5a:46:a7:2d:6c:7b:f1:cb:47:ed:ad:46:3c:1f:
         db:a6:a2:30:f9:e0:f9:e1:ea:11:8d:62:e3:46:1d:2a:8a:e3:
         84:2f:2d:00:74:2d:2e:4b:38:48:84:27:2e:d9:d5:19:3e:64:
         74:b9:5e:03:39:57:1d:39:05:ec:9d:5d:d8:f0:91:af:15:97:
         2a:5f:90:bb:c5:02:d3:02:93:ac:b9:34:6f:9c:f7:f7:00:6c:
         f8:c7:c4:59:40:26:ea:71:23:06:ea:9e:c5:aa:61:18:9f:d5:
         6e:de:69:ad:b6:91:a2:36:3e:48:9a:67:1b:c4:13:8b:36:9f:
         99:ee:e5:04:ea:4a:b5:91:32:12:3c:30:d2:26:34:be:71:3a:
         0e:63:25:75:5a:d8:e9:57:75:22:de:70:5b:19:3f:18:2c:d1:
         6d:ac:05:fe:fe:46:c5:3c:1a:96:c7:f9:8b:23:c3:e2:e0:23:
         60:48:e2:18:a1:32:8f:b9:ca:d7:81:b2:b6:f6:f8:75:9d:36:
         9a:02:fe:97:58:09:4d:c5:69:47:1f:ef:f1:09:e0:a5:88:26:
         e9:70:2a:b3:a5:8f:ff:da:bc:33:e4:a1:42:43:c5:fb:1a:c6:
         50:56:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----