Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File:                     lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier:          idXCmJxqkyRMd2XbclFGR2KSohKn1srzhKPtSeO1vGw=
Subject key identifier:   03:8A:A7:BA:84:42:97:06:63:85:2A:86:64:F2:9B:92:D7:2F:09:86
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer:       /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial:       01962E98F19EE3A89F01DAAE8AD4BDE07D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number:          0ABB
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
                          2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: k8I4gR0D3u/RZutv4kAgMFRP5XY+u0XstCMQc/14PsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:9e:e3:a8:9f:01:da:ae:8a:d4:bd:e0:7d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=038aa7ba8442970663852a8664f29b92d72f0986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:7e:1a:4f:5f:a5:f9:c4:4f:fe:9f:f4:17:
                    bc:d2:d5:12:17:e0:5f:ba:da:64:bf:8c:cc:10:fa:
                    7f:f8:d7:d4:d3:f4:b6:de:4c:16:c6:48:29:36:46:
                    b2:8e:66:19:ed:03:0c:4f:4a:bd:f7:73:81:df:c8:
                    ed:8b:5e:03:86:6d:90:96:f3:b2:de:c2:ed:f9:b8:
                    6f:44:66:f9:83:51:d4:d5:7d:5d:72:ae:d5:70:39:
                    01:3f:ed:23:6b:e6:f8:9e:28:58:06:37:32:74:8d:
                    c6:9a:4f:cb:46:26:6b:71:eb:6d:4b:40:b6:3f:b6:
                    62:0b:1f:b6:6f:51:72:70:f2:4e:28:a0:3a:c1:fd:
                    38:dd:90:a8:34:b2:f3:08:d5:6c:5a:bc:39:c8:07:
                    52:ff:6a:11:58:80:00:4f:20:97:12:8e:8f:63:58:
                    57:78:b8:1b:74:8d:9d:1f:71:93:fc:be:c8:9d:85:
                    e5:c2:ba:10:b1:11:b9:27:0e:13:05:63:34:5c:b1:
                    15:cb:3b:2e:b0:4b:18:9c:74:92:ea:de:74:b4:ea:
                    82:5a:ba:b6:a9:1b:94:c6:6b:d8:71:fa:bc:07:d2:
                    ef:af:46:70:16:19:dc:2f:f6:27:8f:44:c8:66:1b:
                    bb:3e:1f:d0:e2:ce:76:9c:06:6f:33:57:88:2b:0a:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8A:A7:BA:84:42:97:06:63:85:2A:86:64:F2:9B:92:D7:2F:09:86
            X509v3 Authority Key Identifier:
                keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:9a:ba:bf:f9:e3:ef:1b:96:dc:83:be:5c:77:01:fc:29:
         e0:45:f8:34:69:62:62:0a:ab:c6:68:f4:4d:fc:c6:70:eb:b4:
         f5:77:d1:f8:01:45:71:b8:8e:51:7f:52:ca:68:a9:86:9f:5a:
         36:43:f7:05:51:dc:68:41:4b:55:d4:d0:d4:d2:62:0d:ab:5b:
         78:c1:f7:52:c7:1e:78:ea:cc:40:9e:c3:30:02:94:9f:c8:ae:
         cb:c6:f7:a9:58:d8:ad:8b:6f:f0:f1:6f:17:1b:c6:87:df:8f:
         0a:c1:78:b8:03:81:06:e5:9f:0a:9b:51:46:5f:cc:84:85:fc:
         0f:91:9e:e3:d6:ad:8c:e7:d8:af:47:c7:95:53:f3:77:9d:a7:
         ec:88:1b:f9:34:6f:bb:b1:20:21:09:a4:45:e2:08:cf:05:f8:
         4e:e0:23:e7:8c:4d:8b:58:54:99:bc:a5:cc:c4:75:6f:c9:f6:
         9f:e7:4b:b5:23:58:2a:a1:0f:ae:a3:cc:15:c7:6e:6e:87:18:
         54:d1:ac:80:5c:45:f2:4f:92:6d:8b:bb:55:ec:9c:e3:db:cb:
         22:c2:6e:a7:77:12:f7:43:c7:68:70:d1:8c:e9:52:aa:8c:2c:
         48:a4:0a:c4:f2:26:ac:58:98:74:e9:66:ea:f9:1d:a2:71:4b:
         9b:d0:dc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----