Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File:                     l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier:          52BzgERlCyaCLx136jKVU8/ROWXacrFIY9FU3f4SaCw=
Subject key identifier:   DB:C5:E0:BE:A2:58:BF:AE:B4:24:D3:34:23:32:A2:25:05:51:BE:69
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer:       /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial:       01962E99A899FB817CC8A0ED5A1C3B3FFC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (hash: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=)
                          2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: +4RVHi7srrVM3WEZaVJITqR3swZdc8U55Z3joygra3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:99:fb:81:7c:c8:a0:ed:5a:1c:3b:3f:fc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=dbc5e0bea258bfaeb424d3342332a2250551be69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:7d:59:62:53:d7:8b:01:1a:3b:c8:16:d6:
                    83:c7:91:d1:ec:9d:71:9b:25:d6:6d:97:ad:ae:f9:
                    20:5e:6c:45:f0:27:c3:ea:a5:80:13:20:cc:a0:5f:
                    9d:b7:69:fa:2e:22:e6:6f:16:dd:92:e2:85:93:26:
                    e7:29:6d:02:f8:c3:86:67:02:fb:03:28:3f:40:a2:
                    99:49:6d:ba:bb:da:46:d2:5c:99:ae:1d:0f:1a:2c:
                    d2:f4:a5:15:f3:e7:45:a3:3a:e1:85:c4:91:1b:4e:
                    fa:f2:6d:1b:d4:e7:c1:b3:c8:95:e8:19:fd:5b:8d:
                    d6:89:cb:17:cd:82:fb:8d:68:36:dd:78:76:52:8f:
                    ac:1f:f9:44:e4:f3:60:de:e9:7b:7d:14:eb:80:06:
                    57:84:92:82:b9:70:ea:86:ec:be:d3:c2:9e:c9:a3:
                    4f:49:0c:cc:c1:0c:96:b9:95:42:d4:3f:90:2a:d8:
                    97:1c:e9:b7:c2:40:86:02:20:4e:b0:22:97:a1:54:
                    38:48:2c:9e:a0:5f:70:40:c4:3f:cb:11:3e:49:e4:
                    6f:9c:58:36:50:82:bc:ce:8f:83:a3:52:25:04:8e:
                    f1:62:e9:27:29:76:f8:8a:19:ea:86:10:bf:a2:f3:
                    f6:7d:f5:d4:8a:e7:6e:05:f3:02:4f:e5:82:e0:88:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:E0:BE:A2:58:BF:AE:B4:24:D3:34:23:32:A2:25:05:51:BE:69
            X509v3 Authority Key Identifier:
                keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8f:16:a5:84:a3:15:a3:f3:12:b3:eb:6d:ee:eb:56:b4:9d:
         8b:25:46:8c:c2:48:43:7f:ab:96:72:72:f1:b1:73:5a:92:c9:
         7e:d0:0d:69:7e:7b:c6:6d:25:2d:1c:48:f1:b8:ad:a7:7e:10:
         b9:81:90:4f:76:72:37:cd:dd:8b:bf:73:15:23:2f:fa:ee:5f:
         04:f3:88:14:67:03:a5:99:c1:11:b5:fc:59:be:38:e9:1f:e2:
         87:a9:6c:fc:fa:ac:75:df:f5:f1:ee:1a:b7:7e:29:94:5f:0c:
         f2:b5:b0:76:aa:11:db:59:61:31:22:d5:cf:fa:18:e7:83:11:
         94:8f:7d:dd:98:40:cf:1a:5a:fc:1a:13:ee:3d:1a:2e:49:cc:
         40:7f:d8:22:7b:00:31:9b:36:23:68:4f:bb:9f:d4:dd:f0:3f:
         63:38:52:1b:80:b3:25:33:2c:8c:d5:d8:a6:b7:57:dd:e0:ca:
         f3:3d:74:fe:23:e1:32:bd:7a:44:dd:5b:15:4d:eb:22:42:59:
         8d:d1:2a:c4:a7:fd:e0:8b:15:38:28:19:51:2f:9b:16:cd:9b:
         7e:96:34:12:d7:1d:7b:9d:46:9c:fe:6d:51:d4:26:39:66:94:
         f0:b8:83:08:ab:13:4e:13:a1:50:2f:6c:3a:74:27:b1:48:cb:
         2b:30:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----