Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.mft
File:                     l_aXATQzuJHWRpfZKGY75zTbpOc.mft (raw, json)
Hash identifier:          ag2wk+v6/lSyEU+d6QV+iKh4TQZ/TxWITD0JyS1o78g=
Subject key identifier:   83:9F:19:A4:CF:4B:4F:8E:4C:52:4F:A6:66:10:ED:34:8E:81:10:3B
Authority key identifier: 97:F6:97:01:34:33:B8:91:D6:46:97:D9:28:66:3B:E7:34:DB:A4:E7
Certificate issuer:       /CN=97f697013433b891d64697d928663be734dba4e7
Certificate serial:       01962DF3A095C1D3BD7C16F1326ABFC5BA38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_aXATQzuJHWRpfZKGY75zTbpOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: Q01X85MGyHMF5rr2gbqyxSbVGJU.roa (hash: 3pLndBzBIS9IcjtzdUX4XacaMZCMolKRG+4KwxWHWEU=)
                          2: l_aXATQzuJHWRpfZKGY75zTbpOc.crl (hash: Y8U7tyxUc7cjJO4vQt+l54mNe37HNQ8QjEjS2gJ9AuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a0:95:c1:d3:bd:7c:16:f1:32:6a:bf:c5:ba:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f697013433b891d64697d928663be734dba4e7
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=839f19a4cf4b4f8e4c524fa66610ed348e81103b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:37:cf:48:06:fe:37:06:52:c5:e6:57:4c:
                    90:3c:92:79:f7:06:7c:5e:c8:15:f0:8b:1d:36:3c:
                    a4:10:0c:22:8c:45:5d:8c:2b:13:72:59:d8:9d:01:
                    24:51:7d:9f:fa:d3:a6:95:a5:b4:be:8d:13:e4:4c:
                    8f:ae:56:40:27:9e:d4:ff:0e:70:e5:ba:fa:4d:d8:
                    b0:0d:4e:25:89:a9:a5:27:7a:fd:ba:04:ca:2f:da:
                    39:fe:85:b4:af:dc:ea:5e:9c:c6:c8:bf:56:e3:17:
                    7e:69:60:45:bb:95:5d:9c:6c:31:56:2e:4b:a1:32:
                    c6:6e:4d:c7:86:1c:d8:2d:f1:4c:cc:12:12:b6:6f:
                    e9:b4:7f:06:90:91:59:33:ee:23:6d:d7:90:93:5e:
                    01:95:0d:b2:69:81:0d:fb:69:78:db:b9:4c:49:32:
                    43:13:56:5a:ec:ab:65:90:be:4a:9d:9d:d0:44:a3:
                    c2:5f:94:84:7d:06:2f:ee:5a:dc:41:8c:89:30:f4:
                    4a:d8:f2:29:39:22:3a:4b:9b:55:d7:ea:60:8d:ac:
                    5e:2e:b8:87:22:2c:a7:97:58:2d:1a:80:a8:f4:9c:
                    de:19:60:23:3c:05:cc:d0:e4:c7:47:f7:0d:9b:41:
                    b2:cc:92:a9:37:4c:85:24:74:cb:ce:27:a3:2b:c9:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9F:19:A4:CF:4B:4F:8E:4C:52:4F:A6:66:10:ED:34:8E:81:10:3B
            X509v3 Authority Key Identifier:
                keyid:97:F6:97:01:34:33:B8:91:D6:46:97:D9:28:66:3B:E7:34:DB:A4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_aXATQzuJHWRpfZKGY75zTbpOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:fe:dc:20:be:3b:00:cc:19:21:b3:b5:dd:e3:8c:15:65:
         f9:d4:4c:d3:e5:2f:99:e8:33:66:3b:bc:16:b5:59:76:9b:b2:
         88:22:96:e2:8a:f2:f4:63:b6:3a:ea:d5:e0:41:86:63:d6:46:
         34:1c:b5:ec:0e:c2:f5:8e:f9:cf:f1:a5:8a:e2:43:90:ab:0c:
         56:bc:b6:71:2e:40:67:df:8c:4e:88:6f:e4:06:46:4f:2d:9d:
         71:8a:f2:a5:e2:61:f9:01:2e:f2:44:82:65:e0:1c:bd:83:f4:
         43:ab:1d:5e:19:b7:0b:6a:99:74:04:90:62:e8:f5:ac:16:3e:
         55:1a:46:fb:d6:22:10:f3:36:da:2e:6c:21:b4:2f:2e:90:b6:
         23:27:d7:41:ec:e9:45:b6:d2:6b:70:60:eb:77:46:ae:35:47:
         57:aa:48:a7:b7:c3:dc:99:3c:4a:e4:34:b5:25:7d:6d:c1:c9:
         10:d8:a2:0c:ec:eb:67:33:0f:33:ce:f3:1d:54:b1:77:5d:42:
         ce:14:04:0f:9e:58:a0:f8:87:2b:06:22:68:37:6a:e8:08:65:
         c0:01:87:73:b5:07:38:16:d1:52:78:81:d4:d6:d4:2b:8b:1c:
         c1:a4:7d:99:a0:13:dc:3b:47:06:52:f0:9d:d9:77:2f:f7:de:
         79:86:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----