Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File:                     l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier:          KMqocW8QJU93cPxu58JuXYDuy527aGmuYgNgt6Qjb1Q=
Subject key identifier:   16:4B:8A:96:ED:AC:30:FA:12:F5:0F:6E:E6:63:EE:6E:5B:95:02:68
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer:       /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial:       01962F3D80A1C380020EEB9CB18DA7AFF889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number:          045D
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
                          2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
                          3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: LR559543Jji8whsj6UPTeeVf57be1ZkVMioP4dbl5fU=)
                          4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:a1:c3:80:02:0e:eb:9c:b1:8d:a7:af:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=164b8a96edac30fa12f50f6ee663ee6e5b950268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:ee:c8:37:f1:23:b2:e2:ed:d2:72:8b:f7:
                    44:d3:94:94:32:bb:b0:90:4b:d6:d0:5f:80:87:30:
                    2e:68:fc:98:64:07:21:45:1a:93:c3:ae:6d:3a:4b:
                    35:98:cd:5b:54:06:61:20:73:9d:06:28:cf:ca:f9:
                    cd:e4:99:a9:fa:cc:1d:c8:ff:c0:82:17:65:7e:74:
                    58:81:d1:b0:bf:6b:cf:d2:10:0f:39:4e:ed:c4:36:
                    8d:88:e8:2e:b8:6f:a0:9d:12:cf:09:6d:31:ab:b4:
                    52:22:19:57:95:58:9a:1d:fb:17:31:fa:65:24:47:
                    21:99:4e:bd:a5:e2:88:22:dc:cf:7a:43:cd:a7:d1:
                    1b:39:d7:a4:2d:df:6c:8e:31:5f:a7:75:77:71:e3:
                    f8:c8:d5:8f:3f:28:f8:23:f2:7a:84:bc:42:aa:82:
                    dc:ef:e6:7c:cc:cc:33:29:c5:4e:e4:81:f4:78:13:
                    de:72:c6:4f:a6:cb:3c:28:06:e2:0f:8c:a9:99:ec:
                    d0:59:c8:fc:18:1a:60:39:2a:09:23:e3:f3:e9:b3:
                    48:92:68:ce:72:31:df:43:cf:52:e0:d2:a9:a3:0c:
                    f2:1f:fc:5c:08:3f:39:02:d7:0c:5d:16:87:58:7f:
                    17:76:35:ba:38:5e:7c:2b:ce:4e:ba:97:c3:ea:f2:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4B:8A:96:ED:AC:30:FA:12:F5:0F:6E:E6:63:EE:6E:5B:95:02:68
            X509v3 Authority Key Identifier:
                keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:18:d8:d2:98:55:a7:e0:48:05:b2:1e:ef:e1:27:97:b0:87:
         3f:de:29:73:92:71:ae:24:af:90:66:0a:2b:c7:8a:b5:3c:cc:
         16:95:0a:a4:cc:ad:54:f6:70:1c:3f:54:ab:10:4e:5e:e6:03:
         ce:ab:15:06:d9:f5:b0:d5:e9:43:5c:75:1a:e3:21:26:47:4a:
         09:b1:0c:72:89:a5:2f:f7:f8:af:12:1e:33:df:e1:18:bf:7c:
         8c:b0:0c:5a:5b:1c:b6:d5:4f:b5:13:a7:22:b1:64:db:1b:db:
         3c:ea:80:e7:18:7d:f4:1a:c3:ef:07:2b:69:18:25:cf:b5:dd:
         6b:8b:b5:a5:84:ab:e7:67:52:06:fd:94:18:dd:6d:c4:fe:e8:
         a4:d1:9a:37:e6:63:aa:2b:66:07:cf:cc:1c:48:39:68:3c:72:
         fa:ec:f9:50:11:c1:1c:b5:78:ec:29:2b:6e:f2:92:18:fe:87:
         27:1c:f3:27:f5:b6:37:45:d2:f2:f1:21:ce:a0:5d:e5:23:e7:
         e4:ee:41:26:b6:de:05:95:b9:57:18:ee:99:89:22:3d:ba:29:
         ce:1f:c5:ac:62:43:7a:7a:03:da:91:08:61:01:dd:f6:9d:c4:
         d2:a6:6a:47:07:7d:4f:a4:8b:64:90:c0:4a:6e:a0:b7:a0:f2:
         c8:6f:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----