Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File:                     l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier:          fKqQl6kDYGmizNSFbAuGzrI88xCvw43lPnzzULERRbA=
Subject key identifier:   AC:04:77:55:93:77:8B:2F:A1:7E:D8:F8:1C:81:96:6E:7D:AE:9F:21
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer:       /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial:       01962F74F764D01743913629651295380533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number:          0BCC
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: lXbWGq3Ij0xN5ta8khnOQSLJyny1KY4pNctBro0YI54=)
                          2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f7:64:d0:17:43:91:36:29:65:12:95:38:05:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=ac04775593778b2fa17ed8f81c81966e7dae9f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:39:0a:bc:24:51:3c:e2:a4:55:2b:4a:47:
                    a1:88:d6:f8:03:6a:ca:e6:f8:2c:38:e0:bd:c2:28:
                    6e:9a:fe:5f:e4:97:4e:1b:c6:71:d1:08:61:93:bf:
                    1c:85:82:be:58:3e:b0:0c:3e:50:02:20:cb:24:fd:
                    39:2c:15:a2:ef:c4:49:88:32:22:b5:16:f9:e8:7f:
                    eb:28:2f:e7:e4:e7:6b:74:c2:29:f6:d4:ea:c7:29:
                    20:9d:06:d5:52:f1:f2:57:1c:ba:8b:a7:fd:ea:4b:
                    96:4a:78:e9:29:a2:24:5f:f0:ad:e1:d8:cf:8e:4f:
                    28:b1:77:02:af:31:29:a4:35:5e:85:c1:80:67:25:
                    22:98:90:fe:ee:d5:75:72:60:b2:fd:0a:49:06:20:
                    ce:77:ae:9c:2e:a3:ce:df:e0:11:4b:b9:e5:cc:e6:
                    53:93:c4:b0:4b:09:ae:09:e4:55:6b:66:28:c4:39:
                    3a:06:1a:8d:aa:1f:f4:b0:0f:59:4c:dd:08:93:7e:
                    c2:63:f7:9c:83:81:29:6e:4a:55:de:8e:5d:3c:d0:
                    72:23:ff:bd:1e:d1:4b:13:da:7b:e0:a5:30:8d:2c:
                    fb:cd:30:e0:d3:71:95:17:b3:bf:40:33:0f:a4:77:
                    ab:c3:3d:8a:16:4c:b3:85:ee:bf:2e:1e:a1:73:de:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:77:55:93:77:8B:2F:A1:7E:D8:F8:1C:81:96:6E:7D:AE:9F:21
            X509v3 Authority Key Identifier:
                keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:69:1e:50:27:3d:1d:78:21:f4:9e:6b:05:f5:4a:a6:da:d5:
         a0:9c:d5:37:15:96:92:d7:2b:bb:03:bf:36:c8:03:61:4d:0c:
         25:56:81:ff:c4:a1:4f:a6:17:e2:43:3e:7e:b2:45:ec:de:75:
         b9:fe:dc:4f:54:92:8f:4e:83:7b:14:10:6e:a1:41:b8:37:13:
         67:95:12:89:f2:1a:5a:96:e4:92:90:80:f9:80:4f:b2:53:c7:
         3b:45:53:dc:12:f5:d2:f5:8a:bb:e6:34:11:a1:b5:08:f7:e9:
         f6:86:2c:5e:37:4e:08:54:67:90:f3:68:38:53:9e:7b:58:b5:
         38:44:e9:ea:15:a1:0d:8c:6e:0a:ca:a6:97:96:b7:c7:c5:76:
         77:73:61:91:1f:b8:a6:32:db:df:3e:02:fc:c4:f4:1c:0b:cf:
         8d:dc:1c:e9:26:84:69:0f:74:df:bd:3a:fc:41:53:ee:73:44:
         58:0a:6a:fc:c3:31:c2:78:7b:c7:10:0d:d3:db:31:cf:a8:31:
         0f:d5:ae:e4:81:82:7b:09:83:08:28:5e:b9:0f:b5:3b:90:7c:
         b4:41:ac:2e:7e:14:80:b3:84:fb:1b:db:a4:03:a6:d3:bf:01:
         29:c5:1e:ed:b4:a1:db:18:dc:5c:44:a0:7c:bf:f1:d9:50:b9:
         9b:9c:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----