Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          Z0MY4AKHl2NbC29atz6dZkTETEjpq8WN9Uf9wifaAlg=
Subject key identifier:   18:E6:09:82:1D:08:F4:A0:CC:38:64:ED:C6:4C:74:3F:3E:F5:32:99
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       01962F74BEA32249BD54D25B900B2FFC75B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          01E0
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: RajmY7Ld2IAUAR25DiJyppNdeWL9yK9esbYyFCDo5rA=)
                          2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:a3:22:49:bd:54:d2:5b:90:0b:2f:fc:75:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=18e609821d08f4a0cc3864edc64c743f3ef53299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:41:a4:db:01:90:4b:06:47:fa:45:ad:f9:
                    f8:4b:3f:05:75:85:17:33:70:09:63:a1:6f:74:01:
                    90:b8:11:fe:01:54:39:ac:e1:d8:7f:70:50:02:88:
                    6a:d3:0c:a7:13:ba:bf:15:5a:ef:bf:ab:98:aa:43:
                    3c:5b:30:28:a4:0d:77:15:b3:e9:d9:e9:65:73:28:
                    f1:18:0e:d9:6d:4b:d6:0e:c2:bd:4d:1c:e3:2b:bf:
                    d5:be:ac:1f:bf:87:43:d4:17:8d:2a:fb:4d:4e:2c:
                    06:21:85:ec:c8:4b:ee:c1:b5:08:6e:ad:fd:d5:20:
                    71:b0:87:b8:d4:d4:eb:0f:59:e6:8a:d5:99:6e:be:
                    07:24:b6:0c:bd:19:5e:36:ce:d0:7b:31:3c:ae:97:
                    3a:d8:26:5e:db:de:79:c0:2f:cb:0f:70:7c:d3:37:
                    c5:95:4d:52:27:1e:27:59:ec:72:d9:c8:0a:3e:d6:
                    45:bf:10:33:37:04:3f:11:f8:27:52:7e:1d:0a:d9:
                    f5:a9:65:24:48:d2:f3:e4:11:83:a0:75:53:94:08:
                    77:34:ee:bc:f8:ab:a5:fd:08:14:eb:52:4c:7d:3a:
                    25:78:44:05:fb:9b:ee:08:a5:c0:a8:ac:8c:19:44:
                    09:0d:03:18:8d:20:7b:e7:71:47:80:77:9a:e0:18:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:09:82:1D:08:F4:A0:CC:38:64:ED:C6:4C:74:3F:3E:F5:32:99
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:84:85:41:7d:c8:4e:35:33:24:81:e0:fd:e2:b2:55:01:e9:
         12:9c:d9:0f:6d:b2:1e:c4:d8:c9:0f:13:d0:d9:d4:0d:86:ea:
         7c:26:1f:98:3b:ac:d3:82:40:e5:07:46:f7:39:b1:51:21:97:
         0c:be:ac:4b:aa:71:e7:37:18:b4:79:a3:56:41:5f:eb:64:2d:
         8a:9d:ca:ba:34:db:86:f1:07:f1:5a:d6:e3:b6:e8:8c:bc:be:
         08:97:f5:47:9a:6d:66:ab:59:74:f7:69:e6:b7:12:5b:20:2f:
         cf:82:86:a9:35:f9:d9:31:40:b3:fc:92:3e:66:87:d0:dc:c4:
         44:77:d0:38:16:26:97:d4:bd:a3:ba:0b:25:b2:38:d3:f0:e0:
         7a:89:18:27:79:4c:be:4f:76:54:88:8e:15:39:07:e5:50:8c:
         4a:3e:8e:dd:38:ca:a1:fc:e6:d4:57:52:2c:55:03:8d:56:41:
         82:20:94:dc:5a:89:b3:47:10:b1:03:3e:59:35:98:85:db:53:
         56:5b:d5:2e:f1:d7:11:d2:80:6a:61:32:a0:50:e9:35:18:aa:
         52:d6:c5:3e:70:99:b1:f5:34:a1:2c:d0:27:72:20:3e:30:32:
         df:2b:c0:c7:ec:04:c5:43:a5:7c:f4:95:8e:a3:0e:04:0c:56:
         01:19:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----