Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File:                     l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier:          WUsDoDGita9jNKRCZvz4/iqvPzF+ody468vAdB58QAE=
Subject key identifier:   82:85:BB:2E:E1:EC:D6:C2:84:97:EE:98:E9:D2:A3:93:41:25:F5:0D
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer:       /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial:       01962E98A516558A1E52022B824A3E8E23CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number:          06EC
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: GbAw3F7MjNJ95C6AZRHjgy4C_8E.roa (hash: hsZPGboOEmxaS9pP8M6WQo5xOeBG/GIeZlXu45Z680A=)
                          2: iIlmR63znDA0-FxaY6vTy_DKL6M.roa (hash: CIfN4trJPKCVdpMsOe6p8BfBCulrZHS1m+gKQyYsogg=)
                          3: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: 9Ggr+vAObXgxIfKA75YndbPZFYvBJo5vg59kbl5zmVw=)
                          4: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:16:55:8a:1e:52:02:2b:82:4a:3e:8e:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=8285bb2ee1ecd6c28497ee98e9d2a3934125f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:76:5e:20:00:d8:62:ba:3f:8e:8b:46:94:
                    0a:55:09:33:fb:75:a4:d7:36:a5:b9:a7:16:50:5d:
                    31:a5:2b:60:81:49:e0:8e:c3:b4:59:58:f6:4f:f6:
                    c9:a5:10:49:12:43:91:f5:b9:70:4f:ce:4f:16:7c:
                    5e:88:9a:f3:53:f5:75:f7:4a:2b:4d:43:bd:02:77:
                    86:a5:8d:93:09:8d:2e:29:aa:9b:f2:7f:4a:2d:cd:
                    b2:11:99:06:84:37:8a:6f:d3:db:16:be:26:0f:28:
                    66:cb:2c:88:34:25:d5:62:46:59:1c:04:7c:5a:df:
                    5e:6d:58:77:c9:3e:9b:1b:31:93:9a:95:39:d5:d8:
                    2f:fe:c6:01:1c:bd:8c:cf:d8:3f:dc:af:6a:30:41:
                    07:4d:e9:06:c3:40:a6:d5:17:56:12:ce:86:a3:fc:
                    18:13:e6:c9:23:9f:28:4b:16:66:9c:47:ac:43:0c:
                    20:3e:80:fe:75:85:3e:17:e4:4c:36:0a:22:3e:df:
                    ce:e3:d4:7b:d6:fa:e3:61:c0:0d:56:ec:64:88:94:
                    86:aa:1d:f5:de:ee:f7:ef:49:cb:c2:f9:4c:cb:2a:
                    75:6b:fd:3b:29:38:22:37:3a:06:37:19:c0:72:bc:
                    84:b9:34:23:1c:d0:bf:c6:81:e5:f4:d7:18:b5:03:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:BB:2E:E1:EC:D6:C2:84:97:EE:98:E9:D2:A3:93:41:25:F5:0D
            X509v3 Authority Key Identifier:
                keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:11:10:6d:0b:b0:e2:2e:4b:5c:72:a9:8b:0b:f1:3f:c7:18:
         68:40:b9:77:c1:27:17:71:7b:56:fc:28:fb:aa:b5:f3:dd:1a:
         6a:f0:83:21:df:06:81:2a:cc:87:6f:23:13:a9:36:e8:6e:82:
         13:b9:65:a0:33:33:35:c6:47:2e:6f:66:12:58:bb:f7:14:a8:
         d4:9f:8f:2f:e7:ee:79:20:0c:9b:9b:a7:cf:9f:58:f1:28:d0:
         df:c6:59:1a:94:78:75:19:b2:65:10:3b:96:3a:18:60:86:7d:
         97:51:ae:7f:c9:85:3f:c9:6e:9d:d0:39:bb:5e:69:1e:24:c4:
         27:59:d6:2c:dc:be:57:f3:2e:fd:b4:78:5d:b3:76:2d:6b:2a:
         e0:c2:0a:7b:36:22:c1:4e:8e:f9:92:6b:49:0d:1a:fa:a2:c1:
         dc:09:65:29:93:2a:57:30:2b:00:f5:77:45:ba:a9:96:0a:e4:
         46:48:84:d8:a7:26:4c:b2:5c:36:e4:ef:3e:cf:c3:63:a8:4a:
         78:fa:9c:c5:89:0c:2a:8a:50:5f:4c:c0:03:0a:0a:d6:94:ac:
         f0:50:46:c0:1a:cf:fc:93:82:a1:2c:8f:5a:bd:de:cc:d9:1c:
         00:40:0e:4a:31:e6:1f:62:ff:de:c3:64:8e:29:ba:b5:9b:d0:
         b7:89:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----