Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          e1tzXC226AYmQBjzrNKwoVI7htFrhLaQh3d/51r1rds=
Subject key identifier:   5D:5B:76:4E:78:26:21:05:9D:7C:B2:C2:CC:53:8E:8E:83:69:5C:8A
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       01962E2B2DB9FA6AEBF4549B298367452635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
                          2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
                          3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
                          4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: xSm7ZtpvfXiq/MxJvS4YqsoRQVsyBwyUPWrUWlmev9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:b9:fa:6a:eb:f4:54:9b:29:83:67:45:26:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=5d5b764e782621059d7cb2c2cc538e8e83695c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:69:83:0f:5d:cb:75:c4:fb:6c:09:e6:93:
                    70:d7:66:23:34:2c:24:22:25:52:6e:53:b6:70:b0:
                    02:e9:2c:e3:c1:5b:30:a6:b2:79:07:5c:53:a3:07:
                    a3:7d:49:79:7c:a3:a1:54:bf:bd:72:cd:e2:e5:a6:
                    a5:8f:36:de:0a:7a:01:f0:ef:69:d7:6b:9f:9e:78:
                    79:b7:57:f8:64:68:8f:f5:de:b0:34:f7:e5:8c:c6:
                    31:a8:86:5a:b5:89:9b:f0:1f:70:51:7b:48:2b:3c:
                    4d:85:94:46:c4:93:f4:5d:c1:f1:5c:e1:1c:81:9b:
                    2a:f5:fb:26:c4:6b:45:67:4f:40:44:35:13:12:3c:
                    03:cc:87:53:e0:82:36:4e:f0:e4:32:c6:68:0c:68:
                    5e:12:a1:85:78:d7:de:7e:ee:b4:ed:00:cc:4c:74:
                    ca:3a:38:a9:b2:d4:c7:4b:f6:e5:d4:36:84:f2:66:
                    e6:e6:5a:fd:a4:f8:28:b7:02:90:4d:50:3c:9e:7c:
                    95:0a:f9:2b:9a:fd:2e:3d:f2:eb:04:fd:b8:c9:65:
                    f7:10:b0:6b:9a:61:1f:54:79:4e:e9:ac:f6:80:61:
                    bb:75:61:9e:d9:c6:ac:9f:9d:db:76:8d:5d:55:69:
                    41:14:cb:42:4e:df:6b:8d:77:2e:41:5d:26:04:15:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5B:76:4E:78:26:21:05:9D:7C:B2:C2:CC:53:8E:8E:83:69:5C:8A
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:66:2f:ec:6b:12:b7:97:73:40:ff:8e:ad:0f:d2:e1:84:
         fa:9a:e8:a8:c1:a3:14:cb:6f:53:9e:5b:d2:89:8e:78:72:d0:
         33:1d:d8:42:fc:6e:b3:4d:d2:9c:7f:b6:cb:75:d7:76:f9:1f:
         38:6c:45:86:2f:36:92:95:9b:2c:d1:3b:7e:c1:ee:4e:cd:79:
         92:4d:b5:8d:91:ca:27:6c:dc:f3:a1:2d:6a:2a:0c:3c:b4:d5:
         7e:bc:2c:e9:e5:8e:5e:22:f6:50:fe:5f:7b:5b:9a:56:43:a6:
         4c:d6:51:4b:17:ae:e5:ff:71:6d:84:4d:40:67:e1:9d:e0:c3:
         1e:a6:08:96:3a:0b:ff:0d:20:93:eb:da:fd:1a:e2:29:12:51:
         8f:6c:48:85:de:34:76:a3:02:24:fc:f6:1c:44:25:9e:66:98:
         57:92:69:8e:f9:de:89:ae:4d:f2:99:7b:71:9a:cc:05:87:b2:
         91:7f:d4:5d:27:4b:e3:14:83:fb:85:db:d8:b0:43:a7:0d:62:
         83:2f:1c:1a:fa:44:54:60:8d:cf:28:41:5c:56:2c:bd:c9:95:
         9d:fb:28:c6:fe:ad:88:48:61:50:32:e8:42:2e:32:9b:fe:0e:
         19:1d:d3:17:22:2b:0f:24:3a:3c:2a:99:be:3a:fa:9f:39:af:
         e4:39:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----