Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File:                     2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier:          /0eVJuyZeLAH/TdMAexjQc2ERWfLqhWwtIfltbM5fmo=
Subject key identifier:   49:F5:64:2B:EC:E9:06:35:8E:87:1B:7B:6E:31:39:9C:0D:CF:93:5D
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer:       /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial:       01962E2B2DB5FBCD60EA13389D071A1318F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number:          05F9
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: It5y7AzYNvZtpP5orXrEnJlj+eBlD4zF2HSMKhWeNvI=)
                          2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:b5:fb:cd:60:ea:13:38:9d:07:1a:13:18:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=49f5642bece906358e871b7b6e31399c0dcf935d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:3a:0e:ee:09:6a:8f:d4:d5:cb:a7:1c:bc:
                    40:09:1c:bc:51:d2:af:4f:30:6f:d2:8a:1f:a8:5d:
                    49:48:ca:99:1c:e4:7b:f8:15:2c:7d:d6:a6:1b:91:
                    7e:eb:f4:2c:aa:d7:dc:6e:20:f3:11:0b:e8:1d:c3:
                    47:3c:a6:62:86:a6:fc:e7:57:96:fa:64:74:e7:6f:
                    45:d0:be:88:bb:66:82:de:ab:d0:b2:97:b8:f2:54:
                    09:4d:be:a9:43:4d:c2:48:76:07:c5:99:0b:64:e4:
                    9b:74:d1:d5:8a:a3:c5:3d:79:d8:f2:df:36:23:cf:
                    81:f8:86:69:56:dd:45:d4:f5:c0:9f:d4:80:c1:f3:
                    7e:ba:33:aa:40:5d:57:76:9f:dd:4a:07:ad:86:42:
                    74:42:03:e1:89:d3:51:71:6e:d3:4b:97:eb:0b:6f:
                    aa:91:c5:7c:7f:7b:07:d1:f1:04:43:bc:3c:13:b3:
                    58:c2:c3:76:fa:6f:af:8a:3a:75:8b:18:ba:85:75:
                    10:f4:34:c4:91:13:48:35:4f:40:bb:e7:92:45:dc:
                    a3:5e:7d:20:6e:81:8a:94:5d:89:c5:3e:0a:36:89:
                    b5:80:f5:12:4b:af:06:06:99:3a:2d:b9:a4:21:a8:
                    70:a4:83:9a:ee:2b:bc:79:c6:83:12:98:9b:51:26:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:64:2B:EC:E9:06:35:8E:87:1B:7B:6E:31:39:9C:0D:CF:93:5D
            X509v3 Authority Key Identifier:
                keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:82:e0:0f:32:02:47:6f:e2:55:1a:60:df:36:5c:23:79:e4:
         05:bf:3f:76:b4:6a:a9:99:5f:25:38:c9:dd:6c:54:b1:54:a7:
         5c:e6:d1:4e:9e:cf:43:8b:a3:d4:67:87:67:ec:03:ab:10:ea:
         29:d5:5e:24:a1:d8:31:35:9c:8c:f8:fd:f7:54:57:7c:f6:2c:
         d2:d4:a9:73:b3:33:aa:17:47:27:dd:fb:f5:43:b8:32:ab:24:
         77:2f:86:95:d2:12:52:5d:4e:e2:57:c7:ef:dd:e4:82:0c:5f:
         c4:b9:89:6c:a6:e0:a7:e9:da:37:82:31:a4:24:1e:77:2e:b6:
         25:88:17:68:f2:40:e5:15:da:22:7f:6b:6f:9d:84:9c:49:33:
         65:ee:b1:8d:ab:58:59:3e:8d:e8:e8:65:e5:c5:c3:86:29:80:
         e9:04:62:14:c1:99:23:e8:b1:73:1e:a9:0a:a8:9d:d0:74:26:
         36:e9:cf:d9:f8:a9:e8:fc:da:5f:d2:d1:df:82:f8:e4:63:45:
         3c:e0:61:67:4b:68:a6:a1:c7:42:e7:4b:31:76:6b:5e:ea:dd:
         fc:30:52:47:5f:74:a6:c7:7a:ef:53:86:b4:c8:4a:42:aa:8c:
         01:8b:ab:29:66:6a:8f:a6:d1:20:15:87:59:71:26:e3:9f:ea:
         c6:ee:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----