Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          9rPLYi0Y7mUjvGEwslWDMkCugeBXwIsPo5S6uPT60UU=
Subject key identifier:   0F:2F:5D:A6:67:EC:65:2E:57:6B:00:E9:F4:58:E2:CC:0D:EA:47:FE
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       01962DF408CE2A4C59B5AE7F3141AB3BEC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: 76mD5EWC1PcDLf0PR6EtVNeqsRCc7yAz8oExg+kLMtA=)
                          2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:ce:2a:4c:59:b5:ae:7f:31:41:ab:3b:ec:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=0f2f5da667ec652e576b00e9f458e2cc0dea47fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:f0:98:f9:fc:d3:79:29:bf:6c:10:05:47:
                    14:ee:92:b8:62:b7:4d:97:98:e0:a9:3e:fd:d0:49:
                    c7:1a:33:66:af:33:05:b3:06:70:30:ca:38:0b:08:
                    51:05:7a:71:1d:eb:8f:39:01:e4:bc:04:73:e2:94:
                    65:30:b6:23:e8:45:60:8c:32:3e:98:6d:4e:76:30:
                    05:5b:e3:7f:95:a8:54:30:9e:65:db:c2:fa:3f:76:
                    da:86:dc:71:0e:6f:00:58:b4:da:99:61:9c:2a:0e:
                    5c:96:4b:a3:a9:71:3c:bf:31:95:1d:5f:70:5a:2b:
                    f6:a7:ba:35:1b:9f:f9:91:68:d3:36:84:97:06:33:
                    90:3e:ba:90:5c:45:ba:87:a6:13:fe:dc:77:44:32:
                    47:3d:b9:58:25:64:30:3f:00:5e:2a:18:27:0d:e2:
                    ad:f3:66:07:be:b3:06:06:52:db:5c:90:f0:07:d8:
                    f6:87:84:11:7b:92:a1:e4:b7:df:7d:6c:42:41:ed:
                    9a:7f:dc:0c:73:66:98:43:42:a4:a4:9c:91:39:a1:
                    ed:a3:8d:77:ab:0e:1a:7e:97:80:fa:82:31:c7:7a:
                    46:25:5a:c6:37:3a:1a:85:bf:d8:a2:e5:b8:bc:95:
                    8c:85:1d:51:0f:b1:70:66:9a:96:71:19:40:70:b3:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2F:5D:A6:67:EC:65:2E:57:6B:00:E9:F4:58:E2:CC:0D:EA:47:FE
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:4e:4e:47:d3:34:cb:06:11:69:19:fe:af:f7:ad:8c:19:
         77:ea:93:29:ee:37:d8:93:4d:c7:bf:3b:2a:81:5c:21:74:1c:
         bd:23:a0:57:c2:4b:1e:2f:fa:75:66:f5:03:ec:14:e1:7a:e5:
         2e:f5:03:33:85:6d:94:c9:da:78:4c:fe:8e:59:c2:3f:8f:60:
         3d:3e:a1:f4:ed:7e:3f:2c:55:0c:0c:96:e2:66:81:4e:31:80:
         85:5b:c4:59:bc:6e:26:ed:9c:a8:70:42:cf:d6:44:72:9d:78:
         92:b4:66:f2:2a:be:db:ca:38:70:2f:8a:90:b0:41:6d:4c:04:
         32:ff:45:f2:4c:58:e5:81:99:38:8d:42:f1:1a:ca:82:a2:03:
         1f:43:dd:c7:dd:68:c0:60:77:2f:2f:97:8b:98:89:17:69:78:
         08:16:14:11:bb:ff:4c:14:25:3a:5b:15:bf:0c:c5:01:cb:d2:
         77:1c:45:85:d3:db:76:e7:1c:9e:0e:6b:6f:b0:ea:75:5a:7c:
         cd:6d:1b:08:67:2a:4b:b1:07:4e:e0:2f:af:6f:68:7e:94:19:
         54:1e:f2:b0:23:17:5c:07:62:3f:92:3c:d5:d0:92:fe:aa:1f:
         49:2c:76:09:86:45:13:ba:5c:7d:02:74:8a:42:44:de:02:fd:
         cb:f5:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----