Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
File:                     2h2OAPPwRejexhV_FCYkG18SbQ0.mft (raw, json)
Hash identifier:          Sr/xnRts0iGDbitqw60PFkTnh2mdTQVlIJmNAGPHXDw=
Subject key identifier:   D6:E3:31:7E:A1:3A:A2:DF:5E:8B:B4:27:03:DD:AE:88:47:5A:70:9C
Authority key identifier: DA:1D:8E:00:F3:F0:45:E8:DE:C6:15:7F:14:26:24:1B:5F:12:6D:0D
Certificate issuer:       /CN=da1d8e00f3f045e8dec6157f1426241b5f126d0d
Certificate serial:       01962F74E456F5EB2062756A49129C1CC308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2h2OAPPwRejexhV_FCYkG18SbQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 2h2OAPPwRejexhV_FCYkG18SbQ0.crl (hash: 1fJovHVUYIW3wcuY0IS+c4VKfrmchEa0Yw1w82QlpRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e4:56:f5:eb:20:62:75:6a:49:12:9c:1c:c3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d8e00f3f045e8dec6157f1426241b5f126d0d
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=d6e3317ea13aa2df5e8bb42703ddae88475a709c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:10:53:d0:10:00:b3:9e:82:ac:41:5c:61:
                    80:cf:8c:02:e7:96:d6:9c:2c:9f:6c:e0:70:8a:f2:
                    04:f9:8d:05:58:74:4d:df:9b:f6:15:02:bf:61:0f:
                    1a:bd:f3:31:cc:60:2f:0f:5c:24:c4:5b:fa:7a:11:
                    55:a8:93:db:0b:8b:23:17:8c:b6:8e:ae:96:dc:7e:
                    b7:f1:dd:91:a3:75:65:0b:e4:b3:ec:36:29:9c:d2:
                    df:69:e0:27:40:01:fc:49:b5:39:0e:60:4d:d1:77:
                    a8:cb:8a:51:2e:c6:19:ee:fe:d4:c6:bb:bd:0a:fb:
                    f8:c1:be:6a:c6:fc:e8:58:27:b0:6e:10:95:51:54:
                    51:0e:94:81:d1:ae:22:02:54:2a:44:6b:6c:b9:9d:
                    b9:d4:c2:a3:7f:c2:df:55:5b:ca:93:9f:2f:f7:bd:
                    79:f1:a4:de:b3:db:28:12:2a:7b:83:aa:57:dd:d2:
                    8d:52:a1:6d:58:56:b1:19:c7:b9:e1:81:f8:96:d2:
                    40:dd:e2:8f:f6:d2:e6:41:5a:82:af:8e:f8:89:7f:
                    95:e6:bf:b3:f5:18:d1:87:03:64:5f:9a:c9:73:89:
                    e0:ff:4b:14:8d:13:ed:89:03:5e:b6:72:26:65:88:
                    8d:6b:f3:fe:c7:e0:76:9e:b7:3f:ab:e5:39:e4:28:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:31:7E:A1:3A:A2:DF:5E:8B:B4:27:03:DD:AE:88:47:5A:70:9C
            X509v3 Authority Key Identifier:
                keyid:DA:1D:8E:00:F3:F0:45:E8:DE:C6:15:7F:14:26:24:1B:5F:12:6D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h2OAPPwRejexhV_FCYkG18SbQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:67:5d:3f:10:50:6f:09:78:d3:80:f8:77:79:f8:33:1d:98:
         b8:5c:51:a4:44:6f:77:1e:cf:37:47:2e:5a:9c:0e:d6:da:d2:
         81:18:8c:3a:c2:4a:19:40:bd:4f:54:1f:14:07:98:1d:7a:63:
         d4:f9:d6:20:43:25:b1:87:d9:10:ae:69:db:99:a9:5c:7b:ce:
         7e:27:2d:34:f1:f2:03:99:d0:4a:01:fc:5d:bd:a2:f7:9b:3e:
         1b:cc:d3:2a:fc:c2:ef:41:dc:4a:e5:c6:0d:5c:ed:b1:43:27:
         92:2e:e0:3b:0d:28:71:28:37:6f:f6:91:12:9a:34:c0:f1:6c:
         8e:f0:1b:75:32:12:d3:fe:30:11:e5:14:b2:cb:52:d4:e9:83:
         9a:8a:f0:a6:c6:7d:0f:09:56:5d:f8:c9:79:84:f4:e4:64:30:
         70:a5:65:5e:c5:e7:21:bf:23:bd:b5:6e:a8:89:e3:16:ca:dd:
         8a:70:93:6c:21:69:d6:c4:2f:c4:7c:d4:bc:67:08:95:e1:3f:
         d4:b7:5e:96:20:4e:29:20:92:a0:5b:ed:df:b9:68:e1:c5:58:
         37:8a:79:70:af:8d:9f:bf:43:35:eb:63:e9:5c:fe:86:24:da:
         30:fa:f8:ca:05:a0:fb:d4:a8:59:0a:a4:dd:6a:f1:d2:41:d4:
         0a:e4:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----