Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File:                     2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier:          EpK5AA4Ko6f1cORX9r4u1BvJmY+DHpAi6j+V3JBSong=
Subject key identifier:   FB:44:71:43:12:9D:E0:38:5F:8A:E9:3C:90:0F:C0:58:D0:B5:CF:B7
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer:       /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial:       01962FABA88632C4AE5F8DEB59436D723834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number:          059C
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: mpgI1w+Du5lpMSzJBGfDzJwOJ05J2fmLIOtzJdO4qpY=)
                          2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a8:86:32:c4:ae:5f:8d:eb:59:43:6d:72:38:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=fb447143129de0385f8ae93c900fc058d0b5cfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:f4:66:b8:37:eb:a5:a2:16:d2:69:8c:b3:
                    12:d0:6f:61:cd:7d:8e:d5:54:cd:3f:27:75:19:29:
                    be:a5:17:f9:05:48:a7:fd:43:bd:19:e3:ee:69:fc:
                    5f:d4:e8:3c:17:45:dd:2e:42:da:7d:3c:e2:5a:c6:
                    1d:00:c9:31:24:e4:6c:e6:6e:3f:70:6d:05:c8:1e:
                    1d:f2:61:d9:aa:a0:c5:22:a8:fe:28:1a:26:66:c7:
                    b6:37:db:7e:37:82:25:8b:3c:7f:93:30:88:b4:46:
                    6f:32:f6:4e:ed:7d:c0:e0:d3:e1:41:6e:52:ac:d6:
                    2e:04:1c:b6:ce:d7:ca:2d:60:f3:58:7e:16:6a:e4:
                    f1:cd:a4:97:74:c0:64:58:91:f7:b0:fe:69:a3:df:
                    56:d4:8a:bb:d1:ef:a2:20:00:bd:a1:b8:f9:88:4c:
                    91:12:a8:e5:96:5b:32:e3:48:15:28:e7:df:86:23:
                    3e:aa:77:59:4d:65:c1:73:b0:1a:bd:10:12:92:83:
                    fc:06:e1:f5:4b:e3:11:86:22:95:8e:0b:0d:07:bf:
                    32:8e:70:0f:53:f6:ed:29:4f:51:47:b4:96:77:45:
                    27:1e:80:86:68:6a:ec:ed:ee:37:cd:01:1a:70:3b:
                    cb:63:31:90:2b:3c:7a:da:9a:dc:47:5b:e0:65:6f:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:44:71:43:12:9D:E0:38:5F:8A:E9:3C:90:0F:C0:58:D0:B5:CF:B7
            X509v3 Authority Key Identifier:
                keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:6b:94:e0:0f:91:48:3d:97:9f:d1:53:c7:62:87:2c:3b:
         4d:d9:19:90:e1:39:74:e4:05:2a:f1:24:2b:9b:ed:41:02:cd:
         9c:3b:b0:9c:60:b8:85:c3:ab:c6:c9:fb:b8:a1:57:86:86:e4:
         c6:f5:ab:f6:59:b5:98:39:2c:5b:9e:20:7c:2f:52:b6:62:28:
         e2:4e:fb:33:2d:ad:fd:d5:45:31:ec:a2:7f:9c:c5:10:20:99:
         d2:f8:31:f0:e9:52:6b:4c:98:cb:74:dd:9f:29:c9:b4:24:8e:
         de:71:10:f5:3c:65:42:cb:2c:43:f0:db:7b:b0:da:3d:04:af:
         4b:99:6f:a9:7c:39:fa:03:66:83:f8:6d:79:a4:82:ca:67:2d:
         8a:ed:7f:3b:66:29:70:e2:8a:b0:87:38:c7:b7:d8:d6:e9:e4:
         d1:9e:c8:f7:9d:e7:b2:d3:82:f5:69:d2:8f:fa:d2:3c:62:17:
         d8:c7:d3:0c:3a:c6:b1:58:47:bb:6a:39:4b:b1:a8:6f:38:f8:
         3b:24:71:a9:ef:b1:0b:2c:9a:7f:f3:3c:57:ad:38:2c:1d:ec:
         6d:dc:b8:27:26:21:e1:5e:c2:b5:5f:67:ab:5e:dc:79:a2:0c:
         d9:f8:a7:80:ae:18:98:22:11:6b:f9:a7:3f:bb:fc:d2:59:b4:
         a2:98:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----