Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
File:                     MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json)
Hash identifier:          /UKAiiQb/F+e8Cm2WvCA+aNwxE57jjPg919xjr5Dy3A=
Subject key identifier:   D2:A4:10:BB:51:8D:C0:9F:A0:D2:44:82:22:C6:C3:0C:2F:96:FF:EC
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Certificate issuer:       /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial:       01962ECFDE9D5FBC2DC572549AA906026FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=)
                          2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=)
                          3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: ub8y5RXFlMw+V27AOgktp9MjAVYRYueOTUNMf8jMHwc=)
                          4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=)
                          5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=)
                          6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=)
                          7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=)
                          8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=)
                          9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=)
                          10: iF74lchyYH7faRXUXMHNpR_TrWc.roa (hash: 7HXWZbOcLR6YZsq3MaREkcOeGbzmuGmdyIo3eOGAB/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:9d:5f:bc:2d:c5:72:54:9a:a9:06:02:6f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=d2a410bb518dc09fa0d2448222c6c30c2f96ffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:ef:5f:d2:fc:b2:32:0f:c1:ad:07:42:de:
                    85:89:17:8a:8a:13:ff:ae:96:6f:c4:f2:b9:89:e2:
                    10:15:d6:de:6d:07:29:5b:b5:9e:ea:9b:cc:31:b5:
                    c2:e3:32:82:e6:ac:71:fc:51:54:be:63:6e:02:d4:
                    3f:59:9f:26:75:f0:45:4f:d7:d4:98:c5:8f:82:fc:
                    33:39:78:4d:bb:02:54:16:a1:26:86:27:7f:c5:7f:
                    a0:46:ee:ff:7e:2f:1c:f5:81:af:72:1c:d7:11:6b:
                    e0:bc:47:05:bb:e5:81:13:e0:4c:63:cc:80:8c:93:
                    7c:99:12:69:4f:44:39:8a:30:80:8b:55:6a:8d:2f:
                    58:99:f0:f9:9b:e0:aa:31:05:08:8e:53:29:ab:ba:
                    aa:6e:44:04:b7:06:c9:9c:dc:aa:25:2a:e0:39:bb:
                    2e:30:e7:35:d9:03:d1:78:29:a4:59:4e:23:3f:ce:
                    23:8b:df:6f:95:78:40:dd:0b:df:11:74:34:39:95:
                    c8:68:2d:5b:12:d8:07:9c:ed:62:bd:29:7a:4e:0f:
                    f9:c1:96:4b:89:78:89:e4:db:1c:36:2f:82:35:8d:
                    59:b4:c7:83:33:f2:09:12:57:ae:5b:70:a8:1c:a5:
                    85:55:e2:11:56:10:dc:00:45:c6:37:f4:a6:70:c0:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:10:BB:51:8D:C0:9F:A0:D2:44:82:22:C6:C3:0C:2F:96:FF:EC
            X509v3 Authority Key Identifier:
                keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:f4:a2:fd:17:0a:e0:bb:5b:ef:93:59:e0:ae:be:22:fa:
         12:ff:f6:c9:35:b3:6f:11:a1:e9:b8:d9:6a:9f:89:8f:af:6b:
         f7:1a:88:1e:99:ff:0d:e0:b3:eb:bf:94:d6:3d:57:7f:f6:d4:
         8a:fa:b8:3f:b5:91:75:5e:08:41:cd:6f:c8:66:7c:ec:8b:41:
         27:2f:1a:43:9a:f2:3b:a2:b0:1d:80:7f:14:6a:a2:5e:fb:36:
         18:c1:d0:da:2e:eb:04:41:4f:24:77:89:62:74:f2:ec:5d:37:
         06:10:fd:2d:44:97:ea:b0:8c:80:4a:22:d2:88:eb:f5:6b:db:
         51:5d:58:71:0f:50:c0:11:46:5e:7b:f1:37:e9:6a:0b:24:a0:
         e6:80:3c:66:6f:71:58:a9:b8:58:52:44:70:e7:56:ea:38:fe:
         e9:89:15:15:c4:63:3a:52:9c:69:f8:ba:28:55:14:ae:94:3c:
         d0:6e:0a:19:a7:8c:d3:03:22:8f:62:97:37:e7:80:da:ef:90:
         70:e4:18:1d:b0:3f:44:c2:16:3d:08:fc:44:e4:5d:69:c2:6a:
         cd:9b:b7:f5:f4:dd:63:d4:10:42:27:a9:ce:61:a8:00:87:1f:
         36:70:52:90:42:e3:47:02:14:0c:38:a0:aa:95:0d:0b:95:dd:
         54:0f:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----