Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File:                     2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier:          7FG2aLuY+jx8gIG3puljBZFR4q5vvqnc/TrtcEoEhTI=
Subject key identifier:   28:D5:20:A1:58:DD:1A:C9:CE:B1:27:10:8B:2F:B4:96:05:7F:8F:93
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer:       /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial:       01962F3D4C9EECB437EFFEDFE54389C9130A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number:          11B1
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: Z0a6PbIWejn5zTyyDp3lGT6lgLAAYcuDkatAn2SdiRk=)
                          2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
                          3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4c:9e:ec:b4:37:ef:fe:df:e5:43:89:c9:13:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=28d520a158dd1ac9ceb127108b2fb496057f8f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:ae:cf:fc:a2:4f:7d:75:b5:03:15:83:b9:
                    ec:33:15:c5:d4:76:fc:52:68:e5:aa:e2:a7:c5:5c:
                    bd:15:c3:67:3a:59:f5:03:a5:b5:8c:f8:5b:1c:5e:
                    07:aa:64:ee:14:9d:51:13:0e:46:df:dd:d1:30:0c:
                    90:f2:94:00:5c:d9:97:f9:5f:66:cc:5a:7f:f4:69:
                    bc:45:42:c9:95:79:c4:7b:88:27:0e:97:9e:aa:a8:
                    71:f4:a4:05:9d:51:b4:28:5c:2a:e8:af:23:ee:84:
                    e7:ca:7f:2f:d9:1b:be:38:fe:83:22:61:85:f7:9e:
                    02:0b:ea:56:05:b9:14:d4:d7:bb:fb:01:b0:f3:20:
                    c5:0e:64:c6:54:a9:a3:12:11:25:ab:00:d9:5b:b0:
                    49:7f:cb:70:da:f7:78:03:6b:54:bd:31:a6:02:0a:
                    ba:35:93:51:e8:72:f0:be:bf:a5:32:32:3f:2d:b8:
                    f6:46:1d:1b:72:bd:67:4e:d5:76:d7:32:38:ec:51:
                    5d:4d:0c:ad:dc:62:7a:cd:48:a0:6c:a6:8e:74:43:
                    f7:df:ce:91:b2:01:50:ec:5e:fb:a1:66:72:3e:4e:
                    49:05:3c:99:3d:9f:7f:48:b7:5b:fd:8b:bc:83:7b:
                    67:45:a9:d3:93:41:0b:91:99:f5:3e:81:f7:ba:8c:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:20:A1:58:DD:1A:C9:CE:B1:27:10:8B:2F:B4:96:05:7F:8F:93
            X509v3 Authority Key Identifier:
                keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:f6:de:c2:15:68:ba:7d:54:27:6a:8f:76:03:8c:1d:eb:
         9a:57:d7:22:e5:de:13:d7:a8:48:b7:8f:24:f2:cb:55:42:df:
         4a:66:87:d6:10:cd:5f:e1:f2:f0:8d:6b:5b:71:ed:06:10:f0:
         8f:c6:f7:bd:bf:72:79:20:4e:16:ab:9b:1b:b7:62:b4:82:c4:
         66:58:03:ca:49:fe:6b:d6:d9:35:f5:81:40:b6:2b:13:5f:41:
         1b:5e:e7:13:5f:d9:d2:36:2b:ca:3b:f4:f9:b2:b7:7d:21:3f:
         37:f0:9a:50:c3:1a:23:8b:88:39:24:99:cd:40:d3:0d:17:06:
         84:ab:a1:3a:43:0d:b9:ad:38:2f:de:00:fa:17:03:fe:ca:7d:
         c2:aa:a4:64:87:f4:6e:cb:ff:de:bb:6a:97:27:09:c6:74:a6:
         9c:d3:5a:d9:f1:9b:75:4a:62:e0:02:ab:53:28:ab:fa:ff:38:
         d2:46:99:e7:75:7f:90:2c:45:5d:17:bf:68:7e:22:ea:14:db:
         4e:a5:26:67:6d:c2:e1:9b:ba:0b:11:a2:c8:0c:2a:a8:09:94:
         37:ae:01:75:16:4c:0b:4b:e8:10:73:b3:06:59:30:a8:f2:79:
         67:dd:ce:18:f5:61:86:18:66:02:78:00:92:b6:e0:7a:0f:81:
         ad:9f:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----