Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File:                     2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier:          mftbFBioY5cbMEzcO8G9url8vPxYPpYHhS/Af08gnR0=
Subject key identifier:   58:06:D0:99:1C:DC:83:56:EA:F8:D4:AC:56:3B:FD:DC:2E:4F:62:FF
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer:       /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial:       01962F74B72CF9933327EF88A0198EDA5512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number:          F5
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: p2DoV8zi2Yx5HuwrUL90undBPL6gXHiXGGXZ3M+p7+E=)
                          2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:2c:f9:93:33:27:ef:88:a0:19:8e:da:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=5806d0991cdc8356eaf8d4ac563bfddc2e4f62ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:26:03:d5:8e:a0:19:e2:3e:eb:25:2b:25:
                    4b:1c:87:9c:0c:6f:cb:c2:16:11:27:bc:f4:69:57:
                    9c:85:ba:60:0c:f3:a1:d6:e2:98:7f:ea:8c:67:0d:
                    7b:a1:06:22:8b:41:10:5c:7d:2e:e7:c2:83:b1:4d:
                    a9:75:e8:17:9a:4d:a6:75:11:b3:bb:35:2b:54:07:
                    0d:43:1d:fa:6c:62:31:90:4b:9f:10:29:79:50:53:
                    74:8d:2b:fb:83:3e:81:46:a5:64:01:3f:ff:53:72:
                    58:c5:c5:24:57:fe:f8:f1:12:8f:2d:ab:f1:42:9b:
                    45:8f:a9:bf:e0:27:a2:8a:d0:ce:f6:09:58:08:ac:
                    34:1b:8b:18:dc:3e:a0:79:d8:f7:98:48:fb:dd:51:
                    21:f0:38:f6:bc:fb:22:ec:ce:7c:1a:35:86:42:11:
                    cf:a6:93:c0:c0:c9:0d:3e:76:ca:42:8d:68:3a:e0:
                    d9:cd:d2:ea:85:e7:7e:e9:e3:5c:8f:21:54:40:da:
                    91:ca:76:e0:95:59:a8:fc:31:52:c0:cc:a1:4b:97:
                    28:fc:1f:5e:07:79:ce:2f:dc:2d:9b:c4:6c:b1:f0:
                    a5:45:02:e7:e4:1a:9f:5c:96:da:3f:62:a0:03:5e:
                    c9:df:ed:6e:9c:8d:6d:e2:13:44:12:c0:75:40:d9:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:06:D0:99:1C:DC:83:56:EA:F8:D4:AC:56:3B:FD:DC:2E:4F:62:FF
            X509v3 Authority Key Identifier:
                keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:b8:a3:12:f2:62:5d:f0:af:a3:4c:e9:48:a3:50:f1:16:
         90:97:f6:a2:fd:6c:cf:2b:62:8d:ff:62:d1:89:7a:b9:69:bc:
         2e:a7:9f:36:2c:f0:e8:68:55:90:ae:80:70:8e:0c:43:0f:57:
         2a:90:d5:70:9f:18:82:fc:e9:b0:02:74:7d:92:69:03:51:d5:
         de:0b:54:12:01:80:dd:d6:21:75:22:e2:81:92:6e:97:18:17:
         5e:35:96:06:62:b4:97:95:9e:17:ab:a9:41:65:e6:e7:fa:ee:
         1a:8e:3e:f3:eb:04:f9:d4:d1:09:dc:14:41:e2:9f:af:4f:e0:
         cd:ed:f9:bc:89:29:73:5a:b5:b7:34:4c:a5:04:ee:55:c1:97:
         ae:05:dd:7b:8a:45:9c:de:5c:44:ab:80:4a:16:49:b4:29:17:
         e5:66:bc:fd:af:d5:4d:61:e0:a5:49:58:02:d6:1e:b7:6c:91:
         45:f7:9b:ba:ba:1d:6d:94:7f:41:87:b6:a9:d1:c6:35:0a:ef:
         4a:e2:f1:85:9d:5c:ea:cf:29:f4:78:e6:8b:d6:f7:81:77:2e:
         08:71:d3:45:ce:1e:9e:9a:20:10:fb:97:f9:3d:d6:ff:6a:04:
         20:f3:ae:c3:71:a4:e2:b2:19:2e:58:47:32:a3:f3:a4:47:c3:
         a3:da:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----