Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File:                     2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier:          dDlNKjHTn6DFHxNhxaEyGEyMt1odMWuFDjMYeoK4d/E=
Subject key identifier:   D5:DB:06:EB:35:C6:F7:69:86:4C:51:4F:58:07:7F:29:12:AC:05:78
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer:       /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial:       01962E2AF26A438B5911F01CCB46AF1F3CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number:          0448
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 2uqD5zGZ2YzBCLr29oUkHyxLaOg.roa (hash: Rlx38ri/UsUpqTWWjiQxvpWbwT4B1nvpj+Qj3oYHyJI=)
                          2: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: 6eMwxG/I0n/B5GZX/ITnQiIPUkPnHfoyOTDSpclDvLM=)
                          3: 8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa (hash: oJIUnSFr4nxPfIklC3jgxHnAbm0kguG5fFIKoWMYD0A=)
                          4: VjqdrxGTRj_HInStkdep02mDb9Q.roa (hash: FNpVRLOkWoRmhAFzENCKzeCXF5FLB71OdgzjA3hm4XA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:6a:43:8b:59:11:f0:1c:cb:46:af:1f:3c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=d5db06eb35c6f769864c514f58077f2912ac0578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:aa:bb:08:f0:a2:24:4d:af:e4:ea:43:d4:
                    17:56:10:38:48:ba:dd:b9:ab:c2:72:02:b0:83:24:
                    e8:87:a5:ab:a4:fe:43:95:c7:8e:7f:fd:a6:da:aa:
                    39:8f:30:58:43:2b:ed:a7:5e:22:14:1f:9c:df:63:
                    35:4b:73:42:74:c2:76:c0:a1:59:5d:f3:b0:a2:c6:
                    87:3d:0d:06:d6:76:47:a8:cf:50:26:61:8f:5a:6f:
                    34:f9:c9:d7:8c:77:b2:67:5b:21:71:3a:c1:50:22:
                    b5:f6:34:8f:71:b8:14:84:a0:a3:00:20:ee:83:cd:
                    d1:01:a7:8b:2c:f2:3c:86:e2:b8:be:be:51:d7:64:
                    c6:77:41:d0:41:6c:32:d8:de:39:01:e9:8c:ba:56:
                    52:88:5a:d4:f7:cf:b9:01:50:49:5a:98:3a:de:08:
                    26:ac:e6:e0:28:b5:24:f1:e6:61:62:37:38:a4:71:
                    5f:1c:08:e2:dd:1d:6c:c2:56:37:df:c0:15:66:22:
                    3e:93:34:3c:9b:dd:37:f9:68:6e:dd:04:e8:53:03:
                    cd:52:23:98:63:7e:17:3c:b9:fd:0c:04:d9:4f:dc:
                    7e:2c:0b:a4:70:40:15:96:54:57:21:57:03:bc:29:
                    c8:93:d0:67:5f:c3:d9:7a:8b:18:37:84:eb:c9:3f:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:06:EB:35:C6:F7:69:86:4C:51:4F:58:07:7F:29:12:AC:05:78
            X509v3 Authority Key Identifier:
                keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:44:1d:a5:3d:d4:75:8d:8f:af:d9:48:c8:17:75:d0:b9:
         9a:f2:6a:42:03:f8:7f:76:4e:d3:17:1c:52:a5:08:7c:1d:14:
         c7:a2:34:74:cc:cb:50:4f:bf:96:d9:a2:ba:5b:18:49:60:15:
         7d:2d:e8:8c:21:4a:76:b7:d7:f2:df:dc:3c:3b:1d:09:e3:54:
         07:48:85:36:ee:49:03:b8:30:06:96:65:11:6f:7b:d6:72:89:
         da:f5:ea:f8:b3:ee:36:07:e5:b5:eb:fb:04:68:9f:d3:f5:f6:
         fb:c9:ae:e4:33:15:48:1e:98:e0:b3:a6:58:54:62:8b:27:4f:
         a4:66:23:c8:5c:e1:b8:c0:ef:17:1e:51:95:70:5f:c3:e3:22:
         03:44:bf:5e:bc:33:f4:8f:fa:f3:dd:fd:c8:63:6a:db:09:ae:
         fd:5d:72:bd:c8:ef:b9:15:41:72:8f:08:7d:da:81:64:44:4a:
         40:fc:93:07:d2:a8:18:a5:72:54:80:11:38:45:66:36:fb:f0:
         5a:69:26:b8:f5:7c:1e:1c:8c:94:9b:48:4c:3b:b1:c7:1b:69:
         cb:a0:9d:8f:46:43:e0:52:fe:20:23:5a:4c:53:14:c0:fc:93:
         db:2d:ab:c7:a0:51:d5:92:a9:1b:64:21:1f:7e:80:45:97:a3:
         f7:90:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----