Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File:                     2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier:          0DaNbPN+XD5whoTuWXr2gceBCyHEQDZCrOwOmQb6zRM=
Subject key identifier:   36:58:AD:0C:BD:EC:B9:F6:31:B2:31:AF:33:0C:78:4E:A1:64:DA:CA
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer:       /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial:       01962E98F65FFDD5A212E8FFBA1F8D8B9235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number:          0D67
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: AXlX58Quid+47nOUMNJ3ECojsWfvQco1Yd0ZbtfO6lQ=)
                          2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:5f:fd:d5:a2:12:e8:ff:ba:1f:8d:8b:92:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=3658ad0cbdecb9f631b231af330c784ea164daca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:dc:ef:b8:85:c6:6f:d8:c8:a8:8f:93:28:
                    6a:d3:59:3d:57:ab:83:5d:a0:e0:5d:e5:ea:a4:ce:
                    7f:e1:01:15:45:55:be:b8:c0:47:57:23:29:02:f4:
                    93:e1:21:6c:9a:d8:cc:37:94:4e:38:2a:d3:c5:66:
                    74:b0:ee:cd:b4:21:58:da:5c:86:72:33:93:9e:de:
                    f3:7b:87:da:39:00:06:9f:f6:38:69:f0:05:11:e6:
                    8a:e0:e1:87:a3:5c:04:20:f2:04:68:c2:71:8e:35:
                    bf:57:6a:81:4d:e8:0d:63:25:54:8a:82:65:c3:2c:
                    e5:0b:a9:45:23:d5:98:2f:12:02:09:80:ee:a1:5e:
                    c2:a9:30:96:19:70:87:45:a4:ba:14:bd:79:07:0c:
                    61:66:15:99:8e:03:a4:cf:95:57:0d:be:12:bb:bb:
                    19:a3:d7:d7:f0:21:7f:44:02:d2:f9:c7:c3:e0:55:
                    ba:16:55:f9:be:c6:7c:b3:17:66:2d:e6:c6:84:47:
                    f3:6e:b2:0f:31:ac:bc:d5:15:e8:47:e1:78:40:6e:
                    b9:d2:44:73:df:bf:71:b8:9e:36:43:3f:24:57:5d:
                    c6:7b:83:9f:bd:ac:2d:84:b8:ee:ff:52:78:e7:5f:
                    5f:0d:ee:2a:19:f2:b8:b7:40:90:41:4f:8d:8e:d0:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:AD:0C:BD:EC:B9:F6:31:B2:31:AF:33:0C:78:4E:A1:64:DA:CA
            X509v3 Authority Key Identifier:
                keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6f:6b:ce:cf:b8:d7:d2:a3:cb:01:d5:34:7f:b4:b2:2d:c9:
         9c:3f:2f:f1:b4:5e:52:b4:14:4d:e1:09:e6:92:3d:15:b1:53:
         11:46:1c:d5:46:3a:ee:17:fa:74:0e:83:a8:60:fe:6e:ff:14:
         c3:25:51:06:f1:eb:9d:0c:2a:63:2a:6a:af:5b:18:e8:e0:bb:
         07:04:f0:ea:f1:15:d3:44:e1:6d:f3:87:a8:a1:00:a6:7e:4d:
         04:82:b7:c4:e4:d4:cf:02:cd:10:15:1a:4d:24:a6:6d:dd:00:
         95:6e:a1:26:15:b3:34:d5:e0:dc:16:da:ee:78:12:d7:95:61:
         3b:cb:37:a3:c0:69:db:ed:ec:c7:6f:f5:bd:da:45:df:e8:ff:
         df:9c:e2:2f:f4:e5:b5:93:a8:1e:83:81:bc:7d:b6:0b:9a:17:
         db:b9:c2:17:c7:4e:24:27:15:3d:7d:d6:ce:30:5d:6d:2e:fa:
         6d:4b:2f:ca:53:bf:7a:dc:5b:8b:76:fe:c3:d6:ec:d5:26:17:
         dc:df:ab:95:10:20:d9:3b:43:9a:83:b5:79:5a:f3:48:51:27:
         42:87:a6:76:10:52:09:8b:89:fa:4f:0a:17:9a:60:64:57:a7:
         52:b6:04:84:e3:1a:de:1c:19:42:bc:c1:a1:62:de:de:eb:83:
         97:8d:90:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPZf/dWiEuj/uh+Ni5I1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjUwNDEzMTAwMTM4WhcNMjUwNDE0MTAwMTM4WjAzMTEwLwYDVQQD
EygzNjU4YWQwY2JkZWNiOWY2MzFiMjMxYWYzMzBjNzg0ZWExNjRkYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy97c77iFxm/YyKiPkyhq01k9V6uD
XaDgXeXqpM5/4QEVRVW+uMBHVyMpAvST4SFsmtjMN5ROOCrTxWZ0sO7NtCFY2lyG
cjOTnt7ze4faOQAGn/Y4afAFEeaK4OGHo1wEIPIEaMJxjjW/V2qBTegNYyVUioJl
wyzlC6lFI9WYLxICCYDuoV7CqTCWGXCHRaS6FL15BwxhZhWZjgOkz5VXDb4Su7sZ
o9fX8CF/RALS+cfD4FW6FlX5vsZ8sxdmLebGhEfzbrIPMay81RXoR+F4QG650kRz
379xuJ42Qz8kV13Ge4OfvawthLju/1J4519fDe4qGfK4t0CQQU+NjtCeUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZYrQy97Ln2MbIxrzMMeE6hZNrKMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuW9rzs+4
19KjywHVNH+0si3JnD8v8bReUrQUTeEJ5pI9FbFTEUYc1UY67hf6dA6DqGD+bv8U
wyVRBvHrnQwqYypqr1sY6OC7BwTw6vEV00ThbfOHqKEApn5NBIK3xOTUzwLNEBUa
TSSmbd0AlW6hJhWzNNXg3Bba7ngS15VhO8s3o8Bp2+3sx2/1vdpF3+j/35ziL/Tl
tZOoHoOBvH22C5oX27nCF8dOJCcVPX3WzjBdbS76bUsvylO/etxbi3b+w9bs1SYX
3N+rlRAg2TtDmoO1eVrzSFEnQoemdhBSCYuJ+k8KF5pgZFenUrYEhOMa3hwZQrzB
oWLe3uuDl42QJA==
-----END CERTIFICATE-----