Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
File:                     2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft (raw, json)
Hash identifier:          H1OM6G3s5O8RNL0zeqIhDh/JnYhVIR2HFI3eic2fGHU=
Subject key identifier:   92:E4:BF:71:B3:3C:A0:2C:50:EE:6B:C0:B5:88:D0:73:E3:2D:4E:80
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       019547B65933280F4870BD839E7A7D8F65D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
Manifest number:          1587
Signing time:             Thu 27 Feb 2025 14:01:27 +0000
Manifest this update:     Thu 27 Feb 2025 14:01:27 +0000
Manifest next update:     Fri 28 Feb 2025 14:01:27 +0000
Files and hashes:         1: 2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl (hash: yw3/CjLrYNskAQlOKclOr6Q0QOJwXo/0EjLzTxo3wzQ=)
                          2: LPO2RLj2ob6ZNsnyBM2Duk0rusM.roa (hash: 7OUck+DqZbn5/4OQykMbPpzbTgktym4FHX85WJUsgaM=)
                          3: eNfMMbTKhJgPlESmyPzPzPYwFZA.roa (hash: UXIHaGSQ/kjt1RaporqCVYXn/ZHWBrD+HoH/9qh7gYc=)
                          4: gxY-48iiII5-cOf4lBFOjwTnlLs.roa (hash: bc6IPVn/vT3iBPg/5o0y+s1w7KL5yHYBP3k6d7Mo8E8=)
                          5: iG2i_jlTj6EmyKbeZ0URpQYEig0.roa (hash: R62Eql4mNIawFQDLnzPoXk5FrIuzQiGA+urNRhxEWsY=)
                          6: psBlkIW6dtVWZi88WXnK8h2TOIs.roa (hash: m2D/JyGNFIe1c3lHf2YlnIPoGAFENvhQeedwzh/Q5lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b6:59:33:28:0f:48:70:bd:83:9e:7a:7d:8f:65:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Feb 27 14:01:27 2025 GMT
            Not After : Feb 28 14:01:27 2025 GMT
        Subject: CN=92e4bf71b33ca02c50ee6bc0b588d073e32d4e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:6b:27:92:a6:90:a7:eb:33:5b:4b:93:15:
                    17:39:e1:f6:c7:35:15:a1:2d:ac:53:59:68:eb:86:
                    ae:a5:0b:9f:ff:47:a4:cc:cf:13:fd:4e:7f:93:a5:
                    b1:28:44:85:64:81:2a:94:c6:49:61:b3:da:2c:22:
                    1a:a7:e2:31:0e:f3:79:62:02:31:c9:91:74:a5:80:
                    f9:54:56:47:6f:30:7b:7b:65:50:69:a3:75:60:58:
                    23:0c:a9:22:60:b0:21:65:23:17:48:04:15:20:45:
                    fe:51:ea:01:c9:2e:ff:22:cb:d7:73:ba:9d:ca:93:
                    35:12:ad:08:82:bd:5e:0c:b7:3d:2b:39:a1:46:1f:
                    c4:5b:75:40:96:d8:97:9a:aa:b6:5f:de:e4:dd:cd:
                    4a:af:63:f9:cb:9d:e1:00:0e:64:ae:d2:93:4c:45:
                    99:7d:7b:73:08:25:44:e8:22:21:f1:9e:83:4c:71:
                    a0:1c:bd:9c:ce:b9:ab:2b:61:42:96:c8:85:b7:9c:
                    46:fc:e5:8c:4b:a9:29:85:d8:56:a7:67:cf:1d:ce:
                    90:d3:ca:7b:1a:b2:60:14:4e:b6:25:19:12:06:9d:
                    b8:5d:ee:98:ae:38:d6:c5:de:c1:3b:b3:51:30:ad:
                    fd:23:9e:de:76:af:99:23:83:60:fa:fb:52:4a:2f:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E4:BF:71:B3:3C:A0:2C:50:EE:6B:C0:B5:88:D0:73:E3:2D:4E:80
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:59:d4:d3:ba:ec:ef:53:09:6d:88:a8:24:17:f4:e8:b1:
         b4:ca:51:cd:99:8e:5f:55:3f:ff:4b:18:db:51:95:4d:86:ab:
         c7:98:1f:20:14:46:d3:d1:6b:c4:c3:0b:8a:3c:ed:af:77:75:
         66:ec:75:ed:6b:4e:d4:bb:d2:f5:a2:79:bb:a0:ce:5f:21:c8:
         1e:9d:cc:fc:8f:7e:d8:07:e9:58:8c:8e:72:5c:4c:87:49:f8:
         24:f5:f8:e2:1c:44:b9:d2:49:3e:4a:30:40:06:22:48:da:cb:
         28:ad:71:36:44:3b:36:8e:4f:90:a4:d5:08:27:4c:3f:f9:81:
         b5:15:bf:c5:c7:09:ba:f9:34:69:5b:6f:51:a8:c5:d0:03:a6:
         f9:1e:86:9c:c8:6b:7f:aa:bb:29:6b:e8:b6:32:4e:6f:a6:97:
         a4:ad:e1:f1:08:88:c5:96:2d:1c:cc:37:0c:e7:dc:43:67:91:
         06:5c:8d:99:0d:d6:31:b2:2f:26:67:7b:cc:fb:43:3b:18:4a:
         02:a0:97:6a:2c:26:19:01:9b:86:b2:85:34:48:56:04:81:05:
         f9:f4:99:a6:9b:62:94:1f:50:20:cc:c4:39:4f:55:91:dc:b6:
         5b:a0:b6:cc:c4:f5:79:bd:9d:21:73:c0:bb:54:ad:f8:76:ad:
         3e:2a:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----