Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File:                     2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier:          mTsnZRSVfCu1xLpvhce41V7rfaJWgzDFtRm7OteY2RM=
Subject key identifier:   B6:FD:88:F5:0C:96:8E:A9:AA:77:3E:CD:7F:62:2D:E7:5B:EB:01:11
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer:       /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial:       01962F74DDB238525A44186AFD240F554BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: 2devDzaqxJVKjzS6p9SCT9cKpimJ7dtFJX04FPqCgSs=)
                          2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
                          3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
                          4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:b2:38:52:5a:44:18:6a:fd:24:0f:55:4b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=b6fd88f50c968ea9aa773ecd7f622de75beb0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:f8:54:7d:95:4b:84:46:f6:5e:c6:03:bc:
                    15:0d:96:ba:a0:26:4b:93:52:f8:c8:76:39:f7:86:
                    4a:c8:e9:24:d9:d1:3e:fc:e6:18:c6:1b:b3:d5:d1:
                    19:6c:dd:aa:21:f2:e8:ec:f0:08:b3:bb:cc:0c:72:
                    10:0f:f6:4b:8c:7e:83:01:71:74:4e:ea:70:77:7f:
                    1d:96:26:1c:a8:76:e1:6a:d5:b5:de:61:40:33:48:
                    77:a5:c4:78:47:78:98:53:56:88:15:d3:88:e5:ff:
                    e9:22:c5:2b:01:49:98:32:3f:08:1e:46:e8:d8:17:
                    8c:57:19:69:98:59:10:2b:ec:89:96:12:49:5a:d1:
                    c7:f4:30:97:c8:ea:9b:77:7a:57:c9:bb:97:e6:ab:
                    86:80:86:6a:0f:22:9a:81:1d:89:3f:3c:5f:b2:03:
                    80:9c:78:74:2e:fe:63:80:c9:15:23:7b:04:29:3c:
                    99:d5:a2:c9:b9:db:ee:67:c8:87:ec:e6:93:d0:e7:
                    e0:ab:72:d2:e3:b1:7d:34:df:5d:42:43:3b:fa:6a:
                    27:82:f3:ff:29:9c:d8:c4:57:fe:0c:44:55:bf:00:
                    80:5a:7a:fa:98:f3:41:b3:8b:7f:1e:8c:0c:0e:2b:
                    c8:8e:17:9c:a0:51:3b:f8:56:1b:21:83:f8:07:68:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:88:F5:0C:96:8E:A9:AA:77:3E:CD:7F:62:2D:E7:5B:EB:01:11
            X509v3 Authority Key Identifier:
                keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:be:0b:04:2d:88:5e:a1:88:40:ff:d2:0a:4e:81:d6:76:
         c3:55:c5:7c:5a:f3:e2:60:03:c2:e7:71:24:64:74:1b:12:2c:
         37:d8:bc:09:66:41:e0:a6:31:0b:fd:3b:c8:dc:2a:1c:db:c6:
         36:04:74:4d:1b:ba:d0:cc:3a:7f:04:30:c9:69:18:a9:fc:39:
         6c:4f:38:72:c8:49:f0:8a:91:2b:8d:ce:dd:fa:22:bd:ad:9f:
         52:00:b1:f4:44:dc:c9:3d:c7:d9:f7:52:0e:eb:67:d7:eb:af:
         d9:57:2c:d9:4a:3b:62:49:91:0d:bf:f6:58:15:bb:54:62:32:
         2e:15:25:11:41:7e:3d:27:50:3b:66:b3:e4:72:11:52:93:de:
         39:1d:e7:be:08:bf:48:17:30:a9:b1:85:63:7e:a8:af:db:ef:
         97:e5:80:63:35:17:d2:80:53:6f:d5:f4:f5:09:5d:8a:f0:f0:
         a6:29:a2:70:d1:33:1f:52:75:f9:f4:15:e8:a8:8a:45:f3:ea:
         a6:9c:e6:0b:23:4a:f4:1e:a6:af:d1:8c:c9:ee:cf:76:3f:04:
         15:48:39:63:9b:46:1f:83:29:71:74:c0:34:4a:45:92:02:03:
         ec:63:b9:1d:17:70:0e:72:71:5e:01:fe:56:e5:03:a3:7d:36:
         43:86:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----