Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          pf9BoY0wLsp9c84zXshYccyhfseDqLvTg2EQWV0ZQ1s=
Subject key identifier:   0D:39:4A:FA:6F:E4:6E:A0:89:98:32:B8:B6:3B:83:53:31:A0:D6:4C
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       01962ECF8348B30E192FA628B7A11A37D3F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
                          2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: dqML2jTaPyn/7lo0s2sZd2XUDxWI9dYZcCbhTAs6LH8=)
                          3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
                          4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
                          5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:48:b3:0e:19:2f:a6:28:b7:a1:1a:37:d3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=0d394afa6fe46ea0899832b8b63b835331a0d64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:b6:fe:d2:38:a4:1d:ee:bd:cf:5e:41:f6:
                    e0:26:a7:f5:87:09:e1:26:64:22:a1:47:7d:bd:04:
                    bf:2b:73:f0:77:6f:8d:e4:78:3f:61:7d:a6:1c:b3:
                    4b:6f:9e:4e:d8:c8:04:ee:8b:e8:f2:80:a1:3c:dd:
                    cb:64:9b:8d:d4:e0:9f:de:0e:ce:94:43:f0:2b:0c:
                    8c:8a:a5:6c:a5:1b:3a:21:03:0a:a8:a2:55:15:3a:
                    d3:99:59:48:e7:b2:35:1a:de:33:c6:b4:1d:11:1d:
                    d0:f8:de:2c:9b:68:64:90:13:2d:5b:22:ba:b3:5a:
                    42:99:aa:76:96:c5:d3:4b:a4:a3:4c:3f:de:72:90:
                    d6:89:d9:64:18:7c:75:4c:c7:33:69:e3:be:14:5c:
                    a0:30:8c:08:96:f4:4a:8c:c4:14:bf:11:47:52:16:
                    d2:0f:a1:8d:73:f9:94:29:4d:71:61:53:ee:63:75:
                    ad:d8:16:ab:51:ca:5c:ba:44:05:11:91:0e:8d:a3:
                    ae:f9:8a:1c:33:b8:a9:e1:b5:af:9c:19:9f:46:fe:
                    5e:ea:f8:33:7d:cf:a7:dc:98:b3:eb:f0:18:97:2d:
                    55:0d:18:42:fa:aa:21:c6:b8:a3:e5:ac:aa:6d:f0:
                    91:1a:69:eb:94:0b:82:a9:e7:b3:17:17:a6:fa:4e:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:4A:FA:6F:E4:6E:A0:89:98:32:B8:B6:3B:83:53:31:A0:D6:4C
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:31:42:c2:c6:ef:89:56:1e:39:81:e8:a4:27:77:f2:a4:c7:
         2b:49:3a:e0:f3:7d:f8:3f:2a:09:e1:9c:a7:07:64:6e:0f:4c:
         01:b3:8d:aa:c8:f3:6b:6a:a1:20:dd:c0:ab:c6:41:2a:60:ea:
         ff:62:e0:24:44:52:80:4a:78:e0:16:12:56:70:ee:ea:a2:d0:
         1c:5f:a5:3d:51:ae:db:ad:3c:f9:2e:d4:82:c5:0c:5c:b4:5a:
         35:5c:ef:62:88:7e:d0:9f:81:04:96:a6:70:25:0b:38:8b:b0:
         52:f2:1e:ed:c2:fa:09:f4:1d:4b:8e:81:ae:85:4a:68:0c:df:
         fd:a5:4f:30:4f:27:6a:82:fb:f1:15:5d:e8:2b:9c:ca:35:5f:
         7b:ed:6a:48:02:14:ed:e5:62:2f:99:e8:7e:46:f4:4f:7d:53:
         97:57:15:f9:7d:d5:68:60:c9:3b:04:3e:52:50:ff:4c:52:fa:
         be:55:09:94:f6:e8:f6:cd:09:03:50:aa:59:3a:c4:a7:e8:0b:
         c9:94:32:19:25:38:d0:5c:98:80:27:8b:01:ec:f3:6f:ba:a7:
         19:00:92:4d:d1:e1:6d:4b:80:21:e9:51:28:9e:d1:56:33:73:
         be:b8:41:3a:74:71:34:d8:17:e9:66:7d:d4:e1:6e:84:39:12:
         32:50:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----