Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File:                     2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier:          5kTIddbueEvbe6IQCsJcNVTgpmk2zKVcgzEf/GQxVmY=
Subject key identifier:   31:63:2F:CC:40:EE:AB:30:BE:DB:6A:0F:15:12:C5:84:1F:C9:2B:E3
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer:       /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial:       01962F748A163763A9AA86CFBB5E4B0CCA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: mq+WxReIn4S4sDQBBfmPCxvzs3Ymm+XmKEDq0zyb/J4=)
                          2: 4yhoCs9M-fjQaMlDWlUpC1ERe-g.roa (hash: t+8njXgDpdo9kegDaGKO6tPmuatvzfS0I/p9sqY0v4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8a:16:37:63:a9:aa:86:cf:bb:5e:4b:0c:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=31632fcc40eeab30bedb6a0f1512c5841fc92be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:0e:0d:48:a6:3e:f0:2e:28:58:9d:79:e0:
                    23:2b:04:08:7d:fb:4c:5b:7f:5a:d6:b4:2c:10:5a:
                    c7:63:d4:51:b2:2e:ff:7f:58:b8:5d:97:08:04:08:
                    66:c2:33:3c:ac:b8:c3:58:07:a7:d8:fe:a3:93:19:
                    7a:ae:13:7f:60:bc:30:f6:c3:29:9b:17:cb:c3:57:
                    b3:5f:69:74:98:7f:73:5f:87:76:90:c7:19:01:d4:
                    03:05:60:6d:f2:6f:a7:58:28:36:97:04:1f:e2:2b:
                    43:72:1f:99:7f:eb:80:8f:cf:e6:65:5e:24:3a:e0:
                    24:eb:69:16:7d:83:71:d1:e4:b0:6f:c7:da:44:c1:
                    e5:3d:0b:53:2c:4c:ef:64:7a:00:a8:c3:de:b1:fa:
                    ce:49:6f:7c:70:2a:21:b5:3d:1c:2f:77:f6:a2:82:
                    06:4c:03:ac:d3:8c:ef:e2:42:fc:b2:71:c2:db:14:
                    6a:8d:c9:d5:80:5d:05:95:89:b8:33:62:4b:a3:e8:
                    8d:94:d0:7d:6d:14:95:b3:8c:8c:80:cb:d3:b3:ff:
                    b1:ca:36:59:8d:f6:81:ef:47:c2:a2:a1:ef:99:2f:
                    13:e9:ab:81:c6:82:28:a5:a0:12:4e:73:4f:5f:12:
                    88:79:d0:75:ed:52:13:5d:ef:87:49:86:6e:58:ae:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:2F:CC:40:EE:AB:30:BE:DB:6A:0F:15:12:C5:84:1F:C9:2B:E3
            X509v3 Authority Key Identifier:
                keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:25:f1:87:2b:d7:fe:54:06:ae:c1:2f:81:a7:63:7e:0e:b3:
         5a:80:15:d6:97:20:1e:b1:ce:db:af:e1:e8:c4:a5:57:c4:7d:
         51:41:80:a9:0c:7b:f8:d4:24:7d:94:e9:cd:04:df:48:c2:3e:
         38:cb:eb:5e:73:7f:9a:b3:af:fb:7d:f6:9a:ea:d5:e8:ff:85:
         69:4f:d7:8f:45:78:e3:08:31:bd:92:79:fb:27:ca:02:6f:7c:
         ce:86:03:c7:3b:a0:de:a5:1f:1b:ae:dc:ef:c1:88:0d:a2:88:
         43:1e:d1:ab:ca:b6:32:33:06:e8:73:25:1d:92:e9:05:6e:de:
         db:0c:10:1e:fc:d5:f6:93:02:35:a2:fe:bc:f3:81:55:0b:ac:
         3a:80:7f:a7:41:a9:a8:db:40:82:9f:b6:69:6a:2d:00:2e:da:
         8c:86:f5:52:39:a8:c5:fc:92:76:08:43:a2:a7:e7:5b:45:1e:
         b9:e9:e9:eb:38:e1:1d:d5:ce:1e:e8:c9:4f:04:42:b6:ae:5e:
         36:55:d3:42:97:80:e4:fb:ff:39:69:27:d6:19:ba:d3:dd:f8:
         aa:a6:fb:28:28:cf:03:31:ba:34:bd:17:93:d0:bb:4d:75:c6:
         e4:ce:2c:4d:7b:3f:e2:0f:f7:1f:91:b9:a6:5d:1a:8b:04:2a:
         f1:d6:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----