Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File:                     2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier:          RzbkCvEtAWA+gN51I+IbvyWis+f+jai5v3UwgSzC95c=
Subject key identifier:   DE:0B:55:A4:B4:A8:93:62:F8:97:1E:8F:E8:4F:45:0F:BD:1E:F1:0A
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer:       /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial:       01962F06D1BBB14E72A157A838F2559AB180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number:          11AC
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: CA+XSwm0DMiEkV4qp2UKYNCqz8CiO5gjUz7sN9S1sp0=)
                          2: RCgFf0XiItPjSlxmmEgqaSoxxs0.roa (hash: 2UGMZ2yZeYOIM9kVwRezFG9Ou19OaN3jo1kdBDera9U=)
                          3: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:bb:b1:4e:72:a1:57:a8:38:f2:55:9a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=de0b55a4b4a89362f8971e8fe84f450fbd1ef10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:1d:1f:27:5e:ac:e4:05:9d:74:50:72:04:
                    12:0d:15:06:d5:ad:55:31:b2:6e:56:77:2d:51:a9:
                    c5:be:ea:5e:3a:88:67:dd:85:ae:5d:84:a0:0f:f5:
                    f5:72:64:2d:56:24:64:b5:67:41:66:0a:71:b0:12:
                    69:c2:76:86:be:91:a4:d4:96:a5:76:f4:ac:57:6c:
                    51:dc:76:fd:8e:b2:6d:1b:36:68:f6:7c:46:1c:12:
                    40:e8:9c:82:12:9e:5c:54:6b:56:d0:3c:22:03:89:
                    a0:70:25:0e:96:33:e1:9c:1f:e4:f1:8e:28:25:1a:
                    61:47:7d:25:f2:8d:d1:85:2e:ac:ab:a6:41:b6:d9:
                    68:c9:20:16:00:81:05:97:a3:8e:87:96:b0:1a:0a:
                    ac:a4:eb:f2:2d:4e:ba:6b:77:de:5b:7b:15:2e:a1:
                    d7:e5:f5:10:d7:92:4c:8b:f5:dc:a9:c9:5f:06:57:
                    11:94:24:3e:0e:fb:09:e6:6e:e8:83:4b:85:7d:2e:
                    63:cb:cb:84:4e:03:40:61:fb:b6:bc:33:86:fa:2b:
                    e1:31:d3:97:d8:8d:e0:45:50:91:30:da:06:26:c5:
                    7a:6a:83:87:4d:29:19:a0:ee:57:fc:54:b5:c1:02:
                    b1:90:01:a9:94:72:88:18:5e:c8:a9:09:c4:60:e8:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:55:A4:B4:A8:93:62:F8:97:1E:8F:E8:4F:45:0F:BD:1E:F1:0A
            X509v3 Authority Key Identifier:
                keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:49:99:61:53:19:49:12:fe:1c:41:4c:27:ff:97:bf:05:
         26:ac:4f:c0:c9:46:75:33:e0:59:18:e9:76:23:00:c7:14:fc:
         db:99:cc:12:3a:a9:3f:1b:49:02:e4:2f:44:51:c7:1c:36:50:
         75:f0:ee:51:81:75:b8:d7:63:7e:54:45:1e:e6:b6:4d:17:3e:
         2f:8c:8c:2a:32:59:79:c9:4f:81:62:ab:aa:52:21:b5:b3:79:
         16:5e:03:21:07:61:28:44:f8:12:12:de:45:7c:c3:f7:dd:e7:
         9a:27:b3:a8:cf:20:78:c4:0d:6b:bd:12:e0:7e:58:ef:e3:8d:
         d3:3d:e4:8a:6c:98:1f:c8:95:11:86:2d:b8:ae:b2:98:2d:91:
         81:53:4e:1c:80:3f:4c:a9:48:aa:6f:bc:6c:a9:78:dd:26:2c:
         6f:10:88:7b:e7:35:81:3d:6c:35:b1:ad:ee:2f:18:f6:c6:12:
         c0:d1:f9:00:bb:c1:68:df:ce:25:1b:55:2c:8b:c7:ec:ac:c7:
         e5:0a:6f:b7:bd:4d:d8:af:3c:64:be:7d:8a:02:35:4e:ff:11:
         7b:71:0e:3c:9f:c3:e9:ff:84:5e:1c:5a:ba:d6:8f:fe:5d:b3:
         da:66:6c:e3:33:b8:72:a9:d8:cf:7f:17:55:81:a5:58:55:b8:
         6f:77:d5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----