Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File:                     rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier:          5VN9HXgRlLDhP8DxApfHNRY+o6A23WmM7PN+a+1Qy8Y=
Subject key identifier:   19:FB:34:2B:E7:90:B5:12:7A:6E:42:80:34:17:C3:7B:F4:4D:B2:7F
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer:       /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial:       01962F070F06C5181F44C39BDFB91BAE35A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
                          2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
                          3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: D3f/LRWjRtLIdbkePCVYmaoUy3Vus5kZ4OlvMzOdtQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0f:06:c5:18:1f:44:c3:9b:df:b9:1b:ae:35:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=19fb342be790b5127a6e42803417c37bf44db27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:42:1c:a8:8f:0f:31:db:ac:fe:53:ff:f8:
                    1d:09:a7:99:f1:bb:df:3f:01:51:49:4a:d5:c1:58:
                    7a:6a:10:9e:16:22:5f:ba:bd:4b:11:7d:60:93:a8:
                    5b:7e:95:1c:a7:53:5e:33:3b:af:6c:9d:9b:03:7a:
                    07:cc:bd:0b:88:0a:52:73:88:f0:c0:99:b8:ae:56:
                    90:1f:cb:72:45:de:1c:d5:b5:96:a3:d8:b8:cc:f7:
                    91:ef:d0:a5:b7:b3:37:5e:56:fe:1f:92:22:06:9d:
                    a7:02:1d:8f:41:32:72:a1:67:13:be:80:92:0e:49:
                    5f:b8:2f:93:58:45:8a:4d:b6:1e:42:ef:15:bf:72:
                    63:1a:04:12:d3:08:9f:b1:75:5c:5f:96:6e:38:08:
                    1a:d8:25:7b:7d:f9:4b:5f:79:2d:4b:e8:00:d2:3d:
                    39:57:84:a9:62:36:48:ee:7b:8e:dc:8a:2f:f9:7c:
                    4c:45:00:2c:ca:8a:2d:ef:c4:10:e4:d9:51:f0:30:
                    1f:6e:26:bd:b1:c4:3b:47:8f:aa:03:c3:6f:e0:c6:
                    73:4e:db:d3:49:3c:67:ae:a6:7d:e8:26:c8:d9:11:
                    02:de:52:0e:31:b7:a6:b9:72:5c:99:9a:75:7e:0d:
                    07:e6:97:f2:64:1b:40:cd:46:de:04:dc:2c:6d:52:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:34:2B:E7:90:B5:12:7A:6E:42:80:34:17:C3:7B:F4:4D:B2:7F
            X509v3 Authority Key Identifier:
                keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:59:7f:99:ee:5f:2b:0d:14:60:7b:a8:f0:52:69:ba:9d:a6:
         d3:a3:20:d5:0c:36:bf:19:a6:70:89:0c:32:39:f3:55:5c:5e:
         5f:b2:2f:1d:cc:ed:f2:6d:6d:41:f3:5f:04:b6:af:e2:73:95:
         6c:81:71:a3:e0:7c:82:22:60:51:5b:62:25:ad:d9:30:0f:31:
         1f:81:47:3d:f9:95:15:f7:05:c7:03:cc:b2:5d:45:b2:d6:bd:
         a7:1f:7d:9a:07:3e:56:48:4b:30:e3:f7:3b:78:66:1e:57:d5:
         13:78:86:b2:98:72:49:f6:99:05:d8:11:01:c7:69:13:af:fe:
         de:87:46:2a:66:01:be:e4:9d:95:92:df:31:98:73:d9:33:6f:
         51:8c:a9:ee:f1:ac:21:73:b5:65:b4:7e:7c:57:14:77:37:3c:
         33:f3:9e:7f:ff:3e:8d:9d:12:32:ec:32:de:28:57:d2:fb:35:
         28:40:f0:cb:b8:9d:2c:ad:af:eb:53:1e:b9:ca:1f:7d:02:3d:
         64:93:38:92:01:86:1c:27:06:95:66:2a:bd:ea:c2:6f:66:66:
         2b:18:ec:dd:68:14:ab:9f:e6:81:7c:e7:76:bd:00:72:97:c3:
         a3:1a:75:44:75:61:d8:84:69:97:36:f1:12:91:26:c3:ab:cc:
         87:5b:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----