Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File:                     2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier:          k6sXcxsLNUHUaqLeSqzDvGLRdHx524aEH67KtqBIy28=
Subject key identifier:   21:6A:8E:54:BD:3E:5D:F5:BA:A3:00:84:86:B0:94:C9:B0:DA:B4:56
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer:       /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial:       01962F06C73625B885D8FD1EE239679BBD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: KeQPEKtUmfbc8oXVEzlyz0ssPLDQMJNF2qTZInqDMIw=)
                          2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
                          3: jWdU42AeB5hmcNLcJB4amqPIFto.roa (hash: qbiegPKmrBhrxPY1qr/z8fci1piffaE6KNVioMcvGi4=)
                          4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c7:36:25:b8:85:d8:fd:1e:e2:39:67:9b:bd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=216a8e54bd3e5df5baa3008486b094c9b0dab456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:e6:97:c3:13:d4:bc:f4:94:99:f3:05:7e:
                    a1:62:a7:4d:67:71:86:a2:45:e3:14:6d:68:71:32:
                    db:8f:41:ce:3c:f2:7b:c6:85:3e:af:c5:52:a0:e6:
                    86:68:3e:d9:72:af:66:4a:c4:fc:53:38:ac:ab:c6:
                    26:66:38:60:0c:f2:ea:32:18:af:72:b1:ad:42:52:
                    36:81:fb:1a:44:d3:2e:d9:5e:81:0b:d5:07:90:08:
                    9d:7c:47:a4:33:a2:82:0b:7f:57:d9:0b:96:83:57:
                    69:e7:0e:10:db:42:dd:58:52:d7:4b:85:ee:73:44:
                    ac:dd:81:d1:93:38:3e:5d:c9:c9:05:6a:57:0a:e0:
                    9e:a5:9b:e9:c9:be:c1:fd:ab:a3:0d:2e:d1:2e:64:
                    8f:fd:e2:f4:84:48:33:12:97:4c:2e:80:6b:f4:d0:
                    ac:94:78:66:c0:13:d9:ab:8b:36:b8:a0:ef:45:e7:
                    b1:45:df:c5:8b:e4:4c:c5:23:1c:dc:cc:6a:53:e9:
                    ed:38:cb:c4:b7:30:fe:f3:a2:69:c8:87:e7:0b:8c:
                    14:f1:9e:af:d1:26:4c:50:9a:aa:d2:91:96:91:d0:
                    fb:b5:a2:49:98:6b:fe:39:8a:6b:b2:a6:21:1b:7c:
                    8f:c1:62:f4:f7:33:93:5c:3c:d1:8e:c2:7a:71:8f:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:8E:54:BD:3E:5D:F5:BA:A3:00:84:86:B0:94:C9:B0:DA:B4:56
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:8f:62:e7:53:a8:7b:67:c6:2a:5e:29:e7:d8:6f:3a:5f:
         46:69:24:c4:35:8c:4c:46:dc:f6:48:19:fb:ba:4a:ce:73:43:
         af:58:1d:45:e5:84:24:82:40:4c:ed:eb:5b:6a:4d:03:cd:4b:
         a0:b2:90:39:2f:58:ff:37:d2:08:02:c7:f1:28:76:3e:75:68:
         cb:46:92:0c:ac:4f:a7:33:d2:dd:b5:57:80:c0:e7:f6:e5:5c:
         3a:a1:3f:c4:6f:0c:22:49:2e:46:7f:f4:d2:f1:32:48:d6:83:
         4f:39:ed:26:2a:16:b2:74:e1:48:d1:cf:64:fd:c5:1a:70:a3:
         03:95:17:3e:e4:65:5a:b0:ef:a8:88:7e:72:bb:ff:db:f0:0a:
         c5:c9:17:5a:34:72:a8:dd:78:a7:67:40:e7:89:92:a5:c8:60:
         b6:be:81:25:c5:07:6a:40:6d:e3:22:58:e2:dd:61:77:f6:7c:
         44:22:35:68:17:1b:f0:d7:b2:9b:c1:77:c9:de:ce:36:86:3f:
         f9:87:2d:e1:94:b3:37:94:4d:58:f4:10:8d:ea:66:38:4f:c5:
         f1:83:cd:72:bb:d3:7b:56:45:9b:7c:ed:34:54:0d:82:c9:d5:
         6c:72:26:03:d7:d2:4c:c5:db:a8:78:01:23:64:4d:98:f7:04:
         5a:ee:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----