Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File:                     2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier:          afUQ5LLkuqLLQ7z2Q25EkkvIJYw9VU12T5dLZPb1HMQ=
Subject key identifier:   E7:C0:EF:64:47:A3:EC:A9:08:D3:F9:F6:0D:0B:6E:8F:D1:AC:B7:15
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer:       /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial:       01962F0682CA3CFB1C8009ADAF64DB465B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: THjcVT0tEFAzPBUdvex/h9arf9o2Hk4KPLDdgPDV24I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:ca:3c:fb:1c:80:09:ad:af:64:db:46:5b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=e7c0ef6447a3eca908d3f9f60d0b6e8fd1acb715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:26:fa:65:b9:10:7f:ba:98:bc:14:1f:09:
                    cc:44:13:37:f1:e6:41:b3:24:d2:9f:78:93:de:2e:
                    e1:61:2c:31:e7:49:48:91:83:a3:a4:da:4d:4a:a9:
                    98:14:59:83:8c:3f:43:89:39:ef:be:83:0a:7c:bb:
                    8f:08:a7:29:06:18:ae:63:45:de:0c:9d:07:cd:c6:
                    7c:51:a1:1a:99:55:9d:90:05:3d:a1:ec:db:9f:19:
                    4e:27:59:13:25:c9:04:e0:7f:04:e0:a9:63:4d:46:
                    06:8a:57:74:34:cc:ba:77:80:1f:f1:80:8d:41:47:
                    76:d8:88:ea:c8:1b:97:f0:0f:0d:16:b8:d7:c6:cd:
                    23:02:31:15:37:80:33:06:2b:11:39:ff:40:42:44:
                    ca:71:96:9f:0d:42:1d:77:ee:28:92:43:61:88:af:
                    16:65:fb:16:a1:5a:47:52:81:16:91:18:40:3c:65:
                    9f:14:d2:94:ad:7c:d5:b4:a8:35:31:bb:a6:ef:ed:
                    19:1a:6a:45:16:71:60:c7:ee:b7:1d:61:61:c0:15:
                    4c:29:58:94:19:ee:67:d3:3d:6b:4e:22:9d:5c:2f:
                    97:7f:2d:d2:c2:ba:11:31:ed:ad:cc:79:ad:db:02:
                    b2:99:1e:77:a7:2f:f2:e7:ec:67:ac:84:8d:26:4d:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C0:EF:64:47:A3:EC:A9:08:D3:F9:F6:0D:0B:6E:8F:D1:AC:B7:15
            X509v3 Authority Key Identifier:
                keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b4:4c:33:e9:7e:92:95:ec:ae:3c:70:66:19:22:63:20:39:
         ac:b3:24:5d:1b:d9:55:71:e8:de:1d:9b:e9:1b:56:91:65:d2:
         12:20:8a:21:de:34:28:c3:d5:68:e2:9c:62:8f:24:bb:79:57:
         04:f0:32:9a:72:b9:12:ce:13:96:f3:bc:35:a2:d6:78:d5:96:
         44:37:90:69:f1:3b:6f:47:b7:8a:4a:75:c5:d9:5e:2a:0a:05:
         b2:bb:6d:f4:e7:e1:48:d2:c5:3c:87:f9:53:96:1f:6f:2e:7f:
         99:7d:6c:31:17:64:10:65:77:3b:77:a0:60:47:86:e8:20:88:
         98:07:6b:9f:35:c6:89:fd:42:6e:13:31:2d:5d:e3:f0:c1:a0:
         90:9e:29:5b:5f:fb:b8:4d:8a:74:79:bb:73:66:9c:15:c0:03:
         b2:dd:a5:ac:e9:f2:63:68:ea:b3:99:83:4e:e6:e7:3c:fc:3c:
         ba:42:84:d5:c4:01:cc:39:6e:5e:65:91:b2:d3:36:15:31:41:
         4f:0d:c1:95:f2:18:b0:ee:96:95:85:1f:07:10:db:44:3c:49:
         f4:7c:4e:8c:a7:a8:ee:de:a4:9a:47:d5:2e:72:91:b9:cc:6b:
         33:48:0d:66:30:e1:44:4f:83:43:71:64:1f:3f:4d:dd:9d:e9:
         95:20:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----