Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File:                     2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier:          9P6mtoSZVyTmSlRdpzeylGwTmRHqgtOeNGum/ho6Yuo=
Subject key identifier:   69:90:74:2C:55:F3:C1:D7:35:54:CC:36:3C:51:A1:74:14:A8:3B:E5
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer:       /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial:       01962DF41B643A68FB5F9CB0F290A522ECA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 0LdCYiyoo_rQZDLAQK9EXmWdrLs.roa (hash: ii+DUPaWPj2PKPLgx9rgU4vJhM6MjQajOc4FBEHl1O8=)
                          2: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: u7XFASYC4/cWWsr9B9Hs+dV7txmMi1q8900JwbrN/Uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:64:3a:68:fb:5f:9c:b0:f2:90:a5:22:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=6990742c55f3c1d73554cc363c51a17414a83be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:93:05:5f:f7:65:43:49:98:2f:0b:58:65:
                    5e:0a:37:47:4d:b1:fe:71:b3:51:ad:cf:3d:57:df:
                    b7:1b:1f:f6:9d:38:d2:b8:d9:16:31:10:31:a4:c1:
                    aa:88:45:85:e2:6e:e9:8f:57:4c:f5:36:73:9b:ed:
                    c2:7f:f0:c8:44:5e:c1:13:37:a4:73:bb:07:61:80:
                    07:2a:75:da:37:38:6d:00:20:e3:1d:73:2f:57:83:
                    64:77:67:bd:a6:59:2e:bf:76:63:04:8e:d4:29:55:
                    58:39:29:e6:1e:0e:ea:fa:85:88:77:8b:4d:1c:e4:
                    ca:49:98:da:1c:cc:62:79:8c:82:d7:22:97:66:f7:
                    30:4f:9a:42:e2:42:45:74:01:50:dd:23:ba:0f:86:
                    c4:ff:28:ba:0b:c2:6b:33:21:f4:8f:c0:5d:76:b4:
                    54:87:a4:39:c5:77:4e:3b:12:38:da:98:18:0b:3b:
                    82:77:c0:22:20:a2:31:a4:20:08:9b:ed:0b:a4:9f:
                    b2:48:e3:f5:46:74:6e:4a:02:9f:44:e3:f3:e0:2b:
                    7d:68:46:45:a0:28:ee:4c:66:8a:79:68:6a:77:6e:
                    3a:19:fe:26:38:96:5b:59:b0:52:a1:11:83:18:68:
                    2c:89:1f:73:97:56:33:9d:8a:db:2d:8e:d7:b8:8f:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:90:74:2C:55:F3:C1:D7:35:54:CC:36:3C:51:A1:74:14:A8:3B:E5
            X509v3 Authority Key Identifier:
                keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:34:07:00:60:06:79:98:d0:02:b1:e2:c4:86:08:e2:a4:
         18:ca:27:a9:f9:92:82:09:85:af:b9:6b:83:f3:9c:77:e0:0c:
         f4:f3:44:0e:11:9b:1b:e2:c7:cc:dd:c7:97:70:d6:2f:39:2c:
         37:fd:ef:1b:57:06:62:ca:7c:d7:57:38:00:30:5e:c3:33:08:
         c9:46:1d:29:5f:13:2f:af:3d:f1:25:0c:9e:42:24:6c:fa:49:
         0a:06:22:0a:ff:9b:f1:23:0d:2c:af:b2:b0:9c:24:c8:c4:4a:
         c3:c9:e7:cb:af:43:58:11:23:9f:c3:20:3b:90:20:38:87:6d:
         61:18:0f:fa:a9:ab:3c:45:9d:1f:28:5d:19:26:7d:84:bd:c5:
         d8:91:43:d4:f6:62:b2:95:fd:5d:78:f3:9d:48:9f:6d:39:dd:
         61:9b:35:2c:7d:16:5c:eb:ae:0b:ad:74:d4:9c:71:6e:86:f1:
         9e:09:a6:51:2c:36:20:6c:88:f2:32:78:cc:b4:b5:94:77:79:
         d9:a2:fb:c1:7b:cc:78:21:56:48:c7:31:69:f7:9f:78:44:0c:
         9b:6a:94:2a:89:62:47:92:8a:7d:9b:b7:65:2c:d4:63:81:e7:
         85:13:66:07:ce:99:40:09:f8:3b:d2:9b:5e:01:fa:36:65:a0:
         c4:d5:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----