Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File:                     2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier:          KSGv/ick7EDTeu2Pv2NvJP+0xAxvAAzCprO7nh8Whjk=
Subject key identifier:   03:D7:04:60:E7:6D:B2:26:7C:23:2F:AF:4B:A2:47:A8:4E:27:48:4A
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer:       /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial:       01962DF42D3F9F555DEEC0117F1D0528E63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: gHHiBTgCUJg7F+fqpC5Rko2BZNbXvVxQpwrZF6Raprg=)
                          2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2d:3f:9f:55:5d:ee:c0:11:7f:1d:05:28:e6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=03d70460e76db2267c232faf4ba247a84e27484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:d3:51:3a:c0:61:27:92:4b:e9:90:c5:43:
                    0e:f6:1b:1f:0c:40:e9:b2:34:84:21:40:76:12:ed:
                    aa:53:b7:3d:3e:c5:e7:03:3d:e3:dc:4d:bc:bb:8d:
                    2a:c5:cf:6e:2a:1e:b9:1a:6a:13:e2:6b:e1:0d:d5:
                    fc:51:8d:64:d5:8b:7b:10:f7:79:e7:d7:5d:b2:57:
                    a7:73:6b:3e:39:6d:86:2d:cb:ec:6a:fc:cb:f1:69:
                    00:b9:d1:1a:cc:7b:94:c1:5a:19:26:3f:83:c9:1c:
                    6d:b2:03:68:67:c4:bd:f1:65:65:75:9b:08:50:69:
                    a6:ca:46:0a:4d:43:9d:56:8d:72:40:82:67:a7:1f:
                    e1:9e:99:8b:e5:b1:de:d7:06:d3:34:56:71:0f:b4:
                    4d:f9:11:bb:96:ae:96:c7:41:68:d7:ad:ad:01:be:
                    de:d2:be:3f:f4:dd:2d:04:7e:21:6e:34:50:12:89:
                    32:d2:b1:39:66:6f:72:9c:fe:71:78:05:e2:22:6b:
                    56:f8:0d:32:1c:24:69:d3:c9:63:43:f3:6a:35:a4:
                    d9:8e:70:e6:ea:a7:44:28:bf:3a:37:55:d6:c8:5c:
                    42:08:ae:e0:a7:ee:40:b7:ec:24:a6:19:0b:41:48:
                    5d:83:90:ba:88:47:c2:1b:73:51:85:73:d2:28:3e:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:04:60:E7:6D:B2:26:7C:23:2F:AF:4B:A2:47:A8:4E:27:48:4A
            X509v3 Authority Key Identifier:
                keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:09:3e:43:ac:d2:0a:62:74:45:0e:52:07:56:93:ed:85:45:
         7e:52:b2:c9:f0:a9:45:be:4a:94:7d:25:5e:ee:5b:15:b4:aa:
         31:d8:1e:e5:0b:92:ce:ad:92:3f:a0:17:26:40:36:d0:61:ce:
         28:66:db:06:af:85:77:50:ac:a9:7c:a7:c9:9a:ab:01:db:24:
         04:1a:d6:d5:88:fd:d7:19:a7:25:ef:cb:81:cb:ad:d2:fa:bf:
         3e:c3:7a:c2:69:c3:97:c1:6c:df:27:d2:91:95:e4:2e:14:9a:
         55:6b:aa:33:98:5c:65:da:c0:14:8e:ce:31:d4:74:eb:28:4f:
         4a:f1:78:fb:5b:07:63:6f:22:81:64:df:dd:1b:f9:f0:8b:04:
         47:0e:4e:e4:fb:9e:a1:01:11:6c:cc:29:d9:07:4a:f3:1d:aa:
         c7:39:5c:32:5e:1e:6b:0c:e8:7a:1e:c1:c4:09:97:db:df:0b:
         3b:3a:f8:c8:94:d1:88:78:81:f3:10:77:4d:8c:4f:9d:2e:66:
         62:d5:39:0f:34:4b:f1:04:5d:c4:50:39:9f:ef:59:fb:c4:f6:
         16:6c:0d:8a:12:42:3f:23:c4:87:11:b4:6d:b3:96:4a:ca:6a:
         3c:16:29:ab:08:15:e4:a7:74:d8:80:d1:1e:02:9d:a6:05:57:
         83:b3:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----