Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File:                     2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier:          AwYJHWtlffkQBcikEBTcIpK8JZ/07T3Z5Pp8BzBxm9Q=
Subject key identifier:   AB:2B:3B:FB:AE:7C:61:9D:0A:37:1C:8F:CE:79:5E:AE:D3:AC:01:37
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer:       /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial:       01962F743AACF0AB700C6C9F8576F8E569BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number:          13D4
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: EpQkExwhFxTytvOBO57jWKq5JSo9pT8yKOi5dcg7vL8=)
                          2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3a:ac:f0:ab:70:0c:6c:9f:85:76:f8:e5:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=ab2b3bfbae7c619d0a371c8fce795eaed3ac0137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:e2:53:eb:46:90:03:1e:0a:17:61:a7:c4:
                    73:3e:07:15:6c:e1:2c:a7:80:7d:7f:51:77:9b:45:
                    9e:89:85:fe:f3:06:8e:60:e5:b1:95:9a:24:00:0f:
                    da:96:9e:8c:5c:9e:0d:9a:6f:a6:ac:23:fe:17:2c:
                    83:0e:bc:09:3b:1e:f3:98:50:90:82:b0:e7:ee:03:
                    62:7a:fb:60:ed:e7:ea:da:21:89:2f:86:51:95:ee:
                    13:ad:13:32:50:19:11:f5:9c:ec:03:db:1f:ac:46:
                    b6:c4:ea:11:51:8f:b0:cc:3a:5a:bc:bf:6c:96:87:
                    04:e0:98:65:cb:00:c3:43:cc:db:f6:d8:8f:80:86:
                    cb:9e:07:83:33:05:bf:0d:db:1d:7a:c9:16:30:09:
                    75:1d:cb:e7:76:9d:29:e1:0f:6e:77:28:cd:e1:f2:
                    1d:4d:98:c3:45:fb:32:2e:58:6b:9d:26:b1:8b:97:
                    d6:f7:70:84:34:8d:cb:0a:1b:2a:d0:65:d4:6a:1c:
                    19:73:50:04:1b:88:6d:15:a7:68:47:63:19:4d:c3:
                    aa:f8:d2:7f:5c:11:14:44:52:18:f1:a5:ee:04:0a:
                    81:6c:b9:52:c3:e8:f2:40:f3:00:92:1e:1d:a7:1a:
                    2f:82:5a:a6:60:3e:88:75:51:ff:66:06:40:d8:e0:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:3B:FB:AE:7C:61:9D:0A:37:1C:8F:CE:79:5E:AE:D3:AC:01:37
            X509v3 Authority Key Identifier:
                keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:b0:6b:37:84:2b:58:1c:57:1e:1a:3e:dd:5d:3c:03:0d:
         a8:98:0a:11:d9:6c:73:c4:a8:0f:11:62:d0:fe:c4:4f:8e:f0:
         1c:21:e4:2c:b6:54:0c:00:5f:8c:49:e0:37:27:56:0c:03:36:
         6a:6d:ba:7d:dc:55:3d:7c:c1:b7:69:d9:98:ff:f5:50:b9:84:
         df:9d:b0:65:2a:87:12:9b:06:42:6e:ae:29:02:e3:22:09:c1:
         f2:e6:ef:12:05:9f:ba:8e:9a:0b:e6:c4:5c:8f:c9:7d:da:24:
         fd:2c:29:89:97:00:52:68:20:5d:01:ae:d0:92:d6:81:1c:54:
         75:33:00:a7:a3:09:c4:ec:04:e4:ba:85:dc:49:a5:aa:b3:85:
         19:94:80:ad:12:0e:59:88:e4:92:a9:c0:12:f8:7d:c9:85:e6:
         26:6f:cb:4f:48:de:38:8f:d5:05:75:c8:a4:11:c6:f6:87:00:
         08:a6:ca:50:7b:61:b6:21:83:4e:f4:eb:5f:fa:eb:42:2b:2e:
         7f:b4:f3:b3:f7:c5:71:c0:05:39:93:0d:92:63:7b:bb:fc:cf:
         f9:56:cc:d5:53:2d:a0:21:3e:4b:48:ca:b1:34:c5:ca:67:00:
         56:7f:f0:79:15:87:f5:0c:7e:e2:7f:e7:41:6b:23:19:56:33:
         5a:27:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----