Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File:                     2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier:          Q9A9WbHVs0iPLzNUS6nuXir2FFRAdb9VHb6ONjl31+g=
Subject key identifier:   FA:DC:96:D1:A9:94:7A:13:04:39:E7:BE:A2:98:AE:36:EC:F0:3A:38
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer:       /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial:       01962F7475E2A1B23404D6E90D68B64874B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: Jjd+mqvev5NcZqwKp92rTA9cEgeodOkaRKRv56Xe+uE=)
                          2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
                          3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:e2:a1:b2:34:04:d6:e9:0d:68:b6:48:74:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=fadc96d1a9947a130439e7bea298ae36ecf03a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:27:99:c8:8e:35:f1:9c:d7:75:f9:5d:cd:
                    7f:87:f7:3c:0b:ca:5d:dc:76:8e:27:ec:5e:6c:66:
                    ed:53:17:b3:9e:e6:47:9b:a0:7e:8f:f4:2a:1b:29:
                    e1:cb:67:0f:5f:5e:1f:bf:3c:be:ca:0d:84:aa:de:
                    5d:d8:8d:4a:5a:65:8c:3b:81:96:e6:74:84:07:87:
                    c7:4c:89:de:ab:85:48:c3:93:4b:a2:d1:d8:93:9c:
                    d5:b2:fe:a3:32:b2:ec:a7:70:14:b7:bf:6e:bc:99:
                    0c:76:80:1e:bf:d5:2a:ed:e6:85:b0:23:e0:5e:35:
                    75:aa:6a:73:27:f6:ff:98:37:fe:82:5f:25:f7:7e:
                    90:91:97:f9:ba:d4:c2:f2:a8:d8:e6:07:65:5b:d4:
                    73:19:6c:4c:b8:d5:08:8f:3d:59:53:b5:5e:6b:87:
                    ed:7b:1c:43:d1:32:9c:f2:7d:1d:01:41:da:8f:cc:
                    b7:1d:e8:48:06:7f:ff:7c:03:a1:0f:48:2d:23:89:
                    c7:de:ec:b0:2d:88:d8:48:81:da:dc:61:74:f6:9b:
                    c4:63:aa:59:fb:d2:65:84:fd:31:05:10:1d:99:22:
                    c0:c7:e5:d0:41:31:df:7d:f8:70:90:22:05:93:e2:
                    57:f4:63:9b:56:b3:4c:7d:c5:7f:cc:f2:08:14:13:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:96:D1:A9:94:7A:13:04:39:E7:BE:A2:98:AE:36:EC:F0:3A:38
            X509v3 Authority Key Identifier:
                keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:0f:12:8c:d1:e5:1c:85:91:a9:6e:0b:98:bc:b1:0d:89:
         ac:05:1d:95:b5:b1:99:48:96:25:9a:6e:f7:46:62:35:40:a6:
         93:e2:6e:0b:93:13:e4:4e:37:08:fd:4e:8f:3e:c1:1f:9f:bc:
         25:d9:be:e4:42:79:60:ed:00:86:53:73:02:8f:46:c6:35:6b:
         16:96:f9:a6:9c:b7:50:5b:57:3e:ce:df:af:c2:c7:67:7c:10:
         46:2c:33:3d:b7:30:fb:e3:97:85:89:5e:ec:50:e0:7d:4e:f9:
         5c:1c:71:e2:0d:3a:47:77:91:82:a2:24:23:6b:53:b2:3c:d1:
         3a:3f:4f:49:dc:c1:da:6c:c6:23:6c:fc:f4:88:fb:ed:99:9f:
         04:d5:bf:86:e6:6b:df:1d:b8:34:2d:17:87:b8:95:d5:5a:33:
         e2:94:21:18:63:41:06:89:00:d2:d2:0b:40:cd:e8:6d:7e:7e:
         4d:c3:37:4e:c6:14:ff:44:6b:2f:3a:54:89:bc:3a:09:39:80:
         6d:9c:02:a1:1e:74:ea:32:7d:b5:4f:f2:40:27:b4:16:b1:56:
         6d:10:c3:0c:1f:1c:15:59:5e:64:51:d1:80:ea:63:ff:e1:77:
         6d:3a:fd:f8:46:be:7b:4f:9a:f8:a6:e7:c1:3f:64:c9:4f:fe:
         69:ab:00:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----