Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File:                     2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier:          N0LnYpCi9BHfc1c5ufCCx2e7UJd8r452qinJc/ib3zU=
Subject key identifier:   1F:FE:0B:21:25:22:DD:4C:89:07:A7:B1:ED:9C:E0:D7:C8:3B:93:27
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer:       /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial:       01962F06C7BF1A3FA4794F0728C5257D8C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: Bz/SvrBg2eYoWX7DEz3aLUFJlNcvY+VTsbYLb5K9IVk=)
                          2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c7:bf:1a:3f:a4:79:4f:07:28:c5:25:7d:8c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=1ffe0b212522dd4c8907a7b1ed9ce0d7c83b9327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:89:c1:a8:1b:ec:63:ba:79:33:5a:42:16:
                    6a:0d:78:e5:61:5c:6c:91:ea:f2:03:0e:14:c0:3c:
                    02:4d:ab:be:57:6b:b8:f8:51:dc:fd:e8:97:b7:30:
                    59:5d:47:d8:da:cb:34:bf:07:42:eb:ed:f1:9c:37:
                    41:94:33:23:25:a7:68:04:97:b9:2f:93:51:19:c2:
                    2a:61:16:59:8f:92:89:24:44:af:da:c2:0e:8a:ea:
                    95:42:d9:59:c0:b8:15:15:eb:e0:cf:18:16:e5:17:
                    e3:19:8a:7b:c5:9b:06:7f:7c:67:fe:48:e2:be:62:
                    e3:81:38:8b:a4:95:1d:73:02:a3:61:8d:a8:f3:03:
                    c2:e4:c0:68:3d:e9:e6:5c:14:44:96:f2:07:7f:83:
                    3d:7f:f1:e1:66:69:a5:ea:62:e9:c1:6a:cb:17:b1:
                    7d:a7:76:9a:57:31:83:53:5a:43:df:42:24:61:6c:
                    46:bc:7b:93:fa:95:06:56:7e:0d:ed:c7:63:90:57:
                    04:3a:5c:c4:1c:a1:34:1b:17:12:5b:71:65:07:b5:
                    92:f0:ce:55:86:1f:d8:36:95:02:4b:ac:58:fb:8f:
                    3a:b1:8a:c2:32:7d:0f:51:26:8f:b3:1f:13:76:f8:
                    39:92:dd:5f:46:55:c5:49:bc:d3:20:ae:de:0f:7b:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FE:0B:21:25:22:DD:4C:89:07:A7:B1:ED:9C:E0:D7:C8:3B:93:27
            X509v3 Authority Key Identifier:
                keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:32:b4:d6:25:8d:71:32:66:5f:33:0e:7d:4b:41:02:c9:
         23:cf:20:dc:6d:55:58:78:a2:4c:1b:83:8b:5b:e1:e1:99:a8:
         f5:5a:ca:34:36:25:c0:3f:ff:c7:18:a8:ad:97:39:72:2d:2c:
         3a:13:c4:1d:70:25:cc:90:eb:c1:5d:f5:b7:d3:90:08:3b:78:
         8a:89:ba:a1:de:1f:54:df:a7:ee:f8:eb:56:f3:09:92:33:13:
         68:27:82:8b:0c:0e:e9:18:e5:55:cc:f4:31:08:23:20:f2:d2:
         5a:65:8b:10:e7:fe:8a:40:16:05:d5:3c:84:c3:7e:51:cf:c8:
         6b:49:52:dc:de:26:df:40:ad:88:ed:93:5d:60:d1:f6:93:af:
         11:fb:2d:59:b7:8a:8c:68:9e:bd:6e:86:61:bb:ca:24:a8:42:
         cf:39:69:43:1d:30:a5:82:09:79:88:27:3b:e7:2c:82:42:53:
         c9:f5:a9:cc:78:20:0d:01:f3:b5:59:7c:57:a0:70:85:0d:12:
         77:0c:a5:37:d9:3e:3f:7f:89:58:b6:19:23:40:d1:87:72:ec:
         a6:e8:ad:44:69:a6:70:ca:b0:f9:d0:1c:24:c9:78:9e:18:e3:
         d3:a0:05:9f:b0:a3:73:7c:ea:1c:9a:b6:ae:a5:d9:e1:7c:57:
         22:86:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----