Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File:                     2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier:          GGuK9/aVwuPAY5hHhcfNmRhDgBDamx0xKW7wmlVMNWI=
Subject key identifier:   C8:B4:B2:9D:E4:B1:EA:B1:AB:1C:E5:CD:B9:BA:C1:1E:18:99:5A:69
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer:       /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial:       01962DF4270A19F800C31D4D1F6E702B46F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number:          0209
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: mlWMfVBtaz4erQ3BNx9CthgsPWbKZ7v039q9lKk0a88=)
                          2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:0a:19:f8:00:c3:1d:4d:1f:6e:70:2b:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=c8b4b29de4b1eab1ab1ce5cdb9bac11e18995a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:57:9a:49:c1:39:1c:06:a3:f2:69:d1:c6:
                    5b:97:8c:69:ca:81:19:50:1d:65:cf:e7:28:fa:00:
                    7c:eb:13:1f:07:de:c5:7b:a2:43:f0:6c:0f:25:67:
                    7e:38:4d:21:06:50:97:a5:b3:b2:13:de:85:e2:71:
                    b4:fd:dc:2a:4d:09:ad:96:8a:ec:a1:b5:ff:99:d6:
                    cc:e7:bf:f2:b5:6c:82:ad:93:ea:cb:17:90:ce:b1:
                    18:0e:fb:10:fa:fc:bd:a6:03:aa:f0:c8:ef:0a:79:
                    ed:86:5c:17:79:0e:0b:24:e6:2f:33:50:c7:61:d4:
                    b3:a0:e7:39:3d:7a:84:41:5b:cb:6b:ae:a3:f7:20:
                    a6:1e:cf:09:7d:7e:b2:28:3a:be:0b:55:a6:27:fb:
                    47:05:12:36:64:9e:04:04:2e:f7:5c:ff:e3:8c:c6:
                    a3:e4:5d:da:1d:63:39:7e:51:c7:8e:92:ee:6b:c6:
                    81:96:5e:c7:05:3a:58:a9:2c:42:88:ed:60:f7:93:
                    65:6e:7e:6b:1d:be:58:1d:a2:5e:89:7d:aa:35:92:
                    a7:9d:40:b1:bf:29:e3:ea:d6:ff:77:c0:34:21:03:
                    7f:a0:19:72:90:b6:31:f0:80:c2:02:d6:46:a1:fc:
                    04:b6:57:73:0d:71:a7:63:45:5b:b2:de:91:76:26:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B4:B2:9D:E4:B1:EA:B1:AB:1C:E5:CD:B9:BA:C1:1E:18:99:5A:69
            X509v3 Authority Key Identifier:
                keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:05:20:49:f4:40:53:7c:c9:a5:fb:e4:77:34:61:43:15:
         67:59:56:bc:70:d3:eb:68:4e:18:dd:20:cf:24:e5:b8:f3:f4:
         39:d0:c6:21:e6:61:7f:54:c3:30:b4:c9:aa:0c:08:fe:aa:fa:
         e1:07:8b:aa:cc:75:00:9e:a5:86:7e:54:db:27:bf:15:e0:c0:
         ba:54:9d:12:c0:63:e4:9b:f7:c6:7d:f4:bb:2a:f5:de:49:57:
         2e:4b:1f:59:9a:63:56:82:c9:c7:82:d5:61:97:4f:b3:4f:07:
         46:19:72:ae:f5:b0:f0:c3:12:7f:f6:15:bc:46:d9:33:15:3a:
         20:b3:0b:1b:0f:a1:60:89:df:20:37:49:ec:aa:35:f7:ed:76:
         40:dd:fc:32:5a:d9:63:02:23:98:a7:76:6f:34:31:c2:4a:74:
         98:12:cc:0e:63:55:b3:68:5e:ce:ad:4a:92:e5:07:88:dd:c8:
         cf:af:07:2c:c9:82:b0:b6:df:0f:1c:10:6c:da:14:00:13:e1:
         9b:c4:2e:a8:bc:f9:55:8b:56:37:bc:4d:66:75:3f:56:06:ac:
         ed:ba:1a:49:6d:3e:6f:cd:8f:a9:e7:2e:fd:34:39:76:63:8b:
         21:37:15:2d:be:ad:20:23:b4:d9:a3:cd:db:39:7a:6d:0c:ad:
         dc:de:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----