Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File:                     2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier:          32q3giymJ0vXXG6cltaC+gKxw/DsfBwswm9DwhXgMpM=
Subject key identifier:   E5:E4:92:27:C8:36:6C:A0:6E:AB:90:03:1F:E5:7B:AC:20:84:FF:0E
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer:       /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial:       01962E2AD2A3943B45A0C0F3BCD77A4919CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number:          05AF
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: QUxiKpSEtrj1syrhJQC6UCunWaswS4foBgS0dnuDVio=)
                          2: O5dwSGpy0OL0LjPB3wap3UtIwjM.roa (hash: cR4roCPU2uE8JstXy3PNObd3k08fMc1QAFzMuYnt3oU=)
                          3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:a3:94:3b:45:a0:c0:f3:bc:d7:7a:49:19:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=e5e49227c8366ca06eab90031fe57bac2084ff0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:12:d3:8b:74:9c:d3:88:32:f2:b8:eb:5a:
                    3e:c0:3e:ff:74:17:94:7e:29:87:84:20:e1:26:3c:
                    7f:b3:56:8e:93:71:10:32:ea:12:b8:41:56:87:ae:
                    2b:c3:9c:b6:7d:41:ec:be:a0:af:f1:d7:23:77:91:
                    05:9b:6d:c7:86:8e:f5:2e:f7:42:77:7a:d6:a2:1a:
                    de:b3:40:96:6b:9f:88:36:77:6e:c6:b6:0a:17:bd:
                    06:20:3f:b0:6d:5b:7a:43:37:13:64:7e:e1:61:98:
                    ad:e8:02:8d:b6:17:4b:5b:1e:77:52:3f:76:2c:7e:
                    06:8d:fc:d7:b7:1e:80:46:8c:fb:c7:a8:e6:c2:38:
                    ad:42:69:81:64:ce:61:25:12:70:79:29:46:65:57:
                    8a:5c:31:25:c9:f6:39:a8:f2:d0:8a:a1:36:4b:07:
                    de:23:b1:93:0a:ed:ce:58:30:1f:25:c1:a4:0c:a1:
                    f4:5d:a8:3a:34:a2:af:36:48:90:bc:a9:46:d2:aa:
                    46:3a:b1:ed:4b:8b:9d:8a:f4:59:01:7e:0d:51:23:
                    63:64:5f:1b:20:6a:91:78:3c:3e:33:95:3a:71:8c:
                    62:2b:b8:01:78:7b:d9:65:87:0e:bc:78:42:62:6b:
                    82:ed:e4:ae:c8:ef:bf:a3:9f:67:2f:b3:a4:b8:d2:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:92:27:C8:36:6C:A0:6E:AB:90:03:1F:E5:7B:AC:20:84:FF:0E
            X509v3 Authority Key Identifier:
                keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:50:e4:e8:66:ce:f2:cf:a3:7f:ac:5c:4b:f0:45:1c:5d:
         a6:fd:12:4f:e9:34:84:cc:9f:ae:06:f8:1b:8e:72:29:99:bd:
         33:dc:6c:d6:19:66:c4:5a:da:14:45:d3:63:8c:fc:79:18:cc:
         5a:94:94:ad:d4:eb:a8:b8:d2:f4:89:c1:f3:fa:b6:15:03:e0:
         0e:68:29:a7:a1:f9:6a:f4:b6:fe:d7:6a:00:75:1a:23:b4:e0:
         5d:40:96:9b:db:ca:03:94:ae:99:97:bf:ad:73:39:3a:19:5b:
         b9:6a:9e:b0:7a:43:97:77:9b:d2:2b:5c:f5:93:67:92:93:89:
         a6:c6:28:56:de:4f:52:d6:97:04:60:67:24:15:70:2d:a0:12:
         11:bc:3d:ad:6e:f6:1f:99:e4:3d:97:be:2e:73:e5:b4:d6:bf:
         4e:36:95:6c:4b:dc:db:b9:e2:0b:93:be:b5:21:89:64:c4:c3:
         b8:78:46:4a:07:f8:98:52:c8:ad:3e:60:0f:61:de:7b:c8:97:
         9c:6f:6e:cc:5f:23:c0:2c:8f:e2:2b:eb:d5:34:8c:c5:90:5d:
         1c:5d:6c:8c:4e:7b:a9:e8:7b:3d:1d:f4:ed:51:39:02:40:ab:
         0a:fb:2f:cc:8e:d4:79:2f:b2:fc:f8:12:93:d9:55:e7:e3:60:
         12:c6:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----