Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File:                     2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier:          wSTimbRPhjW/dBwWhkFHOahVHvVpFgNP3pSMugXDFP4=
Subject key identifier:   E3:BA:20:AD:5B:D2:86:53:AE:66:21:8C:9F:16:ED:8D:05:FD:8B:7B
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer:       /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial:       01962F3DF9EF6A7CC35C7D60E5C06CB95167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number:          1374
Signing time:             Sun 13 Apr 2025 13:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:52 +0000
Files and hashes:         1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: 6rrFMmfvZXoX4QMRXoZ0j2vnvaymqwKwE8y3PT/PDB4=)
                          2: Y5hh8AgGKAUf_2S15Xwk_892p60.roa (hash: baZuJeVmztFazA/spLlePhpdINyXpI1DJgHdXLAL5/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f9:ef:6a:7c:c3:5c:7d:60:e5:c0:6c:b9:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
        Validity
            Not Before: Apr 13 13:01:52 2025 GMT
            Not After : Apr 14 13:01:52 2025 GMT
        Subject: CN=e3ba20ad5bd28653ae66218c9f16ed8d05fd8b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:c4:8d:e9:3d:26:2d:71:1f:e1:5a:0c:da:
                    b8:f8:1f:37:60:87:09:13:95:e8:00:cd:59:56:89:
                    cb:c5:03:17:17:c3:f0:0a:ba:9e:6c:57:19:48:13:
                    4e:1e:ca:84:26:cf:86:39:40:e0:98:36:d1:af:5e:
                    d2:f6:6b:3b:04:a6:b9:73:98:8e:ac:e1:7a:97:e2:
                    0a:0a:a0:78:11:b1:0e:8d:b3:14:94:92:ac:5e:8c:
                    f4:1c:0d:5c:80:15:0b:ba:27:82:da:4f:f9:8f:95:
                    61:42:58:28:4e:fb:64:f3:b9:7a:11:73:8b:7a:0a:
                    ae:a2:9a:ff:cb:96:15:5b:0f:81:97:ba:ef:89:1b:
                    2b:a9:f8:56:57:76:51:72:01:5a:4b:57:ff:03:f3:
                    d1:d1:07:cc:ae:bf:03:f9:95:02:a2:12:e1:0b:d9:
                    af:28:7b:d8:a7:8a:8b:69:74:47:83:6d:99:b5:7a:
                    f6:4e:a3:97:86:04:3c:9b:01:c9:06:d0:5a:fc:95:
                    45:b1:ae:5e:70:4a:6a:4b:45:62:24:f9:a1:f4:ea:
                    be:e9:76:ac:29:00:fb:59:1d:36:f3:a6:95:fe:25:
                    d6:6a:34:2c:91:b8:11:68:40:29:44:60:a9:dd:b3:
                    8d:43:e0:2f:c8:bb:25:2a:1c:23:07:95:90:bb:66:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:20:AD:5B:D2:86:53:AE:66:21:8C:9F:16:ED:8D:05:FD:8B:7B
            X509v3 Authority Key Identifier:
                keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:4f:dc:8e:66:0b:43:4f:da:a6:bd:a6:ba:8d:41:78:8f:
         ce:25:cf:d6:82:84:18:88:9c:d9:ec:dd:d1:2a:db:87:34:c1:
         49:c9:92:f3:fa:6a:2d:a0:44:61:9b:05:46:c4:05:88:46:5a:
         77:f3:bd:08:22:6d:46:54:52:3d:9f:bc:53:7d:fc:bb:3c:d8:
         4a:91:23:0d:f9:00:77:f9:3a:0a:07:ae:57:e1:f9:b1:23:07:
         5c:3e:01:53:06:cb:e6:b4:09:82:81:e9:b2:1e:24:ba:9b:18:
         3d:08:33:9a:a9:b4:5d:88:54:27:17:09:c8:43:e5:46:1f:90:
         eb:44:5a:9f:db:0a:a2:53:9c:00:89:52:74:37:c3:90:fa:66:
         d2:9f:fd:c0:c7:db:b4:e7:a5:b9:fe:a5:15:3f:4d:c3:04:d8:
         40:6a:99:7b:4a:f8:cb:23:a7:eb:33:ac:1d:c4:39:ad:26:7b:
         fb:7a:21:23:b5:d1:0b:dd:4a:f3:09:e3:34:91:35:e0:8d:6f:
         4d:f9:52:db:45:de:c9:de:c2:c9:6f:21:1a:98:2c:aa:3a:b1:
         4b:b5:df:ed:8a:35:c5:c3:85:54:a7:23:71:4a:e5:36:d7:9a:
         62:c0:aa:d9:0f:80:63:1c:d0:10:f7:d6:15:52:e2:1b:ac:c4:
         72:a8:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----