Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File:                     2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier:          8TzGn2jIz9+D1PNC5KoJaI78YdiooInvvkA6dFpza0Q=
Subject key identifier:   17:7B:76:B6:2A:38:06:11:2B:68:6F:87:EF:D4:D6:E7:55:AF:88:1C
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer:       /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial:       01962FABA3B3BABA6F286B0F46310AC8AC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number:          0E14
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: VHL+RAxC+Jpcm2tgvOGUHTW7c1RuLSystGrrUIxX3x4=)
                          2: pGBMbGUVmfmMQKR1-BVF--sKK7U.roa (hash: ayj/a/EtllFNMGD1HzcA6KglHzS5bxHd+NVb8RRWcAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a3:b3:ba:ba:6f:28:6b:0f:46:31:0a:c8:ac:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=177b76b62a3806112b686f87efd4d6e755af881c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:1d:72:46:d2:7c:1f:d1:99:1f:2e:aa:56:
                    77:39:00:70:de:64:81:ca:41:4e:b3:5b:bb:e0:b5:
                    35:a7:66:a0:49:c0:54:54:e7:2b:03:12:12:0d:7c:
                    c6:1c:72:fd:fe:87:14:2f:95:35:21:16:f0:11:bf:
                    e8:18:e7:79:1c:bc:38:3c:95:d8:63:c4:59:19:71:
                    ff:df:d6:ef:e0:07:02:36:30:8b:bb:2e:72:c0:d2:
                    a1:91:49:f4:0c:61:89:1b:fe:e7:ce:a9:e7:ac:22:
                    78:65:4a:56:ab:69:c9:5f:2d:38:23:8d:a5:6e:e9:
                    0d:f6:9e:a7:22:61:89:93:87:03:fa:50:71:48:33:
                    e7:8d:03:a0:38:51:82:d3:27:76:ba:12:21:6d:05:
                    3d:1f:f2:13:c9:70:48:db:72:12:cb:69:a7:a2:3c:
                    cf:98:89:d1:43:8e:06:e4:56:e7:2e:a9:36:1a:38:
                    cc:ff:be:bc:f5:ff:1c:e6:f9:de:da:11:8c:73:2f:
                    18:52:66:d1:13:ae:41:fa:5d:79:35:8d:14:f6:64:
                    22:b6:0d:80:f5:0d:67:c8:dc:c3:f2:89:bf:9b:62:
                    17:48:20:67:d5:c3:c5:de:db:20:65:56:27:30:aa:
                    f4:f3:ee:6a:11:99:8d:d2:b4:c7:d6:3a:44:7c:2e:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7B:76:B6:2A:38:06:11:2B:68:6F:87:EF:D4:D6:E7:55:AF:88:1C
            X509v3 Authority Key Identifier:
                keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:13:60:33:83:d7:76:67:25:5f:6a:3f:56:fd:d3:d1:24:
         7d:ed:dc:94:dd:17:06:a0:67:05:cc:b0:85:b3:e2:66:9b:ae:
         66:1c:8f:b2:e1:f2:89:1d:33:54:67:30:2b:ce:92:1e:35:56:
         96:2a:03:6b:b9:ee:16:18:dc:b9:1c:12:b4:63:b9:16:57:66:
         b4:c3:cb:c1:b0:2b:5c:62:c2:d7:4e:c6:27:f4:f4:fc:aa:e8:
         2d:c7:45:a7:fc:a0:6e:5d:82:84:37:0b:aa:af:58:da:44:b0:
         d2:7b:ab:97:10:68:58:79:cd:54:eb:50:e1:66:75:c7:1a:fd:
         7c:97:92:fa:3a:a9:66:94:51:a7:56:d1:19:7d:1e:0c:a5:7f:
         3b:01:00:cf:21:91:c9:b0:00:80:5c:0c:19:37:5b:93:7f:53:
         e5:35:89:a8:92:47:1f:dc:64:39:6a:fd:3a:09:62:db:12:39:
         6d:e7:61:33:07:10:51:9d:04:8f:e4:c2:7f:53:31:9e:01:d4:
         02:a9:62:63:cc:73:ec:ad:c0:41:42:d0:1a:3d:f3:41:dc:74:
         57:b4:55:af:0f:aa:2e:c0:34:b8:65:65:0b:8f:31:f9:be:03:
         dc:e8:27:40:6e:bd:e5:d2:66:c5:65:d8:8e:3b:0e:8a:0a:1c:
         57:eb:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----