Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File:                     2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier:          TqLUzanm+3DHKY0nnO+nzDpb25cVcpVEDzOdg2TMbsI=
Subject key identifier:   A1:DB:47:C0:E3:89:3E:41:CE:36:F4:17:73:40:B7:7E:44:FC:94:8B
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer:       /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial:       01962F3D35E045789FACACF7567E954A8D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: Rk1QLIb+gn8gs5Sn0upP/vHJSW76eaYKF8YvOF56al0=)
                          2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:35:e0:45:78:9f:ac:ac:f7:56:7e:95:4a:8d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=a1db47c0e3893e41ce36f4177340b77e44fc948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:60:ca:c4:86:af:73:05:4c:c5:44:42:0e:
                    2c:53:6b:a4:96:85:40:d5:03:2e:bc:aa:fe:1a:e6:
                    8e:ad:0b:e9:2f:a0:d3:0d:da:d9:de:d5:57:a9:18:
                    4e:31:2b:9f:8d:b8:bc:ad:a6:83:98:74:2d:10:eb:
                    8b:92:3b:1f:f1:38:63:34:28:12:69:24:12:37:25:
                    b9:5f:1e:51:b7:25:31:52:12:52:c9:47:63:17:14:
                    19:94:ec:c9:17:0f:13:1f:dd:40:11:23:d8:39:fa:
                    ba:25:6e:ed:00:8f:0b:8b:1a:49:40:92:f5:1f:2b:
                    75:f6:8c:8c:5b:dd:5a:a6:c1:52:3c:da:58:83:e2:
                    77:a5:d2:9d:03:69:15:d4:44:c3:eb:54:1c:6b:6a:
                    f9:5d:17:bf:c8:29:32:1e:41:13:f3:bb:ce:d9:50:
                    56:42:2e:ed:59:f8:cf:f2:a1:5d:7e:0b:b8:15:c2:
                    bb:d3:ba:9c:0e:9a:45:ff:a3:51:6c:eb:7d:06:e7:
                    8f:47:5f:3c:a0:70:8d:4d:32:34:2b:9f:a3:70:64:
                    73:32:b8:cc:28:3c:40:c9:c7:79:50:70:9c:68:15:
                    0c:ef:52:23:63:bc:20:2a:65:58:f1:bf:bb:b9:d8:
                    99:64:43:a0:4c:be:2a:f7:5f:10:61:a0:5c:c3:16:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:47:C0:E3:89:3E:41:CE:36:F4:17:73:40:B7:7E:44:FC:94:8B
            X509v3 Authority Key Identifier:
                keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4a:dc:80:8f:e5:c5:0d:f6:e4:b6:ef:71:ac:7b:2f:b5:d9:
         4b:91:7c:d2:bf:34:f0:6f:91:61:4e:5f:9d:52:fd:45:c0:10:
         c7:44:0a:6c:31:ce:0e:60:90:85:ff:f8:e3:bc:f3:4b:a2:cf:
         e8:34:2c:a7:a8:a4:11:24:de:18:5e:08:2e:b4:88:97:c6:81:
         df:8e:8d:20:74:c9:76:cf:15:b9:68:5a:1f:16:bd:d0:da:fa:
         f4:fa:65:9e:6b:ec:78:62:5a:2e:f2:dd:48:fc:57:b3:62:50:
         bf:44:f2:38:69:ed:49:c6:54:f6:da:32:66:50:c8:bf:48:c3:
         d4:e4:cb:03:cc:18:48:8e:d6:31:19:d9:f9:ec:12:82:b7:a9:
         82:1b:70:13:f9:24:f3:d6:04:d6:4d:50:d8:d2:3a:b7:4c:36:
         c7:a8:67:23:09:39:57:a7:9f:7f:23:0e:99:46:35:ae:15:b9:
         fe:2e:04:74:9a:99:55:19:3d:ff:1e:86:28:35:c4:e3:b0:c6:
         22:a4:a4:b6:7c:17:f8:68:bd:00:49:80:95:49:40:7c:5b:cb:
         8a:1c:e5:eb:4f:9e:d7:dc:1c:a5:6e:95:53:67:08:fa:2b:3e:
         bb:d0:c4:ed:5c:22:f6:46:8e:9f:ba:57:30:92:67:5e:ed:0f:
         9f:20:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----