Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File:                     2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier:          pKMRn7yMiEQ3+r2W9K2cJ1nQHPp3yIn7NfGNw0vn5PQ=
Subject key identifier:   09:90:7A:DC:AA:E3:B9:C9:34:F9:0C:22:36:11:DC:1F:80:D5:EA:5E
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer:       /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial:       01962DF3D340088B62EF58C589CBF19E49A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: 6Bfq678GzZkTvwJGNGKSoTEQaRlvDcPl4szG5Wc6fME=)
                          2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:40:08:8b:62:ef:58:c5:89:cb:f1:9e:49:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=09907adcaae3b9c934f90c223611dc1f80d5ea5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:6b:d7:e7:eb:11:6e:64:3a:43:61:74:44:
                    44:48:2b:15:8d:e4:b2:b3:e3:10:51:d4:5e:c3:e9:
                    e3:02:ea:01:c4:50:d8:4f:c5:5e:bc:b9:42:a1:da:
                    81:cf:36:c4:38:ea:6e:a0:33:83:d2:ed:cb:33:21:
                    ec:ef:dc:ba:5b:f2:12:28:62:7c:d3:bb:2e:1b:fe:
                    d1:ef:5d:45:c0:bb:31:82:38:52:09:2a:a8:63:cb:
                    8e:ba:14:53:3f:be:c6:24:b0:f8:08:3e:57:c3:22:
                    29:a1:ab:9b:e1:a1:31:04:d7:e2:95:c2:b3:42:8a:
                    88:61:99:f7:e0:20:2e:6f:de:1f:d2:15:40:3a:8e:
                    85:b8:67:08:af:7b:49:5a:fc:d0:93:3d:a7:24:e0:
                    09:0b:e8:8c:ba:04:5a:1f:28:99:3b:5c:2a:00:3a:
                    e9:95:3f:7e:6c:90:a6:d1:c7:a6:8b:8e:23:45:de:
                    4b:33:4e:4f:a4:b7:5f:3e:00:90:6c:94:91:d6:15:
                    87:7c:da:c7:ff:73:77:47:d9:02:56:ae:87:26:56:
                    1d:2d:d8:c5:06:41:fe:59:e0:a8:9b:33:1a:fa:cf:
                    67:a3:22:f5:ef:e0:ad:43:9f:b9:5c:cb:01:a6:c5:
                    7e:3e:48:84:7a:da:ef:53:3b:f2:df:c4:ab:85:f8:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:7A:DC:AA:E3:B9:C9:34:F9:0C:22:36:11:DC:1F:80:D5:EA:5E
            X509v3 Authority Key Identifier:
                keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:89:1e:99:cb:0d:56:3e:15:17:81:44:32:1c:c8:21:a7:
         de:19:a3:cf:77:3f:a4:30:9d:df:67:09:79:0e:c3:ad:22:3b:
         da:a1:b9:51:cb:11:c7:da:2b:09:d6:b2:88:32:bd:a6:a9:fe:
         ce:ce:5d:08:e2:b1:28:1e:9b:d4:43:fd:5c:00:11:ee:01:11:
         db:85:10:7c:44:b1:93:85:67:00:b3:01:ec:c4:17:d9:70:d4:
         d8:9b:39:15:f4:3e:b3:f7:be:31:7c:13:d3:0d:11:a4:4b:93:
         c6:43:7b:38:f8:85:f0:b4:c1:85:90:b4:69:78:9f:f7:ce:da:
         46:e6:fe:5d:19:47:31:00:42:92:84:2e:ad:84:a8:3c:23:91:
         91:61:06:b2:66:9e:ee:a3:46:49:5c:2f:89:95:a1:21:91:99:
         d6:c9:74:c8:40:d7:f3:4e:8e:80:e5:b2:74:1c:ad:3d:11:fb:
         5d:6a:3e:c7:0b:7a:53:6a:1d:f7:8f:aa:5b:3c:ea:06:5b:28:
         81:f5:5a:67:b2:e8:16:55:c9:cc:df:32:40:5e:7b:be:92:61:
         e6:49:ce:e6:88:9c:46:5c:e4:3f:e7:6d:d7:11:6c:80:fd:6d:
         3d:c4:d0:41:b1:83:05:c1:24:f6:b8:c8:f0:63:d2:24:7c:8e:
         30:31:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----