Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          cz7owEny1DKJP8hhCIAqYWhLQFVNdsyvlmqF2n7KaIo=
Subject key identifier:   EC:2F:38:76:33:EF:F2:BB:82:B0:03:94:D2:AA:03:22:CE:13:9D:88
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       01962FAB75924340929DF21BEA93FC66DBD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          0BB5
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: M4GPQVYlgqFAMHX/zLpaKucpEOPeqec6opwBxWEcDks=)
                          2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:92:43:40:92:9d:f2:1b:ea:93:fc:66:db:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=ec2f387633eff2bb82b00394d2aa0322ce139d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:dd:fd:ea:68:ce:e3:05:a3:1c:69:c3:ea:
                    6b:6e:1b:95:f6:31:02:19:8f:db:28:c0:48:78:fe:
                    23:44:72:d7:0c:71:fa:59:7a:f0:1c:96:74:e8:26:
                    40:24:25:50:c9:eb:0e:29:22:5c:03:5f:1f:b5:98:
                    11:5e:56:d2:47:ee:b9:49:a6:61:52:58:88:1a:06:
                    0c:22:84:07:9a:05:d1:0f:ba:6a:3c:37:c3:29:0f:
                    88:30:c6:59:5e:43:bf:11:e2:be:a5:1f:a4:a7:78:
                    d1:45:97:89:2b:77:53:c1:3c:89:47:22:92:e5:38:
                    c5:1e:0d:d8:88:e6:ca:72:e6:14:dd:9e:34:0f:29:
                    77:43:bc:8c:16:1f:6f:ad:18:23:30:00:1b:49:15:
                    ef:e7:16:3c:d8:97:9b:29:e6:9f:09:0f:be:11:82:
                    ac:ad:d3:b1:ec:fd:1d:a2:d8:1c:01:32:06:f7:00:
                    fa:bd:e7:38:4a:08:cb:a4:1d:be:9e:d4:11:c3:9a:
                    31:5d:10:1d:a2:01:b6:a3:8a:db:88:0d:11:16:ec:
                    6b:67:7a:72:9f:e4:ca:d4:b7:8e:7b:b5:b2:17:b3:
                    ed:38:86:03:3d:1d:c6:d4:5d:cf:66:1f:f7:bb:c8:
                    6d:31:34:70:2d:01:a0:53:3d:04:82:50:70:b2:5d:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2F:38:76:33:EF:F2:BB:82:B0:03:94:D2:AA:03:22:CE:13:9D:88
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fe:9d:fe:0b:7e:c4:8e:9a:97:00:1c:cb:eb:29:6b:c4:7f:
         45:94:c8:e1:6f:95:22:80:88:40:62:c4:f0:f3:fe:fa:57:b2:
         c0:9e:18:fd:ad:19:1d:ee:78:2a:65:bd:ae:98:1d:ab:ed:e8:
         64:04:79:40:8a:95:78:0b:f2:15:fe:d8:2d:7a:8f:79:ce:e5:
         ab:6d:c0:93:a8:0a:ab:83:eb:5c:57:58:ac:67:e4:6c:ce:20:
         c4:a5:b6:de:0d:2a:67:ae:cd:62:ac:a3:2b:5c:56:98:2c:1e:
         1e:98:a7:5e:de:b1:d4:3f:3b:02:12:9e:ff:b6:c3:21:8b:da:
         6a:44:c2:9f:8f:cb:1b:3e:c3:c4:1c:fb:58:f1:a6:ab:78:24:
         f0:6b:d9:4e:ed:01:02:df:b3:63:2a:67:b7:78:1f:1a:20:99:
         5f:e6:fd:62:fe:d6:74:a7:24:ba:f2:7d:df:e6:7b:03:00:6d:
         9a:49:56:38:02:13:e0:7c:e5:68:b2:d1:b3:d0:fc:23:43:c2:
         4f:49:c2:19:ae:85:8e:20:82:4f:fa:28:80:13:bb:87:7c:21:
         f0:10:01:45:d7:60:f2:f3:27:60:19:ec:58:1d:b9:84:97:ec:
         c5:3a:63:c8:b2:d2:0e:12:04:a3:e6:a5:6d:05:a9:e4:7c:35:
         95:d7:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----