Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File:                     2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier:          68u4tOTLoyVmCP69aLwL6e5qO36ovcFpMNZei3WHLeQ=
Subject key identifier:   C8:F5:86:BD:0C:B5:0A:79:09:42:06:90:18:E0:A8:75:70:BF:91:E1
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer:       /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial:       01962E2AC81B93BC968F7F29F5F868900890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: xL70gPCmVFG+FfREWPt13xKHlteGaPOI2cQQjGqSjAk=)
                          2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:1b:93:bc:96:8f:7f:29:f5:f8:68:90:08:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d977120937500eb46696428962e510e02c348e6c
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=c8f586bd0cb50a790942069018e0a87570bf91e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:bb:86:29:2a:b6:4e:98:53:f0:c9:f7:2a:
                    94:a6:86:44:ad:df:e8:8e:97:8a:99:59:22:52:b0:
                    3a:ae:d0:e5:84:e3:3a:91:6c:33:3c:82:51:1e:6e:
                    c6:2a:b2:dd:b9:08:c9:bf:e0:22:b4:13:ba:51:be:
                    83:4c:0b:9c:de:39:a2:33:c4:9e:9a:ef:47:55:f0:
                    67:91:3b:88:61:8d:b1:c5:d2:7b:79:6a:95:f3:48:
                    10:c3:5a:61:28:87:05:03:a7:16:08:24:6c:12:19:
                    fa:8c:2f:cf:30:f0:5d:ff:88:b1:38:70:1c:b4:6c:
                    f6:ab:38:61:20:d8:5c:7d:06:04:e2:13:31:46:3e:
                    4a:d6:46:e9:8e:a0:69:9c:70:46:cc:40:21:43:62:
                    2b:96:07:d1:af:ba:2f:1e:b6:9b:77:bf:f1:44:f6:
                    e5:c8:81:9d:13:95:78:e1:05:6e:12:8d:a1:8b:aa:
                    af:eb:28:a5:ca:65:80:72:af:1c:b4:3f:45:6e:7a:
                    64:fc:a8:10:1e:0a:d8:31:d7:17:ef:7f:3c:71:54:
                    fe:11:f3:c6:d2:79:ec:14:00:b8:6e:fa:13:29:ab:
                    3f:ce:a4:88:df:2a:d1:36:ff:f8:a2:c8:07:4f:a7:
                    2c:b5:43:f8:b4:09:cc:6b:72:2c:0b:fc:23:5d:08:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:86:BD:0C:B5:0A:79:09:42:06:90:18:E0:A8:75:70:BF:91:E1
            X509v3 Authority Key Identifier:
                keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:cd:a5:f6:74:92:f4:05:20:e2:b7:33:05:e7:31:6f:22:
         b8:fe:89:66:d1:ab:7f:ee:cc:26:5d:22:9e:2c:d5:79:40:0d:
         b0:3f:59:13:ce:68:99:c1:66:40:18:e4:37:5b:98:25:38:7d:
         3e:cf:c6:c0:08:66:55:ef:04:ea:6e:e8:4a:85:ee:1a:6f:89:
         e9:13:62:68:fc:72:c9:84:72:e7:e5:ea:0e:bb:56:09:df:b7:
         aa:b9:b4:85:18:6a:3e:a2:59:d9:ad:21:f1:6f:ad:50:fb:bf:
         8b:34:fc:c4:aa:00:dd:74:fe:01:2f:d7:cf:4d:73:4e:b8:31:
         25:95:5e:8a:4a:16:b8:ee:7d:65:b3:6c:64:9f:92:d2:bd:f5:
         5b:32:04:9a:ca:1e:2b:0a:b2:ba:34:3e:bb:49:22:2a:b8:13:
         29:5e:75:91:35:49:d5:e6:cb:b2:6e:ee:4b:d5:4f:3f:c5:7f:
         27:1b:49:df:b5:b6:78:59:89:6d:89:89:70:90:b1:1d:2e:0b:
         5b:a8:59:fc:0e:6c:12:5d:36:c9:12:4a:bd:7b:6c:68:08:bb:
         14:bc:8a:94:92:2a:1a:e7:a1:e1:44:3d:67:38:73:5d:76:d5:
         bb:64:7c:d1:17:0a:55:f0:65:12:2d:a3:84:03:d9:52:ed:c9:
         8b:0b:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----