Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File:                     2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier:          lllatdSqX6dctjCcOxynWuWnOsua0HBo0n8W8T6pT5E=
Subject key identifier:   65:E6:22:9E:9E:4A:B5:51:AD:73:FC:0A:B5:9D:EB:E3:69:99:1A:15
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer:       /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial:       01962FAB19C36DBAFE707AD8D478E2272D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number:          0F48
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: kgp4uWN8AJ2K2m53Obj04b2ufAcqDQP5GdW+vXV0cF4=)
                          2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:c3:6d:ba:fe:70:7a:d8:d4:78:e2:27:2d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=65e6229e9e4ab551ad73fc0ab59debe369991a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:2f:ed:c2:24:d3:e7:2c:fe:6f:63:00:f0:
                    59:a7:89:a4:b3:95:cb:80:7f:75:41:3e:35:04:55:
                    b0:7d:a7:aa:b6:4f:e8:81:67:8d:f6:03:03:07:b3:
                    7e:2a:a8:1b:fa:ca:38:20:68:ff:df:be:c1:81:26:
                    ee:08:79:b2:ec:02:ab:6b:58:b1:fa:c3:37:6c:e4:
                    b8:cb:c7:f7:ea:e6:7f:44:47:4a:2c:63:f7:5b:61:
                    59:51:5d:ec:15:b2:70:39:32:c6:b8:cf:96:aa:48:
                    e4:8f:b1:a2:ea:74:2b:7f:fb:00:2d:25:bd:81:a8:
                    d4:c2:21:df:2b:47:5c:11:86:08:c5:db:f1:c1:68:
                    9b:aa:3d:31:cc:4e:37:20:c1:12:40:79:83:97:da:
                    d9:f7:42:0d:2a:59:8e:4b:f1:6b:74:d9:18:55:4c:
                    75:b0:6a:07:18:19:2d:9d:9e:e8:3a:7d:4b:47:23:
                    03:f8:c9:6e:f7:9b:69:59:8f:4a:79:df:b9:1d:78:
                    d1:be:0d:0e:67:12:aa:2f:37:b9:80:23:2d:dd:41:
                    fd:75:d1:59:10:fd:0c:3b:ab:24:51:c2:86:d0:76:
                    2b:a3:16:f3:de:d6:45:5a:1e:6c:1f:b5:d2:2e:92:
                    33:2a:19:f3:f0:27:69:82:77:9a:de:4d:ff:68:99:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E6:22:9E:9E:4A:B5:51:AD:73:FC:0A:B5:9D:EB:E3:69:99:1A:15
            X509v3 Authority Key Identifier:
                keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:d5:51:1f:e4:db:37:fc:21:a1:58:b3:7e:c3:96:2a:60:
         0e:6f:1c:a1:53:6f:43:60:a3:bb:ce:38:bb:8b:1c:47:20:30:
         36:a0:3f:b2:c0:ce:28:32:f4:da:d9:08:90:62:ca:31:0e:d0:
         65:87:a6:25:99:87:31:7a:06:6d:02:9a:a9:78:b8:02:3d:97:
         f2:84:83:87:45:79:ad:83:92:d8:9d:43:a3:dc:8f:97:7f:57:
         f7:5b:2e:f0:fa:8b:40:ff:a1:02:48:87:7f:b8:2f:df:c4:5d:
         23:cb:8c:ac:9a:be:64:d7:36:be:85:eb:be:02:da:75:1a:80:
         a8:58:a3:6a:2c:c0:37:fd:95:92:87:41:15:64:13:79:c3:fd:
         1a:a7:ba:f9:6c:dd:0b:1a:2b:13:28:01:66:1d:1b:ae:44:40:
         55:07:b9:23:8e:96:8b:46:ef:9b:14:8c:80:ab:4a:de:31:46:
         c9:0d:b5:c7:51:41:d3:72:7c:ae:4a:b2:6c:de:71:dc:47:14:
         bb:5a:2d:8a:5c:d4:22:ee:4d:2b:00:4b:9c:89:79:16:2c:1d:
         2a:39:22:c0:44:b7:85:04:0d:47:b0:7d:6e:46:02:5a:71:93:
         e5:4b:82:08:e5:14:83:0b:1f:6e:2c:18:8d:63:23:50:63:dc:
         be:0e:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----