Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File:                     2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier:          kaa4lUv1SfSUq8O389apxwk9mQyuhS9o0EIMEAsQR/o=
Subject key identifier:   67:C4:94:B7:5A:74:D4:2F:74:C5:F2:26:1A:A4:E6:E2:1D:E3:9C:7D
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer:       /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial:       01962F3D625AACD28A3574A406236066AA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: MwnpeI9bM9NmxzVgg0Prac8MlfZ2pH0gMXMvwxtQIrk=)
                          2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:62:5a:ac:d2:8a:35:74:a4:06:23:60:66:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=67c494b75a74d42f74c5f2261aa4e6e21de39c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:95:00:52:4a:db:c9:6c:54:bd:55:1d:3b:
                    1d:cc:93:01:12:90:41:c9:18:88:ce:fe:6c:48:09:
                    67:aa:57:80:f5:b8:d9:ba:d4:0d:db:f4:65:c7:69:
                    9e:9b:4b:71:97:2a:96:98:2d:78:a6:fa:f1:d6:d6:
                    1a:48:e0:32:0a:d1:ef:49:36:53:52:ff:3e:01:83:
                    b0:9d:5c:9b:25:4c:cc:fc:57:16:98:92:ac:cd:bd:
                    44:54:f5:3b:68:18:e1:f1:d9:0b:ee:28:67:8c:a2:
                    ad:4e:57:09:2a:c7:c3:a6:40:08:0f:73:99:cc:72:
                    26:01:44:a2:ef:6a:31:96:eb:30:af:07:3e:19:bf:
                    8d:3d:4c:66:5a:1f:2c:33:03:dc:81:2a:33:8b:c9:
                    79:06:35:05:5e:4b:d1:07:e9:d9:e0:d4:65:ae:17:
                    55:50:9f:e7:f1:b2:74:ff:3c:0c:0e:15:e5:c3:af:
                    83:a4:cc:33:95:0b:f7:9c:bf:cf:b9:72:d7:24:68:
                    8a:9f:ae:48:ae:4b:3f:51:44:97:81:13:ec:cf:1f:
                    41:95:77:7b:ee:9f:1d:29:21:c4:7d:88:4d:61:ab:
                    03:64:2b:70:09:21:44:bc:3e:55:dd:b4:ad:a6:2c:
                    8b:d0:1c:c0:87:41:f1:f2:cb:87:ca:45:99:3e:a7:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:94:B7:5A:74:D4:2F:74:C5:F2:26:1A:A4:E6:E2:1D:E3:9C:7D
            X509v3 Authority Key Identifier:
                keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:cb:7e:77:9d:96:56:e7:42:74:6f:66:20:00:86:f1:e2:35:
         86:8a:f9:eb:76:de:e0:61:bd:d4:c5:ed:db:4d:f6:b2:a6:5b:
         f8:0b:9d:17:bd:e0:ec:91:6a:a5:24:b1:f5:bb:4c:ee:fa:a5:
         6f:a3:5c:3a:3c:78:ee:c5:33:47:50:1d:a5:55:1e:d2:44:5d:
         19:64:14:8d:0c:45:80:9e:09:c2:40:9a:5e:bf:a2:c2:14:65:
         37:1b:e6:50:de:ca:b6:45:85:cb:25:96:d8:c6:19:8d:bb:de:
         50:c6:76:55:15:18:7c:6f:8f:06:4a:84:b7:79:ea:30:5d:44:
         a4:e4:a6:ab:b3:82:4f:05:c8:19:e2:bc:59:f1:53:27:7b:6d:
         06:01:1b:4f:0d:9d:61:81:cf:04:f9:50:a6:93:66:90:79:01:
         d4:07:ad:d0:eb:22:ee:36:e1:a3:14:9d:b9:5f:9f:74:ee:20:
         a1:b4:b4:5d:b4:b7:9d:3b:db:3b:35:49:b1:18:a7:e7:97:6e:
         84:59:79:da:19:96:b5:07:10:40:7b:ee:3b:00:70:a3:d0:e9:
         8c:4d:10:b1:8c:8c:39:66:87:a5:b4:69:a4:38:c3:6f:80:62:
         a4:88:0d:94:9f:9b:f7:10:5d:06:19:63:db:1a:f7:35:ec:c4:
         b9:7b:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----