Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File:                     ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier:          oQpXLz/DSHRgymC9Q36O94f6K5uhENNFlhcAZlukznw=
Subject key identifier:   2E:32:1F:CA:DA:45:05:1D:12:0C:F1:B8:33:0A:60:1A:BC:2E:C3:03
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer:       /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial:       01962F749E098D1482A812051DF9B70772F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: GfObDZI4DNHOE/+Bwq0Wgvz9DT5Q+IMfYlruER0kh/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:09:8d:14:82:a8:12:05:1d:f9:b7:07:72:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=2e321fcada45051d120cf1b8330a601abc2ec303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:d3:b7:a2:6f:d5:41:5c:51:38:11:64:28:
                    bb:c6:a8:b8:ad:9d:61:fc:32:3e:53:ea:07:ca:27:
                    fb:9c:df:e8:f9:af:fd:57:31:84:da:21:c8:ce:05:
                    71:71:b5:0b:2b:0b:23:8e:37:1f:e5:83:91:85:87:
                    70:df:5d:2e:04:a1:ce:42:f7:f2:72:3b:9b:c5:37:
                    3b:da:7e:ae:bd:77:f2:09:2f:2e:6e:4a:46:eb:49:
                    8f:31:eb:34:6a:0c:9f:9e:e7:b1:6d:17:4a:ce:a1:
                    c7:e8:3f:06:6e:48:ef:9d:3b:15:d5:08:18:a7:0c:
                    03:a9:37:91:68:52:ad:d7:db:4f:bf:8c:3b:2f:aa:
                    24:a3:48:28:35:12:3a:bb:b1:de:9b:5a:7d:7f:75:
                    e2:3a:90:8d:81:fb:73:5f:3b:96:86:20:64:de:ab:
                    e7:66:20:3d:1b:59:3e:46:c7:f8:f4:b5:ef:06:c7:
                    df:55:ac:c7:99:aa:27:32:3b:fe:49:6f:fa:93:51:
                    8b:c0:0d:21:60:45:7f:5f:7c:23:4d:9f:9d:62:00:
                    67:2c:a9:15:57:cd:68:53:ed:a7:57:71:e7:a3:6a:
                    53:61:4b:74:84:29:23:ec:96:a8:00:fe:34:92:20:
                    96:8d:00:06:f9:8f:f6:2e:78:86:17:2d:76:b9:de:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:32:1F:CA:DA:45:05:1D:12:0C:F1:B8:33:0A:60:1A:BC:2E:C3:03
            X509v3 Authority Key Identifier:
                keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:f8:ee:fa:99:96:f3:dc:b5:2c:61:38:d4:e6:ed:e8:2e:
         d9:20:a2:8c:e2:8f:79:0a:d5:eb:c7:ec:b5:aa:0a:f1:ce:c8:
         49:b1:76:7c:60:ee:32:c9:4d:78:45:cb:15:f1:c9:48:bf:3c:
         7b:b8:c0:a3:43:1a:bb:02:7a:f5:fb:8f:84:04:11:bc:19:2b:
         ac:70:bc:04:c9:77:86:76:42:7d:98:11:d3:44:21:94:d3:08:
         2d:00:7d:c1:ca:81:66:8d:d7:f8:ef:9a:5a:09:43:f7:b6:8a:
         d0:67:fe:b5:fb:d1:68:be:20:2f:d3:bb:77:ee:07:a8:60:19:
         f4:10:8b:8f:e6:6a:66:53:9f:57:d9:ec:c0:b9:86:5f:32:5b:
         d3:e7:f2:e5:53:2f:bb:6e:4b:1e:37:b9:29:5d:c8:5a:cd:14:
         12:41:bd:60:e8:14:4b:b9:13:bb:d3:60:fb:09:b8:78:ab:bd:
         52:36:ab:5a:16:45:f5:e0:e2:ae:1d:5f:5b:1e:fb:c5:08:4d:
         3d:78:da:25:67:a4:91:b7:87:ca:f4:4c:9b:e5:39:00:64:29:
         c9:f5:5c:05:30:e7:68:c5:11:9a:df:2d:5f:4a:57:c8:ba:ad:
         b8:e5:4c:f7:ca:b7:0e:27:8a:35:07:9b:e5:2f:36:5a:80:89:
         ef:37:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----