Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File:                     2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier:          3LrVrR7qd7weH1Tx2XdX9/bf6++FaqIJhoih7sR3Iq0=
Subject key identifier:   ED:FA:B8:D9:4C:8C:A5:A5:FD:9B:AE:43:7D:89:EB:A0:30:21:F1:2B
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer:       /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial:       01962ECFCA18B0F60AD7A076E82105452F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: FcgBk+B+ifsqCQZD1QC/gYeeFa4Muf7atkMYxDqIap0=)
                          2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:18:b0:f6:0a:d7:a0:76:e8:21:05:45:2f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=edfab8d94c8ca5a5fd9bae437d89eba03021f12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:e4:52:d8:91:8f:3b:a9:3e:c1:c8:67:14:
                    60:43:0a:36:bd:97:49:88:c0:e4:b5:05:bd:fb:25:
                    d1:af:40:36:ac:a1:9a:75:98:e5:a9:50:dd:ff:71:
                    45:a6:1f:fb:d7:71:e1:49:b2:19:c5:b5:0d:1b:a9:
                    d2:54:56:71:3a:77:c9:6f:0e:bc:dc:7e:5a:c6:bd:
                    13:16:b9:2d:d8:36:6e:68:05:6d:95:49:4e:45:c6:
                    03:63:72:fe:68:02:18:22:9c:cd:f5:74:be:ea:6f:
                    fe:15:22:f3:fd:a1:b8:af:39:64:20:91:47:15:94:
                    7b:8b:ee:32:d0:34:76:4c:bb:63:08:a2:38:da:4d:
                    c5:e2:9e:0a:4c:af:29:1f:81:ad:79:7d:ed:52:a4:
                    db:2b:3f:c5:17:fb:81:e7:fb:1e:ed:99:2e:56:be:
                    08:c1:f8:a7:f9:0a:7a:e7:7e:9d:60:ea:ac:ee:63:
                    e7:6f:f4:81:f3:98:45:98:94:40:02:31:ff:52:03:
                    16:14:06:64:bd:1d:cf:7d:a2:22:07:89:16:ec:48:
                    f5:9f:84:95:e6:ec:7e:5f:11:f4:02:2a:d2:84:15:
                    e4:77:9e:bf:88:16:3a:27:f2:76:e0:a9:0a:6a:be:
                    0e:15:68:cd:ef:9e:40:f0:4e:ec:44:7f:ad:ac:2e:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:B8:D9:4C:8C:A5:A5:FD:9B:AE:43:7D:89:EB:A0:30:21:F1:2B
            X509v3 Authority Key Identifier:
                keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:55:f6:6f:81:75:3d:b2:57:3d:54:bc:95:85:61:50:44:
         17:5b:f7:5c:f6:ae:d2:f1:9a:8f:96:bd:31:b3:8f:85:6f:64:
         e1:1a:85:fc:27:53:b2:8f:cf:51:6b:f5:1a:d2:ff:76:52:bc:
         9f:8a:c7:ef:52:94:94:f5:88:fc:b2:b9:3b:93:16:7f:ed:63:
         55:ca:4e:19:c2:7a:ea:df:42:54:6f:20:12:5b:b4:f2:bc:42:
         b1:b7:91:02:cf:04:ac:d5:b6:e5:49:48:73:9e:e1:a5:56:46:
         22:14:d0:d3:b6:9d:a4:90:23:51:a3:8a:24:03:90:cf:b0:19:
         26:c5:b9:58:e2:63:28:57:5d:05:9e:79:76:ab:8f:80:1c:ad:
         5c:d1:b3:83:95:7d:39:dd:90:d0:f3:1c:73:93:0b:69:eb:18:
         9e:92:5a:40:97:24:c0:e9:9f:6a:5b:61:15:3c:38:a3:ae:58:
         76:9e:fe:24:1c:ba:0d:e1:fb:f4:77:bd:a3:8a:3f:7a:f0:28:
         a8:a7:de:79:84:29:0a:3d:55:96:b7:5b:74:79:da:8a:c1:4f:
         7f:29:6c:76:84:30:af:e1:34:c3:a5:5a:48:3d:ec:c9:54:8e:
         0f:b2:09:ea:82:83:86:0f:8d:68:07:06:25:94:b3:04:1c:7c:
         c3:54:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----