Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
File:                     2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft (raw, json)
Hash identifier:          A/nUEJFkqTrTl8Fw7b4iS6WSOcbboS3VcEU1eRduQt8=
Subject key identifier:   57:80:C5:38:5F:A1:7F:15:7D:95:86:CD:55:7B:01:44:37:A9:A5:BA
Authority key identifier: D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
Certificate issuer:       /CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Certificate serial:       01962E9995A883935218C07304A80CD46ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
Manifest number:          0E27
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl (hash: J7xIpKPg9CSOIhOIfrBwoDiLJyW5wlZ8jauCeSgyOLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:a8:83:93:52:18:c0:73:04:a8:0c:d4:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9b22811df86123d71af5b998a210c23eb1d5efa
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=5780c5385fa17f157d9586cd557b014437a9a5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:ca:88:78:e4:e4:7c:6b:ea:45:da:b9:5b:
                    8c:90:b4:29:cd:85:b0:9b:72:05:76:2f:5d:72:32:
                    c8:40:da:3c:8f:8f:d5:0c:ec:d7:94:53:f0:2d:67:
                    94:b6:fa:7b:f5:d5:38:14:03:0a:87:2f:7a:d6:28:
                    e0:43:19:7c:a6:45:4b:21:7e:8d:09:2e:c0:8e:04:
                    a2:bb:0e:2d:30:b8:c2:b5:d2:0f:52:1f:11:7f:80:
                    8c:8f:8e:6f:e3:1c:87:ae:d5:e0:c6:18:19:54:b9:
                    9f:5f:9f:0b:f3:4a:36:d6:a8:29:b6:d0:73:5a:61:
                    8e:7d:b1:6e:a6:1b:41:0d:07:54:fc:25:2d:a7:9a:
                    7e:25:33:03:22:37:89:ff:c3:e4:cd:ee:ab:69:bf:
                    0f:56:39:79:cc:4d:6a:1f:e7:57:0b:d4:08:47:44:
                    98:31:12:a7:ce:94:12:4b:e4:36:2d:fd:62:6f:e6:
                    57:b5:18:56:c0:09:90:f7:8a:c4:a2:a6:08:6e:24:
                    ef:0c:62:b9:1f:88:b3:d8:38:ab:b2:03:5a:8b:af:
                    c5:d2:de:a0:06:f9:4b:6e:92:3a:24:c7:60:5e:01:
                    03:ae:f7:b5:30:88:05:f9:75:21:11:4d:94:f7:8f:
                    c2:34:1d:0c:8d:1a:c8:f2:62:e4:dd:27:f3:98:5b:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:80:C5:38:5F:A1:7F:15:7D:95:86:CD:55:7B:01:44:37:A9:A5:BA
            X509v3 Authority Key Identifier:
                keyid:D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:50:dd:8a:ac:65:65:df:58:e6:6c:2d:f0:8a:a9:c4:dd:08:
         6b:c8:83:a6:fa:d1:3a:f0:15:f6:35:f6:26:92:9d:c9:70:db:
         b9:80:e1:85:8c:c4:8f:29:ac:d1:45:a3:9b:90:6c:81:0f:9f:
         17:e8:14:0b:9d:9c:a8:49:d9:e8:5d:5b:46:a9:40:e8:d0:18:
         04:85:db:5f:bc:3a:ed:f0:60:b9:f8:5f:93:a8:2c:0d:f2:2b:
         40:a2:84:10:7f:89:15:d3:62:7d:1e:d0:53:53:dd:07:b8:3a:
         24:86:75:71:52:9c:83:fe:90:b2:b4:2e:e1:9b:b5:7e:6c:4b:
         7f:43:88:9b:54:20:33:02:25:be:22:11:a5:29:48:f7:4a:89:
         1c:2e:74:7b:86:96:1e:ee:e9:9e:38:3d:a7:4f:e7:07:3d:45:
         c4:bc:8f:9d:25:0c:4f:2e:41:a3:62:32:5a:12:e6:93:26:6a:
         86:b5:f2:19:25:e5:59:91:c5:a8:cf:96:1c:17:92:a8:8e:e7:
         a6:aa:c1:ea:2d:1d:bd:aa:23:23:fa:db:93:47:d7:10:08:c7:
         42:3b:86:1b:0c:82:1b:3e:d7:b3:64:8a:7a:12:2c:04:b2:f4:
         a4:08:6e:c0:00:17:b2:e4:75:23:0d:b9:71:7d:04:07:a6:52:
         89:40:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----