Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          fqm4q8DAFKxcCR4I4216XodQY65YNnn5BV/IoA0IyqM=
Subject key identifier:   CA:3B:7C:E1:5D:4C:16:07:97:55:0A:E6:C7:BC:37:1D:CE:D9:BB:6B
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       01962F06CE6AA18530C26CCFEB9A2CA51EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: k+rkc6EmFFRm/Xbv8lojAviG9M0d7HzhOTgphNsbQuA=)
                          2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=)
                          3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=)
                          4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ce:6a:a1:85:30:c2:6c:cf:eb:9a:2c:a5:1e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=ca3b7ce15d4c160797550ae6c7bc371dced9bb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:77:c9:4b:83:1f:ae:73:01:2a:0c:35:96:
                    bb:de:ee:03:26:06:bc:e5:3a:af:dc:17:af:0b:d8:
                    b3:99:18:61:6d:0c:dd:ce:90:99:db:f4:1a:1e:64:
                    e6:d9:97:f7:09:63:4a:02:a3:fa:75:0a:d1:23:3a:
                    31:0a:ad:93:45:58:a6:af:32:02:88:ef:ae:e6:a6:
                    fe:cc:5c:5f:45:c3:d7:53:5a:1c:03:96:f3:32:aa:
                    f7:9b:66:7e:0e:df:22:83:21:68:c9:dc:2e:55:2f:
                    f5:15:0b:0a:40:33:e3:6b:e5:9e:48:87:56:a9:94:
                    92:86:a9:96:e6:91:65:1e:dd:7e:24:a7:6a:90:f8:
                    33:3b:25:45:25:11:42:22:c1:8a:fe:11:fb:9f:b1:
                    1c:76:08:5e:8c:96:1e:ec:a7:3f:1b:a5:6b:14:c5:
                    a6:95:19:d8:45:5f:02:0b:9d:44:89:3c:c4:c8:0f:
                    6c:90:ee:5f:cb:75:c4:cd:88:dc:f9:7d:38:9e:0d:
                    42:6f:d7:7a:a0:9c:20:c7:08:5a:33:09:34:f0:66:
                    41:a1:b1:7f:25:eb:ea:77:f8:ca:c7:06:fe:c8:b2:
                    3d:8d:6e:32:d3:cf:3f:4b:22:ef:d2:f7:54:d8:ce:
                    09:24:27:66:09:0e:fe:34:53:ef:b4:9f:a0:0c:b6:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3B:7C:E1:5D:4C:16:07:97:55:0A:E6:C7:BC:37:1D:CE:D9:BB:6B
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:d7:65:d5:22:4a:3a:fe:96:e4:89:8d:79:7d:26:08:5c:
         5c:57:8b:18:cb:e8:73:3d:2a:c2:74:53:24:c1:7f:74:fe:73:
         85:b0:43:01:df:f5:38:af:ff:13:46:c1:42:c7:a7:6c:ea:8c:
         ed:2a:5b:ab:e2:7c:27:a3:43:0e:c0:6f:c7:86:56:f3:2b:23:
         e6:43:fb:24:40:7e:7d:d5:e3:a2:43:98:1f:62:b9:b5:26:d6:
         e5:d0:f3:ef:d6:4a:33:ed:6c:a2:38:df:b9:a9:4e:9f:61:d5:
         15:25:2f:2c:1a:d7:c3:07:24:85:d8:a9:74:65:eb:dd:bc:83:
         8c:34:5c:67:03:43:8d:15:0b:e7:2c:ef:5f:5a:e7:a5:0d:f6:
         23:8f:48:90:ce:86:bf:4e:eb:1c:69:10:99:a4:53:ac:a7:68:
         19:44:51:f6:32:67:af:a2:59:3d:47:dd:c1:86:58:96:40:07:
         89:63:55:98:32:61:6d:8d:12:e7:cb:0e:77:95:18:43:70:07:
         cb:ef:56:8e:0e:be:ac:52:8e:7f:dd:75:cf:c7:43:88:57:a5:
         9e:96:df:a0:89:fb:44:37:2a:39:19:40:c9:58:f7:04:29:91:
         98:93:7c:23:66:b8:96:fc:d0:fb:17:fe:51:e4:e7:2b:a9:1e:
         fe:3b:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----