Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File:                     2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier:          7lIEBKZYuTFA98muogSCmhGwc/tve3X0RzWIyGwqpXw=
Subject key identifier:   3C:B3:1E:83:2D:78:2A:49:B8:E0:66:41:EB:90:CA:AF:82:D3:9D:26
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer:       /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial:       01962DF3EAB41FCA3F83FB4856A3E9006884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: PPt+QereqVF3F9MYtiol+wXRCZV8t3+GKG3JckBwURM=)
                          2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:b4:1f:ca:3f:83:fb:48:56:a3:e9:00:68:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=3cb31e832d782a49b8e06641eb90caaf82d39d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:44:c1:20:08:a6:28:42:8d:f9:0a:a1:26:
                    94:ec:fb:5f:48:d3:6f:9a:6d:27:b7:2d:cb:4d:ec:
                    5b:07:90:52:81:54:06:00:70:90:fd:74:5b:57:65:
                    d2:f6:c4:5b:15:2b:d2:39:5e:44:fd:e6:8c:d5:0d:
                    ae:bb:f5:14:71:89:71:2f:6e:dd:a0:8f:a9:b9:af:
                    0f:d5:13:c6:c2:c7:ea:b1:4d:f5:2f:62:35:a5:e9:
                    69:b9:77:13:9a:f0:14:89:94:03:1c:d5:e3:c9:1e:
                    45:a9:07:d1:30:37:fc:f3:09:d0:40:fd:71:71:a9:
                    d3:47:82:e9:d6:5f:2f:a0:05:a5:e3:59:53:68:ce:
                    d5:95:1d:68:c1:06:ee:86:bf:b5:68:c8:e7:f8:38:
                    e6:cb:d0:ae:a0:d9:14:66:1d:4d:be:9a:6f:63:41:
                    04:6c:2f:0c:24:8e:3a:57:a8:06:ff:e7:a4:92:c0:
                    27:ce:bb:2c:10:0f:3e:61:35:51:3e:d2:8c:d8:47:
                    b5:a0:0c:1b:b2:67:62:b2:bb:bd:a8:3c:09:8f:be:
                    59:6d:9a:4a:db:54:2f:3c:84:dc:01:b4:d0:27:5a:
                    a7:c4:0d:a3:c3:a5:10:f4:56:b7:09:26:7c:ce:a5:
                    37:09:e9:c3:aa:1d:42:0c:a2:2d:05:c9:50:02:8b:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:1E:83:2D:78:2A:49:B8:E0:66:41:EB:90:CA:AF:82:D3:9D:26
            X509v3 Authority Key Identifier:
                keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:f4:69:b1:d0:f4:d4:1b:f2:72:a1:5c:7b:79:7f:9b:61:
         4c:3e:09:42:d4:b1:d3:ae:6c:a8:2d:1c:3a:de:a1:d5:8e:1d:
         aa:bb:28:79:8b:f6:3c:a1:d1:c0:2b:d7:9f:24:2f:9d:21:d2:
         2e:e0:93:bb:85:60:a3:3b:0a:2e:b0:b2:fa:8d:d8:16:5e:bd:
         cd:70:9d:71:1c:ed:5a:18:ef:ff:c9:8b:c3:4d:65:dd:ad:4b:
         6f:56:a8:9c:0a:98:a7:16:3c:ba:9a:23:ed:5a:49:1a:68:77:
         a1:8b:8c:b9:3e:bb:70:8f:54:4d:96:52:5b:33:67:fc:86:fa:
         fc:2a:ac:75:b6:ad:82:73:f9:f9:cb:33:27:43:34:03:76:70:
         27:6d:b3:a9:74:4e:1c:cc:a7:ac:f0:fa:89:19:4d:f5:28:8f:
         ac:2f:f1:fa:4f:45:86:c8:13:d9:ff:36:05:8b:dc:ea:72:bb:
         aa:e8:f9:cb:14:3f:30:c8:d3:a8:91:d1:97:08:6b:05:6e:4d:
         a9:ca:a0:36:77:b0:06:70:48:54:7a:51:a1:2d:cb:3c:5f:1d:
         9c:c4:4c:97:98:c3:6b:60:0c:ee:92:98:94:53:b8:86:82:0a:
         64:89:4c:c8:0d:ea:98:86:b5:00:f0:e0:51:c3:5b:7f:af:59:
         d4:9a:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----