Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File:                     2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier:          YaYsI13czf53zBK4xPbDX6co9ldciKd1JuuW4zUz8yo=
Subject key identifier:   90:B5:44:D4:E1:2A:20:09:59:9C:1F:AD:FE:2F:50:14:22:C2:B6:3D
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer:       /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial:       01962DF43A1F8230C10174BCDE418531C09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number:          07CA
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: 5FPUwNVgA9TRj8aV3iWz+tLB7vh4PShSYeN8WjQaCuQ=)
                          2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3a:1f:82:30:c1:01:74:bc:de:41:85:31:c0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=90b544d4e12a2009599c1fadfe2f501422c2b63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:c5:ec:bf:fd:46:db:d7:30:6f:1b:c4:83:
                    bf:c4:06:3d:b7:ca:54:a3:2b:89:21:be:69:0f:e2:
                    95:30:f8:0b:db:e2:0f:80:8a:7b:93:8c:d4:ef:2c:
                    b0:96:ba:6a:40:a6:e7:d2:36:ee:88:9c:5b:fd:55:
                    da:5b:0c:86:87:8d:a8:ca:1f:e5:45:de:93:bd:24:
                    64:c9:8e:fe:d9:60:b9:f0:c0:cd:9c:3c:8b:af:b3:
                    cc:a3:19:b7:cd:56:3d:9b:d4:43:cd:02:c9:f5:59:
                    76:a9:0c:f6:bb:80:59:c6:6e:1e:9e:7c:d9:5a:d0:
                    f5:b2:5f:20:07:bb:ab:49:0b:fc:05:e4:fd:1b:c0:
                    8a:18:ac:21:72:47:0b:c6:0a:77:30:ce:bb:7f:0d:
                    8f:6f:e1:ac:ba:9b:15:06:7d:fb:08:af:0e:2f:69:
                    7c:ef:9d:2c:1c:a3:ff:43:97:b6:27:aa:a2:32:52:
                    c8:4f:e7:a7:47:68:c3:ae:95:78:01:d6:40:ea:af:
                    fb:c9:51:91:05:89:04:14:99:c9:f6:80:fc:52:b9:
                    34:6e:0e:19:c2:9e:59:2d:27:e9:9b:48:e2:4f:df:
                    d2:f4:a5:8f:de:23:7d:8f:0c:34:8b:e2:7c:5e:a8:
                    85:cf:30:6b:0a:e1:e8:9e:52:89:56:73:94:a9:ef:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B5:44:D4:E1:2A:20:09:59:9C:1F:AD:FE:2F:50:14:22:C2:B6:3D
            X509v3 Authority Key Identifier:
                keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:4b:1a:ef:18:3e:02:6d:32:21:92:9e:44:d3:d9:32:45:
         f4:71:38:2e:ec:9e:fb:89:99:92:34:ce:9b:23:92:83:7d:d2:
         60:7a:c3:fb:05:e1:f9:f2:3c:ec:ad:7d:42:66:cc:c7:61:1b:
         a3:4d:64:1d:22:9f:f0:55:d4:8b:84:bd:34:c1:d9:67:58:29:
         c1:45:75:7f:f4:b5:82:b4:f0:7b:39:87:db:e9:fa:18:df:a4:
         cf:d4:e3:60:0d:db:e7:82:e0:b9:f0:77:cf:31:e1:13:06:1f:
         52:ba:50:e6:01:08:7a:ad:70:b8:55:07:c2:12:6d:41:a8:c8:
         c3:6a:5f:66:00:11:cc:9c:45:d9:b6:4a:0d:05:76:f4:99:a5:
         91:88:74:ae:6c:75:a7:b5:64:4b:2d:19:d3:b9:69:c2:27:a8:
         7d:a3:dd:3f:ca:1a:f6:ee:62:c9:f0:0e:7e:e3:30:26:b3:23:
         dd:d5:70:99:3b:84:e9:a0:1c:97:60:65:10:8f:5d:15:06:cb:
         f4:48:99:85:51:7b:cf:cf:a7:4d:aa:43:57:17:f9:ee:67:d2:
         9c:94:c7:9e:50:bd:8d:07:04:35:3d:dd:9b:0a:4d:9e:59:d6:
         7d:aa:4c:59:46:3c:a3:18:0c:b6:5a:f6:05:c6:0f:c2:2f:90:
         c7:56:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----