Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File:                     2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier:          qvK/IR8P06O8QEJJ6P9kxCYazLEwIIAZX17I6uyxR5I=
Subject key identifier:   EF:7C:C7:15:B3:00:15:08:EF:08:BC:BC:78:F8:FA:24:E5:AD:33:C4
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer:       /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial:       01962E2AD850545D6E5DBA6AE6271E81DBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: SgXL/iUIi+jQ3BMYhTrZaUDOJXLI9oWVmprZR+rnhgI=)
                          2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:50:54:5d:6e:5d:ba:6a:e6:27:1e:81:db:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=ef7cc715b3001508ef08bcbc78f8fa24e5ad33c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:41:80:0b:38:fb:ab:ae:12:ab:7f:72:e6:
                    4d:8e:07:8d:94:c6:92:4f:58:26:8f:5e:95:93:59:
                    b4:92:1c:a7:5d:24:dc:96:98:a3:64:70:d1:12:6b:
                    ce:e5:db:1a:b8:e1:61:d5:6c:73:14:47:ba:2b:6a:
                    f2:f5:70:50:5e:d0:1b:cb:ee:60:42:da:ca:f6:b0:
                    3a:ed:21:6b:d7:af:5f:4c:97:a2:e5:b7:35:c0:66:
                    8e:05:69:a4:5d:69:06:be:c9:dd:6e:dc:35:0c:f5:
                    d7:d6:a8:82:e8:c6:7e:d0:17:4a:c0:5f:f4:13:2c:
                    28:44:0a:ce:97:b5:d5:c1:ef:32:2f:8b:95:e7:9e:
                    25:d8:cb:a9:e0:69:68:32:a0:26:bf:0b:33:50:96:
                    f8:ea:43:7a:19:02:c4:a3:75:fb:a9:95:b6:42:17:
                    a0:0a:9b:d1:1c:cb:ef:e9:6f:79:59:db:ad:61:6d:
                    45:22:28:64:67:52:82:16:57:8f:f4:0a:5f:fa:73:
                    e7:e0:b5:27:5f:de:a0:c7:ad:70:b1:5c:9c:93:e6:
                    81:70:35:42:79:c7:d8:15:e3:e8:3e:bf:8f:0f:5d:
                    24:03:b6:fd:6f:03:9a:25:ec:48:87:ad:fc:0e:3c:
                    40:b1:b4:61:20:d9:54:5d:b1:e5:32:90:34:b1:ab:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:C7:15:B3:00:15:08:EF:08:BC:BC:78:F8:FA:24:E5:AD:33:C4
            X509v3 Authority Key Identifier:
                keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:2d:02:fb:78:69:97:27:a2:f0:09:1c:83:cc:4a:53:52:
         4b:6e:70:56:fb:30:4a:67:0b:9d:75:f0:66:35:79:b6:a8:6d:
         eb:99:53:ce:97:65:3a:a8:b1:ef:a9:55:8f:99:cf:da:a3:31:
         71:d0:a4:45:77:04:c7:ba:1b:c2:a3:6e:84:01:96:b9:ad:7c:
         ae:73:0d:82:69:18:a8:8b:74:47:2f:eb:d9:b0:a0:88:3b:90:
         21:03:36:e3:14:10:0a:70:4d:d7:93:f8:4b:07:d2:52:d6:97:
         ab:fe:a7:03:e5:c9:2c:f6:54:bc:6f:84:7c:aa:e0:ca:15:29:
         d5:9b:42:ad:c0:2f:e8:ac:02:b6:8f:33:89:e9:47:f3:4c:86:
         8f:8c:44:bf:35:b2:f9:e6:65:ab:1e:d0:43:c6:56:38:7e:b6:
         20:b2:b0:6d:b1:a7:42:e8:ce:3a:77:9f:ec:17:00:8c:0b:5d:
         b6:21:d1:6e:ac:bd:79:09:af:66:3c:83:b0:48:8e:0b:ad:34:
         e1:60:f3:fd:7f:3e:3c:23:b8:f7:55:4f:d9:bc:49:0d:76:b1:
         1c:23:0e:31:85:d3:27:56:98:0e:07:44:6b:de:84:d5:8b:12:
         90:e9:44:6e:53:dc:d3:81:a2:38:4d:0e:21:42:0e:f4:de:2f:
         07:8e:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----