Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File:                     2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier:          TZ9KWrhwMbQNfrdsh6/9dePu4L6QMVJ0AGbLMDLvxJI=
Subject key identifier:   62:06:EC:97:25:3C:33:CA:10:FE:0B:A2:6C:44:22:76:ED:0E:0E:84
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer:       /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial:       01962E9865E0AA7C83B532A7933F92686BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: K6GgIsMyd7u9ssVdfl4rDHo8zAyRKlJ6NCAcz/o0M3Q=)
                          2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
                          3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:65:e0:aa:7c:83:b5:32:a7:93:3f:92:68:6b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=6206ec97253c33ca10fe0ba26c442276ed0e0e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:1c:75:68:56:5b:47:fb:38:65:5e:49:e5:
                    3d:75:13:88:e1:48:31:12:a5:3e:5f:b1:c9:37:b6:
                    df:98:9d:8f:26:55:af:94:13:1e:5a:78:56:3a:0e:
                    7c:75:d8:6f:18:2a:5d:74:de:18:b7:69:42:5f:52:
                    e1:1e:63:be:4e:50:59:ad:19:b3:09:24:46:ed:3a:
                    82:56:78:d7:c6:c3:82:85:c9:8e:7a:c4:e1:b5:b0:
                    74:62:38:a5:e9:4f:97:97:50:2d:8d:68:e3:10:b5:
                    d8:d8:c5:93:58:02:77:7f:11:7c:f9:04:f4:a4:7a:
                    a0:5b:03:10:97:3c:11:41:be:6c:b4:93:8e:b4:9d:
                    fe:cc:03:0e:2f:76:0a:ba:f5:19:84:a7:cd:02:50:
                    a5:ba:21:17:32:76:b4:b7:4d:56:40:bf:b5:77:22:
                    84:c7:00:02:94:87:ad:1b:2c:b2:df:1d:2a:91:a6:
                    0a:e6:f0:9a:fa:72:f4:a5:0c:31:e0:53:fe:de:df:
                    3b:72:30:1e:75:c9:7b:1a:83:af:77:d0:c6:8e:5c:
                    1c:39:ad:e4:5b:a0:10:1e:91:76:9a:c3:42:e4:a4:
                    99:fc:73:c7:70:34:7f:d6:89:a3:14:36:22:76:9c:
                    cb:3b:45:5a:9a:95:11:e5:0a:03:c0:68:42:ca:0c:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:06:EC:97:25:3C:33:CA:10:FE:0B:A2:6C:44:22:76:ED:0E:0E:84
            X509v3 Authority Key Identifier:
                keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:07:ae:6b:49:3d:82:b5:52:d6:53:cf:77:a0:90:e6:1a:29:
         96:1b:36:74:77:11:54:b8:49:a2:12:d5:33:57:8a:6e:c7:8d:
         ae:d3:19:11:aa:31:77:8e:be:be:57:7c:30:8f:e8:a6:78:5a:
         10:40:9d:3a:d3:c3:d9:53:19:bd:69:64:98:08:90:c7:52:66:
         cc:f8:6b:e8:1b:4c:09:5e:72:15:97:7a:f4:7b:16:73:07:e4:
         bd:d1:60:b2:58:ba:48:a8:5e:c3:c5:9a:fa:1a:b4:cf:28:40:
         47:20:7d:2e:3a:6e:46:48:87:a4:33:b5:5a:e4:bb:27:a9:09:
         72:79:2d:fa:7b:3a:c3:0a:0f:6d:d9:30:b9:19:01:2d:f0:8b:
         27:73:dc:05:b6:09:10:eb:51:8c:02:0b:e5:bd:8c:0e:f7:72:
         fb:72:d8:81:1b:35:d0:f2:49:d8:50:3c:a2:f1:3d:94:90:17:
         55:0c:51:8d:bf:8c:98:ac:13:bf:76:a3:cb:b1:0d:f7:ad:a6:
         e2:ae:57:9a:09:99:43:f0:20:1d:91:1b:2b:6c:b2:6f:45:08:
         4e:50:ab:d4:63:ea:e1:b3:e9:0b:bc:9c:46:4f:10:9c:58:d4:
         74:1d:53:05:d0:29:19:25:d0:49:91:68:bb:19:46:48:53:9e:
         55:3c:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----