Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File:                     2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier:          IAo/S6Yw1V2hRMv2JPJXelmYXbrCh08myoWPg9Q+/GM=
Subject key identifier:   30:39:36:A2:5A:38:0E:38:2E:B9:99:87:0C:E0:12:C1:2D:B8:BC:96
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer:       /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial:       01962F0659C5051113B3AA881D6D9B5C82A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number:          0649
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: HaTWS7wEcLP7nf/s4cY0Xy0rfCHMYLhfjLqhVuVbXnM=)
                          2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
                          3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:59:c5:05:11:13:b3:aa:88:1d:6d:9b:5c:82:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=303936a25a380e382eb999870ce012c12db8bc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:b1:dc:22:64:72:1e:c6:62:89:18:ce:6c:
                    2d:73:e9:de:d3:4d:56:76:05:49:2c:53:ab:bf:40:
                    82:2b:b0:5a:02:9b:e0:42:c5:22:59:e3:6d:45:90:
                    6c:d4:80:98:3b:82:7a:f4:08:cc:d0:53:b2:f4:82:
                    c9:a7:04:c3:34:4b:37:88:dc:1e:e0:8f:51:f2:ac:
                    73:3e:97:ef:49:96:f9:6e:6e:e5:c8:69:8d:ec:ba:
                    73:0d:9f:40:07:2a:2f:a2:39:c9:af:b3:25:5a:14:
                    04:52:51:c2:07:e0:17:bb:da:61:0f:bd:30:b6:e0:
                    5b:30:f6:1a:37:96:62:89:83:f7:c8:ad:69:f6:9d:
                    8d:fa:ad:a2:ba:4c:6a:37:3c:1f:51:85:5f:07:47:
                    18:9a:46:04:76:f4:bc:29:e0:f6:68:17:c2:44:68:
                    62:c8:14:27:99:45:cb:62:33:10:14:e1:34:02:6c:
                    ab:b7:5b:dd:7a:cc:1b:11:e8:5e:e6:5d:19:78:67:
                    01:26:ae:b0:1e:f6:ac:b0:14:7a:4c:1a:df:e1:c2:
                    60:36:94:65:f8:83:9e:24:23:c4:8f:16:5c:35:23:
                    be:97:b0:6b:19:b3:42:9d:8f:98:c1:55:34:cf:1e:
                    bd:b2:e2:50:61:c0:0e:a3:15:4e:2b:35:8e:7f:1b:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:36:A2:5A:38:0E:38:2E:B9:99:87:0C:E0:12:C1:2D:B8:BC:96
            X509v3 Authority Key Identifier:
                keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:67:db:a2:f2:12:8a:81:89:36:5f:c7:f0:c9:61:a3:9a:95:
         b0:34:db:f8:59:68:89:5b:d6:16:d9:79:58:a3:2c:bb:ac:f4:
         9b:ee:70:62:e4:91:33:41:1c:27:1c:78:2f:a5:2d:8a:1c:fc:
         69:a6:1d:e3:e5:40:92:e1:ba:3d:03:45:c8:c2:67:4b:e0:5a:
         2c:cb:29:a8:df:bb:b0:05:3b:9a:c5:10:cf:7e:df:3f:3d:65:
         80:46:8a:a2:f5:b3:b4:4c:f9:a8:25:d3:7b:2d:a3:16:41:af:
         f4:a9:20:96:33:e8:58:ce:60:29:6c:d1:b4:36:75:dd:f0:6b:
         87:4d:ae:dc:b7:96:41:c7:7e:7a:f0:1c:04:39:fc:eb:79:fe:
         3b:b4:9b:37:e8:d8:0a:16:9b:b7:75:cb:4e:64:8b:31:f9:c5:
         8a:d7:d8:c2:26:61:1a:76:9e:b1:f8:db:c0:aa:04:38:27:db:
         01:9a:ff:4e:dc:c3:07:c3:e1:8b:d2:c3:56:e6:9e:ba:90:b3:
         b6:15:0d:75:96:fc:ff:ad:c9:7a:7b:ed:92:43:91:7b:e5:bf:
         8d:88:bd:4d:8f:d5:17:29:8c:50:6d:e8:ac:e5:07:d2:bf:01:
         3e:1b:6f:06:1d:65:7e:11:b1:57:04:81:1c:62:20:c9:d5:06:
         10:92:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----