Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File:                     2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier:          5sLwttolJWeBfnhb0zuPhEr9OTAFCaKaK65HLgpfZtg=
Subject key identifier:   BE:84:DB:1B:35:0C:4D:B8:0E:2F:43:EF:01:D2:45:12:25:17:E7:E8
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer:       /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial:       01962E2AFC8C65FACDE6C7AB723855D13FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number:          0A27
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: KGXtYIFB8qpld++gkBLUXI5oalvKMhQl7s7TWb+nAL8=)
                          2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:8c:65:fa:cd:e6:c7:ab:72:38:55:d1:3f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=be84db1b350c4db80e2f43ef01d245122517e7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:27:a5:cd:1f:34:75:97:6b:a6:7f:d1:8d:
                    6a:46:52:34:3c:5b:84:db:57:07:d4:8c:51:7d:22:
                    b0:ea:8c:3a:df:14:34:16:88:09:42:f7:2e:99:bf:
                    1b:b7:af:3a:23:84:64:0b:68:73:ea:d0:11:46:cc:
                    8e:03:56:8c:69:db:12:54:d9:6c:c5:57:51:ac:a7:
                    c1:aa:66:f6:6a:08:12:0f:78:81:9e:c0:56:b4:5a:
                    9d:73:20:bd:75:4c:50:91:47:5f:69:d1:5d:2b:e0:
                    ac:50:45:25:e0:b6:bc:03:12:40:26:aa:61:b9:9a:
                    15:52:a1:9a:dc:56:04:04:6c:3d:19:ad:71:da:ba:
                    fe:ba:66:d4:f7:c7:c1:a1:43:20:f5:23:6c:0d:ad:
                    82:be:36:23:32:64:10:b0:66:16:47:49:d5:9f:c9:
                    fb:f4:37:f7:98:2e:b3:f5:34:d6:bf:89:89:bc:02:
                    bf:b9:a4:0e:1c:63:8d:f8:4a:62:1a:35:4a:7b:fd:
                    bc:ad:bf:aa:df:c5:18:63:b9:54:06:c3:cc:15:82:
                    05:13:4e:dc:96:b8:ed:a7:dd:d6:32:0a:25:c8:95:
                    4a:91:fa:25:ed:87:05:fa:bc:74:11:8a:1a:f7:bd:
                    ac:f6:60:ff:a4:8a:88:b4:b3:40:96:9a:df:a1:4a:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:DB:1B:35:0C:4D:B8:0E:2F:43:EF:01:D2:45:12:25:17:E7:E8
            X509v3 Authority Key Identifier:
                keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:49:cc:8d:9b:d5:38:d1:11:29:b3:ee:1e:d2:39:e5:39:f6:
         2f:99:2b:24:27:ce:a0:ff:03:9f:e7:0c:8c:df:e2:ba:39:91:
         1d:55:7e:56:bc:f0:c9:18:c6:9a:1e:59:0d:9d:e3:2e:d4:99:
         51:8f:89:df:c7:f7:1f:62:81:88:cf:6d:ea:10:98:ab:92:b9:
         34:ee:7e:30:59:01:6e:97:4a:a4:13:47:e3:e2:f0:fc:07:68:
         e9:8f:51:0d:60:15:84:1c:07:8a:2a:3a:25:ef:93:b9:a7:fc:
         00:f2:0b:4a:80:5a:52:2c:1b:f9:53:ff:25:0b:1e:11:fd:13:
         64:12:1b:47:5f:f7:a4:ec:e3:d4:4d:2f:81:69:ad:ad:99:37:
         ac:23:30:53:55:4b:e1:f9:7b:4a:45:d5:f1:d9:82:df:5a:31:
         85:21:43:28:e3:d4:2c:da:e2:fa:52:0e:87:8e:1e:92:fe:a9:
         cf:d7:cc:8f:31:d7:18:f7:40:8a:96:8b:13:64:80:9d:2e:5e:
         02:f8:1c:dc:19:6b:07:16:09:cc:f7:f8:8f:db:96:62:a7:7e:
         74:c8:7d:f7:e3:e4:03:71:35:92:a5:1b:52:df:61:4f:7e:4d:
         a1:6e:b1:de:ff:db:97:72:2e:e2:9a:5c:d2:8d:43:ee:22:5e:
         a2:e4:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----