Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File:                     2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier:          9RU0vV+EnSoU+r8PyYcmPvGpb55X32LuL5j9/WkjXgA=
Subject key identifier:   BD:8D:4A:FD:46:42:36:4E:79:B8:68:7C:FE:7D:C8:0C:1E:91:D1:4E
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer:       /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial:       01962E986D2ACAAC60BED6F36488640A34B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number:          1381
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: HTih33npUGijqheUojQ0NetAQXws7kDg5A+Z5YxLWZY=)
                          2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
                          3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
                          4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6d:2a:ca:ac:60:be:d6:f3:64:88:64:0a:34:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=bd8d4afd4642364e79b8687cfe7dc80c1e91d14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:0b:ba:ee:33:96:ea:e6:20:6e:c7:eb:4f:
                    d5:e2:c5:65:8a:ac:16:71:20:7a:54:f2:a9:97:50:
                    91:66:58:1f:50:e3:91:70:5f:9d:8e:d9:3c:a1:c2:
                    31:48:6b:ff:9f:1a:cb:3a:61:92:16:d8:11:e6:92:
                    c8:17:f9:a9:19:57:96:bf:a0:35:58:94:82:e4:3b:
                    80:e5:b6:0f:e6:6f:43:15:0e:01:03:16:e0:f5:ff:
                    a4:ac:22:ff:3d:28:fc:ee:7c:64:1b:88:f7:36:44:
                    69:ed:d7:2a:e7:cb:9f:3f:06:f6:c6:8e:2e:a8:20:
                    aa:de:04:cc:15:19:00:61:54:ca:07:af:26:08:41:
                    b8:4f:b4:c9:44:af:37:6f:d0:50:4a:7f:fb:1b:d7:
                    ad:05:dd:19:fa:05:5d:01:0c:49:39:f4:44:eb:fb:
                    2a:8c:8e:de:ad:20:02:0d:c1:c7:7e:26:3a:43:3a:
                    3f:79:57:fe:f7:2d:e0:4d:54:40:45:e7:85:27:c2:
                    c2:ca:cd:c1:54:ad:28:6b:71:36:84:06:37:b0:60:
                    1c:fe:e0:dc:11:d1:65:49:8a:a0:2c:19:14:df:1c:
                    0d:78:48:00:ad:40:63:77:92:e9:64:b4:15:2c:f0:
                    fd:2b:10:07:6c:cc:01:66:3a:b5:dd:7c:95:09:4d:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:4A:FD:46:42:36:4E:79:B8:68:7C:FE:7D:C8:0C:1E:91:D1:4E
            X509v3 Authority Key Identifier:
                keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:5b:3a:34:ed:b1:78:fe:26:f0:e9:d5:65:13:d4:4c:d1:
         12:75:cd:f5:c8:b5:13:39:8f:48:15:47:21:4d:55:78:0d:96:
         97:e8:4c:22:5d:2b:67:2d:0b:c7:49:35:82:c7:c5:68:5a:57:
         91:ed:bb:23:56:79:19:c3:29:10:5c:52:dd:48:82:73:ee:02:
         40:46:03:f1:0c:12:7a:b9:b4:16:1c:3a:85:4e:63:04:3e:94:
         fe:f2:c5:25:9b:a6:ac:02:7d:6f:11:05:aa:a8:24:fd:b4:60:
         7d:2d:b7:b3:36:6e:74:ed:5b:1d:8b:97:0b:3d:2b:e2:39:f5:
         ec:85:7c:45:33:11:dd:c3:f8:b5:21:2d:07:6e:ce:b6:ba:06:
         ff:54:fa:22:53:c2:c0:c1:15:2c:ae:49:da:a8:36:4d:2d:75:
         94:c3:91:1c:79:be:06:80:16:a0:25:a5:d0:d2:8d:a2:8b:63:
         62:99:ae:ed:a6:08:c1:54:7d:48:8f:5c:8d:5b:1d:55:ac:7d:
         50:eb:38:63:4c:cf:e0:53:ac:74:a3:38:e6:bf:22:9e:be:73:
         03:ed:ca:15:87:74:9d:87:07:7a:68:2f:f6:f1:40:36:1c:58:
         92:03:79:3f:03:81:cd:e9:de:ac:f1:14:bf:fd:b1:8c:0c:d2:
         4c:8a:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----