Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File:                     2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier:          8p37ULiTz3r9m2tQeR4QG3j+nzaPMwLX5txySsQLh5k=
Subject key identifier:   E3:83:32:C8:D6:26:7E:05:51:1C:AA:68:E6:A4:4B:C9:2E:77:5A:30
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer:       /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial:       01962ECF71B6FC029B4C4E39DE0830FBA407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number:          024A
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: WyycbIFate8xbnAWn+1Foi1cK/NVTmkV8Nicmq0clSk=)
                          2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:71:b6:fc:02:9b:4c:4e:39:de:08:30:fb:a4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=e38332c8d6267e05511caa68e6a44bc92e775a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:46:aa:6d:dd:59:79:0e:26:f3:21:e5:e9:
                    dd:c3:2d:e0:64:01:15:fe:35:79:45:fe:7c:12:8e:
                    53:5d:b1:60:34:59:89:72:6e:0a:76:8d:89:2f:95:
                    f2:5f:6f:2b:3b:84:14:d8:26:8a:10:8b:80:3a:67:
                    33:5b:22:3a:1d:33:2a:ea:26:13:50:2f:dd:7b:ab:
                    2e:9e:21:6f:31:42:36:ce:fd:a8:21:f4:8f:78:29:
                    5e:7a:2a:c5:f9:bc:6f:8d:0b:9c:88:4a:12:1d:d6:
                    1d:0c:50:7a:05:12:0d:63:4a:45:2d:ee:37:65:e2:
                    5d:89:61:a1:6a:39:db:dd:10:ff:6e:77:a9:6b:06:
                    c4:19:d9:0d:c3:07:12:c0:95:6d:c7:a7:2c:9a:47:
                    e8:cb:03:a4:db:3c:a4:e2:0d:1f:c3:12:44:d6:fd:
                    e7:94:c7:f2:18:c1:2a:a1:f5:e5:7c:32:09:24:b7:
                    90:45:7c:ef:b8:7a:1d:e5:c5:35:8d:c7:23:0b:34:
                    84:e5:a0:79:2c:11:37:ab:69:76:ab:08:36:a2:27:
                    85:0f:22:c0:82:8d:5b:8c:1b:8b:68:73:94:07:f6:
                    c2:18:5c:79:5d:9f:fd:16:87:55:8d:77:19:9e:1f:
                    63:0c:44:7d:62:34:c9:a6:ed:82:11:f2:95:0f:fd:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:32:C8:D6:26:7E:05:51:1C:AA:68:E6:A4:4B:C9:2E:77:5A:30
            X509v3 Authority Key Identifier:
                keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:77:98:5c:10:02:34:ce:9b:a3:03:a1:fb:ea:18:91:2c:
         20:bc:32:d2:a3:aa:af:a2:54:54:44:5d:df:81:de:3f:af:8d:
         cc:0c:0a:e9:c2:92:3d:b1:aa:b0:25:fe:88:72:83:21:30:b1:
         65:cf:f9:68:21:56:c9:16:64:a5:ac:18:9c:77:69:1f:21:fe:
         7d:5b:51:12:8b:39:f1:55:4a:8e:7c:69:f9:5c:ed:d5:1a:b9:
         f1:a2:73:33:88:a3:5b:c0:bb:f2:70:45:1e:f7:e7:7c:da:9f:
         0a:1a:e5:2b:b1:3c:ae:11:60:8a:3a:ae:0d:b1:32:98:f8:f5:
         02:fd:82:c8:e6:bc:bf:29:74:e8:eb:4e:38:42:c0:e9:05:23:
         18:5a:61:83:fe:7a:f5:0b:0a:02:a9:90:83:54:b1:10:ff:bf:
         6f:f4:2d:6d:cb:ae:de:61:0b:d0:66:86:dd:d0:16:7d:df:0d:
         50:22:91:94:e0:a4:71:2c:2c:b6:75:33:b2:b5:a1:e2:49:b4:
         4b:6e:4b:3e:c2:15:4d:fe:53:47:f5:a5:67:fd:00:38:c7:80:
         a7:c3:1f:51:b8:32:70:d8:6a:5f:87:35:db:33:ea:f7:25:c8:
         3a:fc:f5:68:12:c8:d2:81:aa:bd:59:6e:26:1e:4c:eb:f4:e1:
         17:a8:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----