Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File:                     2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier:          J02XqVjuET7U40q5JwT5hoziFZXINs6edqziLUol/tc=
Subject key identifier:   3A:2E:61:41:F3:CB:2C:D8:6B:2C:F6:B5:27:49:CD:6F:0E:FE:66:DA
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer:       /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial:       01962E6214F6F3C40DC6F30CB7B2333B4A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number:          0B91
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: KZJ3g4NiCsu6VS4sMWiYORZ46JOc3JGaEUCYEDu/v9s=)
                          2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
                          3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
                          4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:14:f6:f3:c4:0d:c6:f3:0c:b7:b2:33:3b:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=3a2e6141f3cb2cd86b2cf6b52749cd6f0efe66da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:96:63:21:fa:9c:43:be:fa:bf:5f:32:55:
                    1e:6b:0e:ae:d7:de:ca:c1:60:c5:8d:1c:a6:2f:38:
                    d6:c2:14:ae:b6:48:67:a2:20:12:8e:bc:3f:94:ba:
                    50:46:95:f6:66:63:63:61:46:85:52:7a:2b:db:95:
                    fe:79:44:30:81:7c:09:03:a7:f4:e0:a3:93:81:26:
                    ab:f9:d3:c8:ce:2e:c4:42:c0:f4:33:d6:13:c7:31:
                    52:65:98:aa:5d:2c:67:5e:19:26:20:ff:7c:46:af:
                    22:67:9d:44:d8:18:8a:5b:42:e3:2b:f4:b0:21:d7:
                    e0:63:36:ce:f0:db:ee:aa:e6:f7:73:a9:8d:7b:1a:
                    89:62:5e:d0:86:fa:77:a3:b4:00:d5:45:2b:89:21:
                    ce:a3:64:9b:1c:fb:d8:cf:b2:fe:df:ba:a0:41:0b:
                    84:7f:f3:d1:66:f4:f6:c5:71:b7:d1:fc:88:2e:28:
                    95:61:61:50:40:51:85:2d:04:f6:02:44:62:bd:40:
                    5e:f9:0c:8e:3c:0a:bf:8e:7a:b9:32:09:a9:8d:e7:
                    3f:70:76:a1:de:73:0d:fb:60:a3:9e:f5:e3:bc:1d:
                    33:be:85:21:d4:cb:b9:79:67:06:14:91:0c:30:c9:
                    59:18:2e:12:7b:3c:e4:b6:85:47:23:b9:a8:3b:84:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2E:61:41:F3:CB:2C:D8:6B:2C:F6:B5:27:49:CD:6F:0E:FE:66:DA
            X509v3 Authority Key Identifier:
                keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:27:1c:0a:d6:bd:b2:9d:80:8f:6e:20:6a:c6:65:b5:15:
         79:e3:24:0d:c6:a9:d3:69:42:1d:f1:3f:d3:68:3b:52:25:c2:
         dc:f6:b1:46:d8:ff:85:c9:42:8c:98:0b:09:da:1b:9d:95:2f:
         83:c5:78:1b:f3:e8:d1:2d:71:2e:03:99:39:f6:fb:b5:b2:f9:
         d7:ea:23:ce:8f:7f:e4:23:f5:f3:79:01:c8:1f:88:dd:89:1d:
         62:5c:b7:86:9a:97:9d:67:ca:d2:00:00:7f:34:dc:9b:df:7c:
         ff:be:2e:fd:f0:07:31:2f:f6:6e:0c:86:ba:4e:05:94:f8:a6:
         39:95:5c:17:2a:d9:43:d0:22:45:45:e3:a2:ae:fd:e2:06:a1:
         0c:aa:11:4e:de:ac:27:36:28:e6:99:fb:b3:53:7d:cd:e1:d1:
         5e:d4:eb:b9:c2:27:90:89:1f:5f:f6:3c:18:b5:43:41:c5:6c:
         e3:6b:29:a4:fa:6e:21:5b:13:e3:8b:11:ec:1d:79:e7:3b:1f:
         bd:7d:fa:4e:8a:83:f1:9a:af:29:56:ca:81:d1:cf:e0:00:8a:
         45:8d:12:dd:16:09:96:de:51:a9:72:dc:cd:2b:87:00:8c:a9:
         b4:3e:13:f8:24:51:18:b2:9f:f8:8b:ff:e2:03:12:a5:e8:44:
         e6:1a:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----