Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File:                     2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier:          YAfEfzDQ0JNDZcjrO9/dfUiyrILqQsT2uKxSJ5gmatY=
Subject key identifier:   D0:23:36:B3:75:21:78:EB:AA:A7:5D:CE:44:9F:F2:98:F1:00:DF:C8
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer:       /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial:       01962DF44198BB3DFB7668E512CA515B8A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: UXIkMvn9xxMDlFIBD/vObzvjASceMlfW6MyuNjk8JN0=)
                          2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:98:bb:3d:fb:76:68:e5:12:ca:51:5b:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=d02336b3752178ebaaa75dce449ff298f100dfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:ce:f6:7d:88:2f:b9:98:de:08:70:04:12:
                    1c:b6:07:59:7e:7a:0b:d7:a8:11:4d:32:dc:b4:55:
                    9a:21:20:4d:36:4d:43:fa:c8:92:87:d3:38:64:e2:
                    83:01:e5:e1:ca:fc:ed:e6:6a:16:91:3e:08:c7:19:
                    e9:64:6d:24:f9:44:85:d2:2d:e7:fd:e9:f7:f3:8a:
                    aa:81:6d:e9:14:90:bc:de:8a:f7:67:48:71:d0:85:
                    1d:cd:13:ce:3b:4c:c6:b3:67:4f:e5:2d:89:59:81:
                    ab:65:fe:12:3f:97:89:1b:8a:01:bc:67:be:4b:e2:
                    11:bc:66:0b:15:1a:4c:17:63:23:4b:12:90:76:4c:
                    00:42:75:39:b8:05:27:a4:dc:c5:29:4e:ff:92:52:
                    90:e2:9d:08:62:ca:a5:ca:2a:a4:01:60:bc:d7:93:
                    e8:c5:75:b8:84:9b:1a:b9:f6:b5:9f:4b:e8:0b:a5:
                    4e:85:cf:91:b1:1f:59:bf:71:ad:b9:e4:c9:d6:71:
                    23:81:a7:48:71:a2:34:69:68:96:8d:5e:88:e1:5a:
                    32:aa:91:64:98:5d:00:66:74:0c:2e:c3:b9:c9:66:
                    7f:a5:25:2b:af:56:6f:c5:1f:e8:46:d4:4d:74:3d:
                    79:85:63:b6:e6:60:23:af:2a:15:68:41:38:6b:a3:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:23:36:B3:75:21:78:EB:AA:A7:5D:CE:44:9F:F2:98:F1:00:DF:C8
            X509v3 Authority Key Identifier:
                keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:4f:dd:0c:22:15:92:df:3c:91:cc:1b:c4:7c:86:47:8f:
         11:34:e7:c6:3a:c3:da:32:53:06:63:0c:a5:00:be:6d:fd:7a:
         7a:20:b1:2e:b8:81:e4:ee:9f:a2:65:5c:55:62:d7:03:e6:f8:
         99:ee:8d:4e:6b:d4:48:07:50:57:d0:74:ef:9a:ca:5a:19:64:
         34:f7:bb:ed:78:b2:4d:f7:8e:b0:d1:66:1e:0b:ba:a6:23:35:
         ca:b5:32:40:79:5f:64:8e:93:29:dd:c4:8a:95:bd:41:99:9d:
         70:37:dd:63:f9:88:19:3f:0f:04:b0:47:e6:92:c2:c9:f3:62:
         44:6f:31:47:67:6e:bd:b3:28:75:40:fa:0b:ae:40:a6:4c:16:
         c9:71:57:86:cc:10:c3:aa:f9:4e:35:14:28:dd:94:7e:14:89:
         4c:da:f3:12:b2:eb:34:cd:ed:41:07:67:ca:0b:52:5c:ff:7a:
         9f:2b:56:e5:bf:6d:af:31:00:ec:19:98:04:2e:50:a2:a8:ac:
         88:93:08:7a:6e:9f:3f:9e:78:bd:5f:48:6b:cf:9b:16:d3:4d:
         35:98:0e:af:a6:76:a5:b1:17:35:73:37:a4:ad:7e:e0:80:7a:
         c3:5a:4c:62:cf:4a:24:b0:56:54:15:35:89:93:bc:2f:8b:44:
         c3:cf:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----