Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File:                     pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier:          foJG+QrwSL/QpseAYk+rxzYkf9eVykU+jH6rbsp4RCg=
Subject key identifier:   DF:86:01:A5:99:45:52:1A:03:26:66:D1:56:74:02:20:C0:D2:7A:FD
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer:       /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial:       01962ECF68DB5882DAB6F9D96F27B5BA5CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number:          071E
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
                          2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: 6HS7YyrCVl4NjEHxROLEPV6B76igB8Ir/vJHy8pp22o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:68:db:58:82:da:b6:f9:d9:6f:27:b5:ba:5c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=df8601a59945521a032666d156740220c0d27afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:49:c8:95:64:c3:fa:42:3c:a9:ce:01:e2:
                    f2:19:60:66:0a:23:fd:c6:4c:8b:8f:3e:54:08:8d:
                    24:d2:74:53:8e:a0:06:a3:f6:f9:52:41:43:05:b2:
                    47:a7:b6:b6:fe:65:fd:98:23:0c:e0:d5:8e:a3:a5:
                    2b:58:53:4b:e1:a6:8c:bd:70:74:57:c1:74:18:6f:
                    9e:72:fe:d8:f7:3f:85:1f:50:74:c8:ce:94:20:6a:
                    ad:fd:d2:b1:18:e1:9e:1e:7f:36:4c:17:3d:6d:28:
                    0f:3f:df:81:d0:0e:93:31:b4:3d:95:7b:37:7d:62:
                    ed:59:64:6b:65:ad:ff:15:af:81:c7:b7:64:25:fc:
                    d1:ca:7f:02:ee:f1:09:b3:35:7f:84:cb:76:4e:9e:
                    92:d0:82:13:5f:6e:b5:7c:91:90:23:ff:dd:20:b3:
                    1d:6a:34:85:a8:03:51:ba:71:70:8c:fc:dc:76:77:
                    6c:30:9f:7f:85:5d:9c:06:bc:1c:84:37:4b:b7:6d:
                    48:29:bd:f4:df:b4:a6:5e:7c:f2:4d:40:a4:3e:d6:
                    2b:54:74:77:63:d6:7d:61:be:80:22:95:a7:fa:53:
                    9f:1c:68:d5:d6:32:17:12:7e:ec:cd:3b:c4:42:9e:
                    44:db:bc:77:e0:69:24:a6:b2:fd:7f:9c:dd:7d:ec:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:01:A5:99:45:52:1A:03:26:66:D1:56:74:02:20:C0:D2:7A:FD
            X509v3 Authority Key Identifier:
                keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8c:86:f1:fd:7a:11:b8:e3:2b:a9:62:39:95:86:86:2e:05:
         17:e0:35:92:ad:78:a5:f1:c1:b9:b7:f8:3e:34:20:70:df:bb:
         14:2e:b5:5b:86:0f:c3:31:6e:cd:42:c4:97:e4:36:e7:01:10:
         28:c1:bc:6c:a1:7a:e2:77:55:3a:c6:71:b8:75:36:0a:48:9c:
         b0:85:8d:8d:69:41:df:b7:10:e9:a1:7a:fb:a5:0c:2b:8e:bc:
         0c:83:e1:6f:4f:95:78:53:d4:19:17:0a:3f:21:e4:c7:f6:48:
         c5:46:2e:88:9d:c9:74:e4:21:80:62:a6:0d:1a:3d:14:a1:17:
         0e:d1:49:46:c4:e8:8e:ad:4f:cf:e1:9d:e9:82:7e:9b:83:29:
         10:a1:88:ab:00:2b:5c:8e:02:a6:a5:9e:b9:e9:82:c2:19:1c:
         9f:66:80:c5:21:17:a7:d4:4c:35:d8:df:6b:4e:17:87:6c:87:
         3a:9f:f0:29:ec:df:f8:74:4b:92:fd:13:16:06:87:e2:90:6e:
         5a:b4:11:32:60:ac:59:cc:66:51:13:21:c6:d1:47:e6:8c:79:
         18:c5:67:ae:a7:e1:39:cf:b7:b1:af:4b:80:70:76:c5:a1:e4:
         b5:fd:00:0c:04:b7:bd:aa:7e:85:7e:6f:bf:45:eb:4f:58:f2:
         a5:52:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----