Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File:                     2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier:          +pv9Xc+2ctPARMuls0V1YEaYNbMG28zRmD09w1Nm3Kc=
Subject key identifier:   33:E8:56:70:E8:95:2B:55:BF:AD:6A:3E:64:A5:14:CB:72:83:41:F0
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer:       /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial:       01962E6199C86982104E61345CCD822742D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number:          0E45
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: G/aW6uA2HZjzPiAlAU3P7ehu8yugjf+4m9mkKLNGzp8=)
                          2: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:c8:69:82:10:4e:61:34:5c:cd:82:27:42:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=33e85670e8952b55bfad6a3e64a514cb728341f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:c1:f2:7c:ca:ef:b0:c3:b4:96:90:c6:c3:
                    bb:63:ba:7b:1d:bf:78:9b:03:c1:52:d3:5f:92:e0:
                    36:2b:28:9d:1f:cf:09:c9:84:51:20:e1:6d:b6:9a:
                    50:be:67:33:0a:b4:26:a6:41:ea:25:3d:fa:a8:42:
                    fa:cb:17:6d:03:af:e3:11:f6:ec:9f:9c:5a:16:9d:
                    d3:6b:05:92:bc:c2:84:c7:62:94:27:b9:b2:26:53:
                    0b:7b:e0:62:ce:33:d7:82:28:0e:a7:1d:ab:8a:51:
                    cd:f1:31:60:93:ec:da:90:54:b1:9e:af:85:72:80:
                    2a:85:d4:de:f9:a6:59:4f:44:7c:6b:36:0f:6e:cb:
                    cf:ff:4d:83:fc:89:33:5c:22:cf:56:d9:c2:ba:03:
                    b4:85:f7:83:d0:a9:8a:d1:35:f7:60:7b:78:b8:ed:
                    a9:7d:e0:43:11:54:a9:d0:a9:20:cd:b7:8d:dd:ab:
                    1b:88:73:a4:ae:46:c5:6a:f3:b7:9c:80:a0:0b:26:
                    73:3e:d9:b2:14:68:50:cc:29:e5:dd:37:d8:d6:01:
                    54:69:0a:52:97:2d:1c:af:e9:85:af:46:dc:71:ba:
                    67:f2:6f:92:59:ea:97:a0:6b:b1:d5:87:c3:a8:ca:
                    e3:9c:12:aa:d2:ea:12:4b:5f:08:3d:3b:ce:59:97:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E8:56:70:E8:95:2B:55:BF:AD:6A:3E:64:A5:14:CB:72:83:41:F0
            X509v3 Authority Key Identifier:
                keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:c0:8d:14:f0:3d:3a:a0:cf:d4:80:d8:58:bc:1b:78:46:
         1b:f4:81:d4:47:35:5b:41:48:77:6b:0f:8f:c6:4c:63:58:cf:
         c0:a2:ab:61:09:8b:49:86:b9:7d:ac:a7:ce:3d:67:7a:ef:10:
         10:fd:e4:02:6b:d1:2e:96:3a:41:bd:4d:76:f3:64:b7:b7:cd:
         dd:73:d0:1a:02:fc:e9:28:d6:17:36:32:f9:02:d1:8d:12:55:
         2f:73:5d:69:da:76:a3:42:b1:6d:94:38:61:dd:e0:59:eb:db:
         46:50:bc:54:b3:48:af:b8:0f:2b:a9:a0:fe:a6:ad:e8:58:51:
         f1:b6:6f:00:71:55:52:7e:d4:69:bc:c1:4d:a5:8a:31:bf:88:
         a4:bd:9b:4c:79:dd:1e:fa:3d:07:f4:e9:98:a9:4c:6b:51:b2:
         ec:63:3e:d6:35:ca:c4:d1:0d:31:e3:f0:07:69:3b:88:40:e9:
         ca:21:62:26:7f:82:9a:0c:ba:46:7c:42:4c:7c:05:e1:1c:73:
         fd:b7:19:9c:19:72:00:37:65:f8:11:dd:10:0e:4d:72:a4:24:
         38:cd:fc:de:be:05:01:25:8b:61:2e:dd:48:1f:79:cd:b1:39:
         67:c8:45:ef:b2:1e:dd:29:69:c8:ce:42:6e:79:a3:bb:3e:e8:
         be:05:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----