Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File:                     2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier:          sRb8YElXcFXB/Xb891kU03FGwAazpQ8wZcaHQfiZ9Ps=
Subject key identifier:   9B:38:BE:CF:84:EB:57:98:F8:7D:02:B1:4D:F2:F3:74:91:33:AE:35
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer:       /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial:       01962DF44996EB818C189D2571E462D84FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number:          126D
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: NYaCHRyLYFaqMLrvveRNtdEzEN322NjYf52i18UOWQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:49:96:eb:81:8c:18:9d:25:71:e4:62:d8:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=9b38becf84eb5798f87d02b14df2f3749133ae35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:5d:c9:21:f8:8f:b4:7b:04:47:ab:11:72:
                    dc:67:2c:64:1b:62:b3:06:51:ee:4f:08:02:0d:7c:
                    f0:da:f5:a5:d6:21:3d:b2:10:91:99:ae:a8:ef:68:
                    f3:18:ca:c6:26:7c:31:38:48:93:3b:ee:6e:e1:85:
                    ad:52:01:61:86:93:87:40:c8:c3:56:04:d6:bd:d1:
                    5e:37:18:b7:49:40:30:03:7e:d9:99:ef:b7:d6:4a:
                    af:57:fe:07:62:43:46:f3:9d:41:da:ed:df:a2:fd:
                    0c:91:81:74:08:be:6a:b1:31:ef:0b:8e:a4:cc:32:
                    ca:22:fd:43:6a:df:e0:4b:16:2d:bf:93:94:14:4b:
                    98:58:e9:63:7d:3f:40:f8:d3:34:2a:01:ee:f1:14:
                    04:c2:99:31:d3:8b:d3:2f:3b:c8:b4:3c:59:01:97:
                    a1:6c:bd:36:fb:1f:26:8d:74:6e:07:1f:08:17:68:
                    f7:e6:9f:da:9b:1a:f6:7d:f9:fa:83:4d:c5:a1:91:
                    65:3b:57:bf:4c:09:bf:02:bc:33:8a:18:27:ae:08:
                    78:95:95:72:8e:f4:83:ac:45:32:ed:fe:9d:cb:be:
                    fd:f7:fa:26:ad:76:2a:65:a2:e9:35:9a:b6:5c:1a:
                    5d:f4:06:13:d5:d1:c7:1e:d3:4c:e1:5b:ef:2d:08:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:BE:CF:84:EB:57:98:F8:7D:02:B1:4D:F2:F3:74:91:33:AE:35
            X509v3 Authority Key Identifier:
                keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:77:7a:eb:63:6b:c5:df:e3:72:25:4b:f7:93:e9:20:fa:
         02:29:c0:95:d8:d6:08:91:e5:00:cd:33:7d:0a:b4:f4:11:47:
         29:c4:47:9a:86:37:b0:cc:c8:95:c9:b9:0d:ac:19:6a:8d:8b:
         f7:db:a7:71:13:69:d1:b9:73:1d:df:3f:72:27:02:60:c1:b2:
         f7:17:8c:c2:21:c4:51:3d:de:e5:e8:e2:d3:3c:67:3c:7e:f0:
         f1:e1:be:66:8f:1b:73:2d:55:32:29:20:6c:43:7f:de:7e:47:
         d6:7c:6a:47:66:13:24:c0:42:bc:65:8f:b9:f9:61:18:f2:57:
         dd:b9:05:5d:24:9e:ea:46:1b:77:99:45:fc:65:ab:9b:df:96:
         3b:c9:0d:2a:ab:35:d4:f5:65:6a:a0:07:18:4a:d7:20:ff:f2:
         2e:a0:10:c5:71:3b:b3:0d:c3:59:45:d9:34:a7:53:6c:18:b1:
         4d:85:bf:2b:9a:57:8b:c4:e8:c8:37:91:9a:e7:fc:83:0c:a3:
         6e:d0:df:d2:4d:80:cf:fa:7f:db:be:e5:31:32:76:ac:5a:2e:
         3e:b5:7a:f3:42:9c:0e:aa:d8:ce:9c:47:09:70:00:59:9e:8a:
         29:3b:45:38:8c:98:d7:dd:71:c4:c1:1c:52:31:ea:c1:31:c2:
         7b:90:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----