Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File:                     2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier:          Rd/lUe+KpGHcs1cRgn3u0sZkz5yKxhKfuEvvoGV5Diw=
Subject key identifier:   7A:79:F1:01:FB:8F:FE:5C:62:E9:CA:7A:29:6C:03:32:D3:7F:7B:58
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer:       /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial:       01962E61DCBB85C6188E9DD6C8C701C2D77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
                          2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: fdsaq8p9N8AOZD/TYGFOgkznXNWo1u4rxzSU7AqmZNM=)
                          3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
                          4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
                          5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
                          6: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
                          7: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:bb:85:c6:18:8e:9d:d6:c8:c7:01:c2:d7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=7a79f101fb8ffe5c62e9ca7a296c0332d37f7b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:69:ad:b0:e7:df:57:68:1d:db:8b:db:08:
                    a6:af:58:50:0b:b4:ae:05:ee:ac:7c:3d:94:2b:66:
                    cb:14:32:db:ab:fc:d2:a0:e2:fd:a0:5b:0c:73:8c:
                    62:c6:98:e2:10:a5:02:07:ca:f8:43:00:04:d2:c3:
                    e2:d8:02:78:a8:a8:6f:d1:91:c9:64:bc:70:51:87:
                    04:47:70:82:79:85:45:9e:fe:9d:81:1c:5d:e1:e5:
                    27:65:48:f4:cd:1b:f8:28:9c:54:13:0d:e7:29:4c:
                    31:a2:c3:fe:0b:6e:f2:ec:94:17:7a:ff:2c:f7:7c:
                    d3:6a:26:81:38:d6:e6:e7:3e:ef:d9:23:7c:24:50:
                    e8:60:1f:d8:a9:8f:d0:1b:a3:59:82:09:8d:b3:2d:
                    c7:6e:3f:4e:a5:94:2e:b7:07:2e:1f:ac:dd:30:49:
                    f7:09:14:3d:24:d5:83:d2:e1:cd:81:ee:1d:8d:01:
                    46:c6:fd:94:65:86:3e:95:14:a2:f6:4c:0b:f3:a5:
                    21:dd:ef:01:4c:40:54:dc:fe:9b:2d:1a:21:1c:86:
                    67:59:32:a4:83:10:cf:1c:e2:39:51:a8:c2:e4:0b:
                    02:4f:6a:e0:9f:77:90:7d:de:04:58:f3:29:0a:68:
                    b2:b5:8a:c5:be:0c:5a:05:98:c3:1f:77:71:39:26:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:79:F1:01:FB:8F:FE:5C:62:E9:CA:7A:29:6C:03:32:D3:7F:7B:58
            X509v3 Authority Key Identifier:
                keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fa:57:29:cb:2d:6b:f3:7d:2c:fa:1d:0b:66:6f:0f:7e:18:
         7c:1e:68:c8:90:ab:19:82:36:90:e4:16:10:74:79:bc:26:f3:
         ea:0b:f3:0c:cd:77:b3:ae:1d:bb:59:14:fe:f7:1c:cb:18:ca:
         55:24:9b:ed:89:c8:61:a3:07:27:8c:1b:69:65:8f:b4:0b:fa:
         01:56:18:dc:36:0a:24:f0:42:c5:e3:f9:f0:01:46:65:85:1a:
         d6:84:9d:42:02:63:3d:37:d3:7d:1f:71:b3:4d:0a:5a:93:4a:
         e8:76:6e:0d:5c:70:fb:6e:47:44:ee:c9:2a:82:cf:b9:fb:d6:
         2b:82:cf:26:a1:90:6d:95:f9:2e:e5:62:24:c5:53:40:99:61:
         7b:ba:56:dc:f8:2c:10:55:ae:ce:b7:10:bd:97:05:06:60:fd:
         56:56:3b:92:f4:56:c4:5a:0a:a6:2b:46:4b:e2:99:aa:d7:29:
         ff:d1:fd:84:48:dd:0f:d6:15:6f:cf:8a:ae:e5:8a:dc:71:59:
         e1:ad:53:3c:13:ce:36:64:40:f7:2d:1b:91:aa:8f:a9:72:4e:
         a0:ae:68:3e:31:01:b9:96:bf:4b:c2:76:fb:0c:fa:24:13:ef:
         ef:5c:32:a9:55:be:fc:54:5f:0f:93:2b:d0:67:29:57:5e:a8:
         08:b4:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----