Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          TLUslWs/0Gz3/L1+GTahLJeURDHU6XVoENiMcuHqQho=
Subject key identifier:   71:AE:89:34:C7:6C:C9:D0:17:AD:CE:DC:BF:46:9D:D9:06:28:94:BF
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       01962E98CCA352A76B3C9077BB41F17A89AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          0B55
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: pz3fqCh1LmG8GvgCahklyzPiukV1yy2oG0l8CGahgn4=)
                          2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
                          3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cc:a3:52:a7:6b:3c:90:77:bb:41:f1:7a:89:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=71ae8934c76cc9d017adcedcbf469dd9062894bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:27:98:fc:45:62:65:1c:a9:db:dc:0e:bc:
                    c4:d1:61:b0:84:75:39:fc:3e:ee:af:53:2b:0f:03:
                    1a:14:4c:48:a9:f9:aa:0d:b4:01:05:fd:9f:26:12:
                    4a:9e:c5:e9:36:0f:60:0b:dc:40:6f:9a:7c:1c:3a:
                    1c:8e:44:72:cd:b3:43:15:25:04:d1:aa:14:c4:77:
                    de:c1:ae:13:91:96:0c:a6:39:f9:74:2c:a3:85:e3:
                    d1:cd:a7:7e:c8:d4:0a:70:ac:4b:c2:60:f7:09:dc:
                    fb:f0:57:0a:df:f2:0d:52:4b:29:aa:be:c1:5a:56:
                    5a:cb:87:42:2c:ff:ee:2d:d3:b8:02:4b:a7:02:dc:
                    c9:46:26:4a:51:12:50:78:27:82:7d:4b:1d:3d:ff:
                    f0:24:56:c8:cd:19:d0:68:b7:e9:0a:8b:49:5b:2d:
                    81:b3:5b:f8:70:77:ed:44:05:a6:dd:d3:dc:20:b8:
                    df:26:e5:49:d0:4d:db:84:ac:47:fc:c0:12:fb:b2:
                    d9:21:fb:e8:86:5f:0d:ab:e3:cc:25:5f:d7:3b:ad:
                    8f:af:2c:d9:4d:a6:b7:f2:34:da:18:36:7f:28:28:
                    40:19:de:8c:7a:8f:3d:39:e1:3c:25:67:cc:c6:d9:
                    f3:c1:48:86:0f:99:a7:d0:62:83:bc:91:f2:94:ad:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:89:34:C7:6C:C9:D0:17:AD:CE:DC:BF:46:9D:D9:06:28:94:BF
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:9b:05:5a:0e:cc:bb:d6:e9:fc:2b:44:0b:eb:63:a2:87:
         db:55:e9:aa:b5:75:01:9c:2b:cb:56:ed:70:75:e2:dd:89:39:
         10:2e:e8:a7:23:16:48:c1:5f:f4:e8:40:04:6c:73:fb:ea:d4:
         6f:01:08:3f:18:de:6e:ad:ae:15:ca:7b:ef:9b:f7:b2:1d:43:
         3f:d7:da:e0:d7:32:fd:76:84:43:cc:c4:4f:43:62:4d:89:19:
         6d:29:e6:2f:ef:5c:96:52:87:cd:7e:0c:88:56:ef:1a:22:63:
         df:f5:ee:d1:3f:a0:69:5d:80:ba:a7:ef:73:52:9e:17:3d:e5:
         b0:ff:2c:68:c7:4e:76:fe:47:f4:d2:b5:7e:72:f1:30:25:9c:
         16:f3:96:0b:0d:cb:1d:29:40:2d:5a:4b:cd:c1:31:29:01:74:
         38:c5:2f:f6:b5:9a:8e:73:8d:df:91:0a:75:b4:9c:24:83:68:
         3f:80:b2:69:b3:e0:7a:fc:e1:fd:69:d5:50:c7:61:d6:4f:40:
         a0:ee:0d:3e:9e:a0:e3:11:4c:9f:d5:37:96:90:0c:ed:c0:19:
         c8:c8:e3:c2:6b:9f:d2:ed:d9:e3:dd:62:ff:e8:92:e9:81:4d:
         29:d4:05:76:fb:dc:d0:e3:d1:80:61:8f:b5:bc:c8:4a:39:3a:
         aa:9e:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----