Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File:                     2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier:          RO+mNCjb9BwX1Yz8BxecSc24vB+fCdL22kaHwXol5KI=
Subject key identifier:   B5:76:AA:5E:A7:AD:32:8F:4D:1E:71:CD:BC:D4:91:05:85:5D:01:61
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer:       /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial:       01962F06BCC9EB0007143469BE991E2D5BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number:          0754
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: Ha20vXVbUW7eUN5ejCD+pDLq1OXawBrmaUUubm4kOTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:c9:eb:00:07:14:34:69:be:99:1e:2d:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=b576aa5ea7ad328f4d1e71cdbcd49105855d0161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:05:c9:13:8e:48:d6:1a:a1:23:0b:81:d2:
                    3e:a0:ad:db:59:c3:49:31:6b:ce:24:1e:ea:e6:2b:
                    69:9f:27:11:5d:4f:12:87:4b:ac:9e:21:f9:65:9e:
                    da:98:b8:0d:dd:04:c6:89:a5:62:10:46:8d:c6:9d:
                    e8:25:56:9f:1d:2f:de:df:aa:2b:9c:e7:e5:24:80:
                    be:66:61:f4:08:e2:88:65:f4:08:d5:d1:19:71:c1:
                    98:de:cb:3d:41:a8:d3:ac:ff:83:25:50:49:97:bd:
                    99:f6:da:41:f4:4a:84:2d:e1:06:0c:d4:2e:2b:5b:
                    bc:a3:e8:cd:09:7d:98:e9:87:25:23:05:02:32:39:
                    54:f2:7c:52:07:26:fa:57:9c:6c:16:d3:5a:40:87:
                    4f:04:ac:0b:81:59:61:a8:54:0d:6f:f3:c3:e3:b0:
                    3b:a6:9c:a9:87:3f:4c:2d:9b:ab:96:90:7b:4d:86:
                    50:ef:03:16:be:07:72:07:ed:50:33:75:2b:d1:a4:
                    c0:00:92:30:ff:a0:11:45:1f:95:b1:99:53:87:f3:
                    d8:c2:0c:ba:24:d2:c4:a6:2d:55:11:8c:7a:ce:a0:
                    24:96:1b:30:ff:c4:f6:f7:30:22:c9:c7:93:95:a7:
                    70:7b:9b:0e:74:3f:45:02:1a:0a:f9:a9:b6:47:95:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:76:AA:5E:A7:AD:32:8F:4D:1E:71:CD:BC:D4:91:05:85:5D:01:61
            X509v3 Authority Key Identifier:
                keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9c:88:0e:09:c2:53:cb:a2:bc:99:8c:3b:d4:69:bc:94:25:
         34:0b:d2:40:75:9b:55:f1:7a:70:69:16:89:8d:ee:d5:f0:41:
         f2:7c:12:88:64:1c:7c:a7:e4:f4:6b:ea:c5:a8:d5:c2:f5:6d:
         0a:17:78:2a:c7:40:56:5f:3f:c1:e5:6b:6b:8a:28:47:61:cf:
         e2:1d:8c:70:b3:ea:63:3f:ac:22:18:37:18:bd:1e:69:66:90:
         d9:e0:af:2e:1d:b1:f7:f5:1e:3b:89:2e:a6:76:f0:79:f5:61:
         2f:95:b9:b7:fe:23:bb:18:39:c0:af:60:6d:59:1a:f0:d6:1a:
         18:84:4a:b6:46:b2:6e:1f:3a:ff:01:50:56:bd:8b:b1:e2:56:
         d3:a6:69:da:dd:ea:db:a5:7d:03:61:44:5c:75:4e:9a:07:24:
         af:de:9e:8c:a8:79:62:de:29:b8:c3:9f:a0:19:cf:96:10:8b:
         2a:31:72:5d:d4:c7:97:a1:1d:fb:37:df:9c:32:88:b0:20:4f:
         80:83:cd:69:be:31:be:cb:be:7f:8e:8e:d8:11:f1:3b:ca:59:
         62:de:fe:4b:4b:0d:f6:29:85:fa:a9:41:6a:f7:64:d9:e1:ef:
         f4:30:cc:b2:5e:30:63:45:34:5a:1e:18:ea:21:90:07:71:cc:
         2c:de:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----