Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File:                     2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier:          9nj0Cb8Ku7Jc+nRiw+s9sS51vrKMJpWy9mqretOBiY4=
Subject key identifier:   79:B2:98:C8:C7:12:43:FC:96:4A:8A:F0:4A:A5:0E:53:6C:C3:8B:32
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer:       /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial:       01962E2AE3B7ED24053736E5C81281B8D2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: r9aDNDr9zZxk0RCpwqMZIcgIVXFmk4NWD3lA8pirYz4=)
                          2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
                          3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e3:b7:ed:24:05:37:36:e5:c8:12:81:b8:d2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=79b298c8c71243fc964a8af04aa50e536cc38b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:e5:a5:fd:8d:e3:88:5a:f1:1a:43:fd:e3:
                    62:36:cb:ff:0c:cc:f4:68:ac:a0:e7:9c:5a:e7:92:
                    f0:f4:ce:14:00:37:78:83:f4:78:c3:fb:41:93:d1:
                    81:55:aa:54:77:d8:9f:b1:04:1c:b9:29:c7:db:44:
                    d0:4a:2e:41:33:db:b2:72:be:c9:07:74:01:2f:7c:
                    13:68:c2:2c:d1:06:c2:ce:f1:16:73:ad:80:a4:18:
                    d2:c7:80:04:f6:ca:b9:22:e5:88:9e:70:87:02:c6:
                    8f:c8:f3:ca:28:bb:72:a8:be:cf:92:f1:26:25:5d:
                    7d:34:7f:1a:bd:79:a7:56:28:ec:f6:a3:43:b4:48:
                    69:66:81:f0:be:27:4e:56:e7:87:31:8a:c0:4f:a8:
                    12:5f:5b:1e:ce:89:f2:b9:51:ed:52:d3:53:dc:53:
                    ad:eb:36:68:53:92:bc:10:2b:92:e7:c2:76:e7:d4:
                    87:b4:49:89:bd:70:11:13:22:c4:9b:91:13:95:46:
                    ec:a7:17:af:9d:1e:5d:71:8f:17:22:25:c1:d0:03:
                    1d:42:72:45:0c:db:4a:f5:06:71:23:b2:ac:5e:09:
                    83:9a:87:27:0e:0c:06:5e:6c:bd:5e:c5:7e:96:97:
                    d9:6e:5a:b7:c3:ae:64:29:5b:c9:03:a4:bd:04:45:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:98:C8:C7:12:43:FC:96:4A:8A:F0:4A:A5:0E:53:6C:C3:8B:32
            X509v3 Authority Key Identifier:
                keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a1:f2:f0:7b:70:67:45:a3:eb:fa:80:b1:f5:eb:72:94:e7:
         f0:a5:f9:9a:52:d6:e4:4c:32:a8:1c:43:6e:be:a5:61:3a:ae:
         e1:fb:c2:2a:58:a1:69:27:f5:10:bd:27:ef:cf:59:e2:b6:dd:
         57:a0:b0:3a:2e:09:6f:d8:aa:06:cd:ff:c4:c7:b9:0d:7a:8f:
         24:b9:86:44:5b:04:98:86:92:9b:f6:7a:13:80:00:2f:94:ef:
         ef:f2:ba:43:ca:7d:06:04:79:f4:d1:c1:a2:79:97:ae:a3:ae:
         89:65:22:a3:51:38:f5:58:a1:40:f7:a4:3a:39:fc:f2:8f:c1:
         22:7e:23:60:f3:2a:e0:53:ea:77:6c:26:f5:e8:c0:3f:c4:1a:
         4c:a5:18:19:e5:14:00:f3:89:3f:b9:a9:b4:c7:20:79:c0:14:
         3c:28:b6:77:54:eb:6e:86:33:2c:03:40:ca:ea:7b:f1:63:d4:
         e4:13:ab:3b:a8:3b:04:0c:0e:a3:7a:cc:1e:28:d5:3e:6c:b8:
         0c:0f:93:81:0f:86:18:0c:a4:52:c7:77:ff:89:73:0b:81:78:
         35:07:16:39:52:d8:a3:98:14:19:db:57:ae:0e:db:8b:2e:d1:
         35:ab:7b:b6:72:49:d7:dd:19:f7:9a:55:ba:59:86:b8:52:19:
         1c:db:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----