Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File:                     2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier:          MLIfv9KhLoyebhJ4YxHkC8pN2W0L+LnRcv99ntMo2mg=
Subject key identifier:   1C:8F:1A:C0:6F:6C:EB:74:2A:23:0E:2B:C3:04:82:0C:A6:E9:C2:9B
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer:       /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial:       01962ECFCC5EFA6F522F0738C0B604018BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: XSqtyihdHAbWhDHlt3lnYfv4z+BcoeWMJ/qCdtGNhmo=)
                          2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:5e:fa:6f:52:2f:07:38:c0:b6:04:01:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=1c8f1ac06f6ceb742a230e2bc304820ca6e9c29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:29:ff:55:a0:51:a3:92:f6:b4:32:cd:d3:
                    8e:b8:f9:3a:26:7f:49:20:18:03:2e:4f:30:65:fc:
                    51:e3:76:37:a6:6b:09:4b:e3:e6:eb:64:99:1f:20:
                    17:0c:f6:9a:ee:b2:fc:62:34:b0:ce:3d:7c:5b:92:
                    69:aa:ae:92:eb:1d:f4:80:2c:4a:e3:23:c6:15:8c:
                    2f:e8:63:89:f3:7f:72:c8:73:8a:c6:1a:f5:8d:2b:
                    25:9f:21:47:42:bd:61:e2:72:d7:d9:7d:2a:42:68:
                    ea:dc:1a:fe:c6:56:22:b5:f0:67:34:11:8d:ac:08:
                    d1:27:43:32:00:fa:0e:e9:40:b3:f3:89:99:3f:96:
                    a8:b4:2c:74:73:58:c9:c2:cb:63:e5:71:06:c9:8e:
                    ee:09:25:fb:13:55:91:02:d4:6d:86:11:ba:6e:b2:
                    69:2e:c7:80:27:f2:92:e2:3d:71:db:0e:67:60:e3:
                    1d:d2:61:f4:0a:24:70:b9:02:d2:03:ee:24:9e:96:
                    bb:2d:57:b8:cc:53:a5:0d:04:cc:33:3c:08:a4:fc:
                    ff:e1:3d:83:d8:7a:62:2a:39:ce:cc:ea:71:d0:e0:
                    70:9f:3d:4a:4e:2a:8d:9b:0e:7b:26:a1:1a:fb:e1:
                    8d:ea:e9:c3:2e:e0:71:12:3f:2c:9d:18:ae:2a:b4:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:1A:C0:6F:6C:EB:74:2A:23:0E:2B:C3:04:82:0C:A6:E9:C2:9B
            X509v3 Authority Key Identifier:
                keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8e:c7:11:74:ad:59:e9:da:6f:d7:6e:e5:ae:a4:b1:01:4c:
         e7:d9:be:e9:e5:91:ea:d8:1f:e9:68:b3:64:0e:57:dc:3f:55:
         3b:11:06:55:f1:ed:92:b2:2c:c0:41:0e:b4:35:17:4f:d5:2a:
         33:f4:3c:33:04:51:f9:71:d4:32:ff:a4:ac:73:c0:af:b0:4e:
         20:2b:dd:98:d0:86:f8:ca:eb:b4:d5:37:f4:97:c5:14:28:c1:
         60:d8:62:fd:05:9e:51:92:f4:2e:95:a4:69:8e:40:db:3a:57:
         b6:08:d6:ba:64:98:23:c9:d2:68:b6:a4:b2:8d:6f:60:a9:e8:
         8c:ed:eb:e4:56:a3:0f:66:38:5f:82:e4:4e:e1:62:21:52:4b:
         cc:0c:b6:f5:6b:e3:2c:ba:bd:fb:5d:f9:34:81:28:7d:47:3f:
         9f:64:f8:12:cc:de:71:47:6c:5c:84:28:fd:a5:6d:6c:4b:db:
         ed:f9:04:50:4e:68:93:0c:2d:c0:34:63:8a:80:85:e0:39:77:
         6d:f4:50:a4:1f:56:55:4f:2b:0d:8f:1b:c9:5d:1d:a4:99:cf:
         32:82:96:26:eb:ae:69:26:9a:79:08:9e:d9:b7:b1:3a:cf:59:
         f9:a4:d6:f1:a2:62:fd:79:19:4f:05:ca:ea:05:59:28:f3:12:
         72:bf:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----