Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          8zcIGBySVgxxy/5PfDVvZdH5JvRvrubpANV9va7eNPA=
Subject key identifier:   81:D9:EC:4B:D6:63:0F:A5:93:E7:B1:94:0D:C4:7C:39:A3:53:05:77
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       01962DF39C9B63BBF13702D514C0B0DD484E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          0C7E
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: UPW/AujqD4qu8OuwjDnS5kOGe2WnRikdNqMkM28+i9Y=)
                          2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=)
                          3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=)
                          4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=)
                          5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:9b:63:bb:f1:37:02:d5:14:c0:b0:dd:48:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=81d9ec4bd6630fa593e7b1940dc47c39a3530577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:12:93:c6:27:82:3c:d6:fa:2f:2a:9e:c0:
                    2f:cf:c7:44:8d:d9:e1:cb:63:fc:88:77:f5:62:20:
                    2f:96:aa:f8:7f:7a:e7:67:9b:20:a4:7d:13:00:ca:
                    97:61:8a:dd:f7:f7:53:c9:15:e5:4f:53:f0:d0:46:
                    8a:43:66:4d:42:74:76:e9:f4:bb:b6:8c:f8:ac:97:
                    d1:18:7a:95:6a:8e:c7:fd:c2:01:0b:cb:ec:d2:8b:
                    65:4e:6f:a7:e8:78:cb:fe:61:a0:33:bf:e6:63:33:
                    91:20:2d:bd:c7:c2:c2:b8:f5:92:1b:45:0f:e3:0a:
                    ff:40:ef:5e:98:49:b8:6d:2d:5d:d2:8e:ba:30:1c:
                    43:8a:28:18:cb:9e:2c:fe:69:0b:86:0d:9f:5d:3d:
                    19:4c:0a:92:0f:21:9f:62:8d:7e:49:60:f5:b4:e7:
                    23:ef:d3:3a:88:8f:3f:22:de:06:27:d3:dc:35:98:
                    be:30:32:64:38:3f:a5:98:6e:18:eb:88:c2:b1:ef:
                    76:0d:64:34:97:7e:97:d5:57:f7:de:6c:22:90:e5:
                    59:d2:b1:5a:06:b9:6d:30:98:d3:6e:ea:98:2a:b3:
                    db:49:6d:69:47:10:2b:c6:5c:fd:c5:a6:2d:03:99:
                    66:a3:d1:44:f7:c5:48:66:38:2e:fe:af:06:ab:70:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:EC:4B:D6:63:0F:A5:93:E7:B1:94:0D:C4:7C:39:A3:53:05:77
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:da:f9:9f:b1:4e:8a:2d:7b:36:6c:1c:cc:3c:28:4b:66:11:
         30:93:8d:07:ea:86:3a:78:91:a8:65:47:55:63:d6:d7:e4:29:
         db:cf:69:93:56:e6:c1:a5:8e:46:40:40:b7:2a:46:8f:a7:f1:
         31:66:85:b8:ab:c9:b4:cb:82:84:23:16:4c:18:43:b9:b8:e4:
         94:b2:94:c5:6c:85:14:53:c3:63:62:10:20:a9:b1:71:1b:70:
         6e:72:77:58:cb:0a:01:63:bd:0e:ab:c7:ac:2b:cd:e9:69:18:
         8f:f9:ee:73:01:b5:9e:d2:6c:f0:ec:d9:91:e8:7d:89:af:72:
         f6:c6:79:75:77:06:8c:47:6d:27:5a:77:50:6e:84:c4:b5:07:
         a4:2d:20:a6:02:3e:f5:9a:4c:48:f3:18:cb:c1:8c:38:8e:1e:
         54:f8:86:87:5c:0d:16:b0:fa:af:ae:41:b7:8b:02:c9:7a:de:
         18:db:50:15:4b:7b:26:9c:43:d4:37:d4:7c:d8:12:3a:75:15:
         67:b5:88:92:f3:2d:3d:55:24:45:6a:b8:46:f7:86:b8:e6:98:
         76:69:36:61:2b:09:32:49:35:de:d5:1e:ae:e3:db:6c:41:ee:
         d3:d9:43:99:4d:4b:df:1b:c7:b0:e4:dc:4a:20:e7:8f:6c:9f:
         b1:30:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----