Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File:                     2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier:          niFF+xX8Gk9J+UzxAiqElG/ZVoTuJ8+pCjfkdPhtdhg=
Subject key identifier:   6E:70:60:56:4F:C2:81:84:0D:70:D7:50:C5:01:0A:72:7E:F0:1D:CF
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer:       /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial:       01962F3DB4B60B21D096EC7B047DFE6109D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number:          0C2F
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
                          2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: 2SLIajg6up+q5WdD8MhyRPWc5z9/H7a1Tx9OnVAj5wQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:b6:0b:21:d0:96:ec:7b:04:7d:fe:61:09:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=6e7060564fc281840d70d750c5010a727ef01dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:c2:ff:a8:fa:9a:3c:92:cc:cf:08:c4:cb:
                    e8:23:8e:05:8e:fc:74:8a:57:26:5d:b1:bd:b2:1f:
                    9c:2a:9e:51:d0:07:e8:eb:bf:24:ca:07:1e:9b:da:
                    07:fc:5c:d8:61:69:6b:c9:09:d3:52:8c:dd:2d:8c:
                    99:97:30:d0:d2:c0:5a:17:79:d1:3e:84:46:79:f9:
                    59:d7:42:17:52:5e:ab:d6:2b:32:d9:05:ed:88:e5:
                    8f:53:bd:af:d6:43:62:92:38:47:d5:76:42:f5:31:
                    50:9a:0a:d2:ef:14:26:51:87:ce:d2:d1:9c:a4:1d:
                    c7:7f:a7:9d:ea:a8:5f:4d:6f:14:0a:dd:b4:08:db:
                    15:11:fb:dc:a1:5e:8b:0e:12:b3:b3:57:6e:60:80:
                    3b:c6:59:11:4e:9d:c1:69:82:24:4e:c7:dd:b4:1f:
                    20:10:35:92:d4:f9:83:7f:25:76:38:e3:e2:82:33:
                    bc:9d:c2:f3:0e:79:a4:fe:32:37:76:20:70:de:52:
                    85:f5:e1:32:bf:5b:31:6f:86:dc:3c:38:ed:a8:de:
                    1b:ee:dd:9b:dc:45:21:85:e5:8c:27:fe:57:1b:71:
                    ef:08:91:00:cc:63:5b:f7:31:a3:0c:2f:03:10:f8:
                    e5:01:99:e5:e0:a1:06:aa:1e:4a:12:6b:40:9e:20:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:70:60:56:4F:C2:81:84:0D:70:D7:50:C5:01:0A:72:7E:F0:1D:CF
            X509v3 Authority Key Identifier:
                keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6c:79:69:e3:b2:bf:74:1f:ea:f6:15:d9:03:d9:7b:5c:37:
         04:90:18:28:30:b8:43:77:cf:a8:61:78:8c:c7:fd:7b:c7:be:
         f3:8e:5d:6a:f9:98:a0:5b:cb:0d:7d:82:73:ee:7a:39:b8:67:
         57:66:af:42:39:7d:40:e9:86:6f:bc:42:27:fb:4e:1e:0a:3f:
         cb:60:da:f3:e0:c6:90:6f:ac:31:d3:3e:32:28:9e:9b:f8:1b:
         4c:d3:1f:60:09:8c:16:60:1f:72:4a:d5:df:72:49:88:36:5c:
         80:60:7b:90:6a:12:db:c8:ae:c7:9b:a5:0d:00:89:d3:56:84:
         75:c4:63:9a:f2:67:b5:10:14:5b:29:7c:ac:08:60:08:17:92:
         55:6c:a7:aa:79:b6:d4:c3:c2:84:2e:ae:1b:f2:bf:05:5a:39:
         c4:c8:fd:8c:1a:7b:39:74:45:7f:a3:7d:ef:bb:0f:8c:c9:70:
         7d:23:c3:e2:eb:5c:da:ff:27:2e:99:9c:ff:df:80:7f:cd:72:
         f9:a4:fc:72:60:b3:d0:4a:fe:47:1d:fb:86:1b:a5:07:88:b8:
         22:be:eb:6d:84:78:e5:f9:42:41:41:71:b9:4a:40:33:03:ef:
         7d:81:c7:86:2b:33:63:5b:07:25:07:5d:99:51:9a:01:45:15:
         e2:14:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----