Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File:                     n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier:          B1oRiPkYNRJyw1BUSqnK6MsEl4oyHFYjXb5n3kZ1sBc=
Subject key identifier:   40:08:E9:B1:0C:75:BD:09:92:30:1A:D9:FE:42:34:18:37:26:A6:F7
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer:       /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial:       01962F066556F970DC805C2282EF23E0B05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number:          0C59
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
                          2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
                          3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: i7QGL/q4A/UMrTgrcyc5Tfsi7c2TyAtkClGKtkGgCp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:65:56:f9:70:dc:80:5c:22:82:ef:23:e0:b0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=4008e9b10c75bd0992301ad9fe4234183726a6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:b9:b2:23:d1:1b:50:48:b6:50:15:98:d6:
                    66:a2:7d:13:56:bb:fd:05:aa:63:c7:55:9c:d3:f0:
                    ec:2e:ba:5a:ea:ba:47:23:1f:a6:85:8e:7d:f6:3a:
                    50:dc:09:2b:29:cf:77:87:52:5a:e3:1f:90:a2:e1:
                    0f:78:cf:40:85:a1:31:46:e1:20:54:5c:6d:c4:e5:
                    c0:d0:8f:4b:86:32:d2:80:f8:d5:4e:1f:88:7b:94:
                    96:dc:f5:9b:92:57:6a:16:cd:98:f1:40:eb:1e:49:
                    2b:83:ae:f1:50:eb:d6:07:e2:79:07:bb:91:95:98:
                    31:00:46:5a:8f:5b:cc:d8:f8:aa:59:d9:89:fb:77:
                    2b:21:eb:e9:0d:98:44:d3:92:3b:17:5f:8a:84:5f:
                    98:28:39:02:80:3a:21:64:ed:bd:47:f3:81:a8:d0:
                    c1:af:2d:b1:33:20:13:5e:52:2f:78:36:02:e1:d0:
                    d3:c1:d5:c2:82:15:e6:8e:b3:2c:3d:ef:56:a3:e0:
                    9b:1a:55:49:7c:25:e9:48:37:53:db:6b:d0:c5:de:
                    f0:7f:0c:17:8c:3b:e2:83:b1:65:4a:cb:76:a5:fc:
                    70:69:ee:a2:8e:9c:b1:5d:d8:b6:5a:41:b2:81:1f:
                    67:f8:2f:dc:64:86:9c:1d:ec:d6:69:13:33:69:e7:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:08:E9:B1:0C:75:BD:09:92:30:1A:D9:FE:42:34:18:37:26:A6:F7
            X509v3 Authority Key Identifier:
                keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1c:a2:c4:f7:58:20:89:fc:c9:e2:57:1e:a1:66:e3:a7:0e:
         db:9f:cd:28:c4:bf:18:ab:c1:95:4c:0a:8b:25:cd:0b:90:b9:
         e3:9c:2b:08:32:f0:ed:d9:a7:04:5a:8a:90:20:5a:a3:12:a7:
         13:a1:40:9d:b2:1e:a7:0b:d9:89:a1:a0:5a:2d:73:c4:50:8f:
         32:38:52:05:24:e8:95:db:64:35:cb:0a:cf:96:75:4f:8e:76:
         ce:55:42:81:6d:19:53:fa:13:89:9d:ec:6b:54:fa:65:5c:6d:
         4b:ff:42:3c:db:d5:ef:c3:8b:ae:07:36:96:35:1d:16:35:bc:
         61:50:ce:56:c5:71:5a:79:e0:ae:10:e1:68:d5:fa:d7:13:36:
         75:cc:4a:ee:b9:71:af:64:c8:14:6e:03:55:ef:3d:0b:69:7e:
         36:f8:80:2e:5e:0e:bb:4e:26:99:c2:1a:00:37:2c:9b:d0:69:
         5f:db:4e:86:b0:9e:dc:1b:93:f1:f2:15:bb:1f:f1:69:e8:93:
         7d:4d:8d:8e:45:e0:4b:2a:18:05:80:eb:83:34:6b:8b:fa:84:
         a5:8a:e4:d9:51:20:2f:f0:58:fa:6a:59:57:40:a0:68:5f:0f:
         4f:87:44:4e:d7:81:37:28:d4:6e:71:41:9a:0c:6d:15:e7:57:
         af:c4:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----