Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          iasP0aBWKmnPm2ARNKf/wvfJ6p8kTq7Bedq8yxjmQuc=
Subject key identifier:   CA:84:55:EC:B8:A7:D4:AE:08:5F:6E:64:B6:0C:63:D8:18:83:1C:B3
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       01962E986A284CF6D12893B0B8E3586C10C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          12BE
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: lBnn4JJ4uRceMJ9jGqIaCgxfJ3mxpBC44koPQQcGAtI=)
                          2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6a:28:4c:f6:d1:28:93:b0:b8:e3:58:6c:10:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=ca8455ecb8a7d4ae085f6e64b60c63d818831cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:53:82:50:49:db:e2:e9:dd:13:04:73:35:
                    24:45:e5:42:a5:cf:87:ab:87:05:8c:53:64:47:0d:
                    dc:d9:a2:e0:e3:c1:13:83:10:8a:22:00:d4:fd:e1:
                    a9:ba:0c:12:e3:cf:8c:56:00:34:62:5d:a0:9d:98:
                    2a:5b:1b:a8:64:28:11:ae:a9:93:17:13:c4:3b:d9:
                    5d:a7:9f:80:9e:39:91:c0:f2:1b:fc:7d:50:ff:f7:
                    fd:15:87:2e:42:8a:7f:ad:9e:4d:8c:6a:45:a7:cb:
                    2d:f0:6b:9e:a6:71:63:10:29:99:9f:30:59:52:94:
                    9d:8f:4e:54:dc:c7:ca:71:b3:db:30:8f:65:e8:d4:
                    e5:88:61:59:2a:28:c9:5f:af:9c:19:ea:0f:c6:79:
                    07:49:a5:6d:ab:c8:b4:7a:51:1b:a6:ce:b5:8d:8e:
                    56:ed:e9:0a:12:ef:53:87:22:41:9f:8c:9e:88:c0:
                    a7:9f:cd:96:b8:5e:cf:8e:6a:f1:70:b0:7e:c7:96:
                    37:78:71:4c:8e:bf:b4:66:2d:fd:b5:26:bc:63:1e:
                    4e:d5:b8:30:f9:98:fc:17:81:7d:04:2c:f6:b7:1b:
                    91:9b:a3:24:17:7a:34:92:9d:76:65:a5:13:0c:1e:
                    8e:da:ab:4f:95:ba:12:03:25:0d:87:a9:18:d0:1e:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:55:EC:B8:A7:D4:AE:08:5F:6E:64:B6:0C:63:D8:18:83:1C:B3
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:64:78:56:d1:ea:f1:90:64:2e:89:3d:3b:19:c0:05:4b:
         95:7c:08:3a:1d:57:41:88:40:22:4b:7f:9f:d2:e6:6d:48:a2:
         cf:e1:b4:c8:89:cc:e5:06:40:ad:68:47:6d:42:5a:dd:10:0f:
         33:e0:83:b1:c9:ce:22:53:cd:e9:36:1b:f3:d6:e0:7d:45:55:
         a8:7b:64:54:67:52:f5:9f:48:5f:68:f1:7f:e5:72:39:49:79:
         2a:14:e0:8c:91:12:6f:56:7f:d1:52:fe:44:a9:de:99:4e:c2:
         38:31:0f:97:3a:af:1b:b5:bb:05:01:ae:0e:64:bc:80:c8:f4:
         e4:cf:cd:21:01:b5:9e:69:05:49:f4:08:d0:e9:97:8e:5c:0f:
         b0:1c:27:4a:94:d5:89:8c:9d:5d:a9:a3:ff:34:39:41:48:b5:
         6a:ed:02:d8:a7:b4:7f:9f:66:84:c2:58:e9:cc:ff:0d:fc:28:
         e0:c0:3c:03:51:94:fd:ec:92:30:7d:b2:91:f5:cb:14:71:43:
         1c:cf:d7:69:43:83:8d:f5:07:28:c5:9c:4c:4a:15:8e:e5:cc:
         20:88:24:e1:23:51:f8:3a:9f:32:a2:23:8b:47:cc:a3:de:52:
         72:bc:58:af:f8:d3:0c:52:c6:1a:02:f2:c3:37:c8:e3:66:58:
         26:6a:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----