Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File:                     2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier:          STqo7FCxy2872bnyOVafv9Mr+HFveFxkIsjirVREArM=
Subject key identifier:   66:A1:2E:1D:B2:AD:28:4D:B4:9B:EF:84:F8:9B:0A:EF:9C:6D:49:76
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer:       /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial:       01962FAB974AAEC1C1C58DF2A1CA982368C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number:          0584
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: aOUVcCtj9VSPu5qQGoZQN8iHwyTOkjiyja7o4WQtWQg=)
                          2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:4a:ae:c1:c1:c5:8d:f2:a1:ca:98:23:68:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=66a12e1db2ad284db49bef84f89b0aef9c6d4976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:d9:e9:37:84:c8:dd:01:00:7a:f6:54:ce:
                    3d:7e:04:65:d4:21:1e:0d:76:d4:28:30:69:f2:4e:
                    27:fa:07:99:26:b2:a0:f2:06:30:50:4f:f2:59:7b:
                    7f:16:7e:eb:e4:02:5a:00:39:83:52:74:95:4a:35:
                    b2:09:d8:7d:1e:7f:b0:6b:c5:c4:a4:c4:3b:a3:53:
                    21:d2:8c:08:83:ea:d5:73:5d:89:71:85:1b:92:fe:
                    3b:88:ed:ae:f4:82:12:d3:93:f1:8b:45:dc:60:a4:
                    1d:08:f1:89:15:af:f2:8a:1f:d7:79:3e:92:75:13:
                    23:ba:f6:eb:30:e4:89:76:bf:5b:24:e1:e2:66:25:
                    f8:cf:75:96:fb:6b:a5:23:b4:38:62:ac:0f:b3:f2:
                    58:53:d5:cc:ef:ab:3d:49:45:78:bd:c2:e0:d9:5b:
                    d3:e8:59:b7:ca:4d:8a:b4:91:73:a4:d3:7b:23:97:
                    08:e5:0a:cc:2f:be:72:cb:48:8b:61:30:eb:0d:1d:
                    67:64:76:b2:b7:cc:28:83:f7:40:17:d0:31:6c:3a:
                    b1:43:c7:1c:ad:00:64:5d:8d:6c:94:41:4b:89:90:
                    68:45:b5:7b:a7:65:69:2c:71:a9:95:95:e4:58:83:
                    fa:48:f2:ec:4f:a9:a3:06:fc:68:26:31:5e:24:de:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A1:2E:1D:B2:AD:28:4D:B4:9B:EF:84:F8:9B:0A:EF:9C:6D:49:76
            X509v3 Authority Key Identifier:
                keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4b:07:ef:eb:15:b1:52:e8:2a:4c:93:c5:4d:b3:47:0d:1c:
         7d:22:63:35:59:80:e9:f9:4e:16:ec:98:cd:fa:cd:8b:a2:eb:
         61:7a:7a:0b:6a:91:65:37:fc:a5:ef:86:6b:fc:fb:93:39:ec:
         b6:62:23:92:01:fb:d7:b3:69:31:97:46:8e:fc:81:d5:7a:23:
         4e:3e:df:cd:70:24:75:5b:31:3d:60:94:14:e4:9a:e0:e8:c1:
         ed:ee:37:93:c6:1b:57:96:20:b3:7b:cd:08:7f:83:01:f7:d1:
         d0:c2:0d:d8:5f:b5:43:5e:3b:4b:83:2b:1e:44:ba:f8:21:12:
         f2:0e:d6:50:86:92:2b:9e:1f:c3:0e:db:f7:28:76:3d:38:e6:
         f9:70:33:39:ba:2d:55:65:59:4e:d2:9c:b9:0d:8f:b1:b3:0e:
         5d:df:f0:62:9f:cd:4a:e9:a5:38:ce:33:85:2c:e9:21:3b:fc:
         82:4c:c6:e0:ed:74:06:71:39:38:66:02:d9:eb:06:42:de:c5:
         32:e4:3e:6f:5d:3b:70:38:59:05:aa:9b:4e:8b:39:e9:ea:ef:
         ba:58:8d:ae:34:0b:6b:8c:3e:19:ed:cb:a8:62:09:ac:58:14:
         ed:41:7c:7e:4a:2d:d2:0f:65:df:76:bc:84:6c:85:e9:72:f6:
         c3:e7:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----