Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File:                     02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier:          aIU8CQB0MdPcBeq+UHPv8O771YHJfBSmj/JLiodHuwg=
Subject key identifier:   9B:11:72:BF:11:E6:E5:53:39:F5:3E:BC:D6:A6:87:28:F8:57:EE:A3
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer:       /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial:       01962E98BB602697DFE1F684CEB29EE7CBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number:          143B
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: 7AM4s/2roB5wmSYLbhrsiRykp+gadaS0IRPF983XhAM=)
                          2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bb:60:26:97:df:e1:f6:84:ce:b2:9e:e7:cb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=9b1172bf11e6e55339f53ebcd6a68728f857eea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:00:21:a5:82:ee:ee:97:e3:5e:e8:98:25:
                    da:f0:8d:ac:f1:fd:04:e1:9b:ab:02:eb:fb:c6:e1:
                    80:89:55:0b:b4:a9:1d:ec:ca:f1:4a:89:ff:c3:2d:
                    cb:5e:92:c4:27:96:12:6e:c6:2c:5e:37:b6:57:92:
                    5d:14:ca:07:89:66:f1:ae:4f:00:53:93:1f:a3:b2:
                    5e:21:ce:c9:2f:ab:67:6e:0a:d7:b1:c7:cd:c1:e6:
                    ce:92:38:41:9b:f0:ce:3e:7a:14:a4:0a:94:ef:2c:
                    95:56:0b:b6:22:1c:e4:aa:26:01:72:8b:e9:c4:fd:
                    11:44:a0:75:8a:62:af:69:2f:b9:53:dd:4b:7a:59:
                    e1:ac:9d:cc:ac:12:a8:56:3d:b1:16:6f:51:e1:45:
                    7a:f8:51:e7:f8:7b:23:36:c5:60:5b:43:b6:06:08:
                    ff:a6:a8:f9:e1:f6:ee:98:f3:4b:61:ba:6f:6c:30:
                    73:24:2f:bf:c5:06:8e:f8:29:62:a3:2b:a0:fc:d7:
                    51:8e:93:96:ca:16:6a:0a:00:61:8f:94:e8:34:7a:
                    d3:bf:aa:35:d5:5d:8b:64:54:9e:a3:0a:f2:16:25:
                    f5:3d:d7:73:bf:1b:63:3b:89:78:db:53:38:29:ad:
                    c2:5f:c4:58:fa:b4:19:3c:5c:76:b3:5f:a0:0b:dd:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:11:72:BF:11:E6:E5:53:39:F5:3E:BC:D6:A6:87:28:F8:57:EE:A3
            X509v3 Authority Key Identifier:
                keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:de:28:4f:b3:c4:e7:5e:6b:27:c4:00:87:be:d8:42:4e:db:
         f0:b3:4b:b0:ff:87:e1:09:85:f9:5f:4a:4d:46:71:20:18:4a:
         91:dd:9c:b2:80:78:e2:5e:44:0d:b9:3a:13:46:ce:84:48:97:
         ab:d8:ac:b4:05:8d:98:08:d8:6d:32:99:ec:2e:cc:64:4d:0e:
         41:95:c3:d8:5b:ea:b5:59:e4:ec:b4:bf:d5:20:7a:81:3a:b7:
         a2:73:92:55:e1:05:39:d6:1c:fe:8c:e5:63:0e:f4:5d:fd:c7:
         d4:44:be:f2:68:c8:0c:32:5a:ae:d4:55:13:da:9d:8e:fb:b6:
         ff:06:2d:28:be:53:5d:1a:07:ad:9b:44:51:b7:65:e8:93:ea:
         ee:c5:d0:eb:e7:39:d9:6b:10:d8:ac:97:22:a4:55:20:24:01:
         61:28:79:f8:5d:fc:bb:f0:d3:1e:68:d5:37:e6:48:3f:17:8f:
         6e:0e:70:a3:67:f3:6b:fd:ed:ff:b7:ff:fa:05:49:b2:d7:fa:
         26:22:a5:7b:85:dc:50:de:97:18:f1:21:75:2b:3e:4f:e9:80:
         64:aa:d6:cf:12:20:ad:30:21:3c:88:7f:ba:68:78:55:6b:70:
         d6:4a:02:b3:02:2c:71:55:e0:69:c6:b2:36:7c:23:54:bf:d0:
         6d:06:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----