Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File:                     2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier:          IAbdTvwtPYIl8pAkTcOBBBlpc3DASxQR3/p3BNM4u6w=
Subject key identifier:   87:46:05:0C:22:A9:67:FA:ED:A6:53:60:8C:A3:CE:CC:EC:2A:DA:C5
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer:       /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial:       01962E620450B28941561EF8ED9F330BEE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number:          0647
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: NrLn/qCfmf+IWncP6o367QoOVbgfQYcjKC1Jw+tIzz0=)
                          2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:04:50:b2:89:41:56:1e:f8:ed:9f:33:0b:ee:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=8746050c22a967faeda653608ca3ceccec2adac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:38:c2:2a:f0:c9:35:f2:13:17:a8:87:b7:
                    c9:9c:1e:81:ac:e6:55:24:ac:ad:01:58:5c:ab:f5:
                    b0:51:4b:21:18:66:12:49:d7:f8:86:a8:c0:cc:31:
                    45:5d:af:96:0a:d7:50:12:4c:0e:bf:24:c0:8d:96:
                    c6:90:c9:44:3c:b9:dd:fe:19:5f:60:f8:76:81:fc:
                    45:79:3e:54:cc:23:52:00:97:2f:7e:14:0a:9d:4c:
                    ab:88:44:c4:15:1c:36:7d:5e:cf:67:ef:21:59:83:
                    9e:7f:a0:21:30:b6:bc:b0:b7:43:19:0a:4a:79:21:
                    f8:40:83:52:c7:ed:b2:f1:e3:ef:7c:b5:cf:40:4f:
                    db:76:47:96:4e:cb:b6:80:ed:8d:b0:c0:e3:ef:18:
                    93:88:9b:07:81:c5:cd:8e:10:c4:51:d9:80:d8:55:
                    f5:60:7e:36:42:78:54:ba:a6:61:c4:e5:4f:11:4e:
                    41:49:28:9a:55:6a:bb:5b:d4:fb:e7:db:54:4e:57:
                    7a:d6:fa:e4:e6:89:cc:7e:52:41:2b:41:ec:56:ed:
                    d2:35:63:1c:58:bd:fe:4d:78:b1:c3:3a:ac:6b:6b:
                    c7:0e:2c:ef:60:01:dc:fa:d9:6a:35:a1:2e:8e:ef:
                    dc:d2:e7:86:c7:2e:14:36:78:ee:00:a4:bf:15:da:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:46:05:0C:22:A9:67:FA:ED:A6:53:60:8C:A3:CE:CC:EC:2A:DA:C5
            X509v3 Authority Key Identifier:
                keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:60:f0:70:65:ca:06:da:d3:3a:09:46:df:72:ca:d2:a4:6a:
         2c:51:d0:d8:cc:48:ad:35:6f:2f:0c:82:67:e7:3b:30:bd:00:
         25:05:c3:39:bb:27:e7:6e:d3:e5:fb:57:6b:96:9c:f7:6c:57:
         62:a5:dc:32:a9:95:ca:18:eb:f4:6d:07:7c:59:e3:02:88:7a:
         f5:31:c5:5f:97:7e:65:59:80:06:b3:a3:b0:3e:60:e7:e2:0b:
         09:36:6d:9d:54:c9:ee:05:c8:14:46:ee:85:f0:90:ea:ac:b1:
         c1:42:61:7f:1f:5a:0f:2d:ef:4e:e5:7f:f6:20:32:e4:52:a7:
         36:73:c2:39:35:17:fb:9e:04:d9:89:00:80:e7:b7:4b:82:9d:
         25:30:98:bb:b9:2e:a7:dd:63:38:5f:3f:ac:91:b7:6d:82:eb:
         14:d1:fc:62:63:58:72:94:c8:d9:97:f1:df:fb:1d:d5:d6:d5:
         61:e5:7c:fa:38:2f:f0:28:0e:4e:c5:66:4c:b1:30:1f:cb:e5:
         7e:e1:69:a8:73:9d:6f:72:91:be:6a:7c:cf:a8:ca:15:2d:f6:
         69:bb:14:55:05:51:99:34:bc:0a:54:45:a1:5c:76:39:b1:94:
         62:eb:50:0a:aa:1a:2e:41:31:2e:75:bf:c8:2e:c0:cf:a8:c6:
         2c:96:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----