Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File:                     2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier:          1heSV9a+bAM/h1EP/+3NTbAl2AdiIYDHaBDG37iU1hQ=
Subject key identifier:   E8:2D:CF:90:7A:19:46:C1:DC:E4:2E:1F:C4:7B:98:E6:A3:E4:98:38
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer:       /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial:       01962ECF97B8046962E7133F84EE2FC4A3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number:          023B
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: 4XsX1C+HRurpWSUKCvPhBsxyWBQbuKXspplqHjtrboc=)
                          2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=)
                          3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:97:b8:04:69:62:e7:13:3f:84:ee:2f:c4:a3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=e82dcf907a1946c1dce42e1fc47b98e6a3e49838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:56:f0:ee:4d:fe:98:16:76:d3:32:98:24:
                    91:d2:a9:d8:73:df:1b:61:41:5e:12:7b:39:96:c5:
                    8d:b9:47:58:21:88:14:43:73:62:fd:5a:69:13:31:
                    76:8f:1e:e8:fa:fe:94:17:9b:f5:a2:35:24:c4:17:
                    4e:fa:f0:a0:66:50:e7:a9:71:ce:3b:c6:a7:3e:fe:
                    2b:ef:93:f7:9e:cc:64:54:52:6b:06:eb:fe:d3:92:
                    74:56:b7:23:0b:61:68:a0:5d:b0:6f:55:ce:f8:1e:
                    c4:bc:ec:64:2a:47:e3:68:b7:17:cc:85:4c:1f:14:
                    f6:1f:4c:88:4a:ab:d3:fa:49:c1:0d:d4:3e:45:de:
                    7a:fa:5b:ea:c6:e4:ae:84:4a:32:ed:31:d6:ea:71:
                    23:b6:b4:37:69:bf:e4:44:f0:e3:4a:f9:02:6b:47:
                    49:4a:73:b5:71:b4:ed:1c:c4:ef:49:f8:54:71:fe:
                    ee:73:9b:83:57:87:1c:16:6a:32:22:e9:34:af:4c:
                    84:1e:35:c5:83:81:54:ce:c5:8d:52:bf:c3:ef:8b:
                    e7:0e:89:c7:2e:d4:ff:62:c0:9a:99:14:db:92:35:
                    fe:6c:b9:9b:9f:52:50:27:10:2d:3e:ef:de:e3:6f:
                    f8:e6:0f:bd:c4:7c:27:ce:fa:e0:c4:65:ac:cd:42:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:CF:90:7A:19:46:C1:DC:E4:2E:1F:C4:7B:98:E6:A3:E4:98:38
            X509v3 Authority Key Identifier:
                keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:db:ae:81:2a:5b:d6:8d:d0:46:8a:83:d2:93:b6:c9:ae:
         25:bd:99:1a:46:ad:ce:2a:6b:85:a2:25:fa:98:a0:0d:50:87:
         bc:ee:14:58:92:37:bb:f1:16:1e:3d:8f:a7:bc:0a:41:64:db:
         c7:a3:0f:69:85:a8:e4:4d:d3:93:a1:6a:55:04:70:31:71:a5:
         35:3c:02:a9:21:b0:66:55:80:63:1a:58:1b:51:30:6b:01:a8:
         ad:d4:2f:20:d1:c5:4f:c9:de:4c:a9:22:58:80:77:af:3d:3f:
         f4:5e:ba:05:68:dd:af:70:5e:b4:38:42:4c:5b:0c:32:00:8e:
         7d:9c:d0:07:f4:d4:0a:9b:f8:b9:2d:1f:bb:10:4b:81:d7:74:
         a7:d7:15:27:0f:59:ab:ea:52:a5:d3:24:e0:12:2f:59:b5:03:
         73:26:d0:db:22:0c:bb:75:a2:63:03:54:95:66:11:23:4b:76:
         54:56:92:7e:76:71:23:cd:b6:8a:87:b9:82:17:80:69:ec:32:
         75:6f:4b:b6:4e:80:c4:c6:54:d7:10:d8:9d:18:45:53:1f:5c:
         5b:f1:0d:80:80:6e:7e:97:33:8c:d8:4a:2f:3e:88:b9:f2:30:
         85:75:63:f4:d4:92:96:0c:35:82:05:49:e7:b8:cc:15:63:fe:
         33:5a:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----