Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File:                     R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier:          nZ4WtxDxo866PQl18Tiz9RPykQE4iaJpLC6MpF9SiIY=
Subject key identifier:   2B:0E:93:84:58:C3:33:9B:80:A0:0A:D6:2B:64:F3:7F:EB:83:74:E5
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer:       /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial:       01962E2B4DD89C1DD924264EF0707E714F53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number:          1456
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: 1M0GkGGng8kkIYXgXEO/J0ua+53Yc2CEPGNptUZdQ48=)
                          2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4d:d8:9c:1d:d9:24:26:4e:f0:70:7e:71:4f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=2b0e938458c3339b80a00ad62b64f37feb8374e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:74:f5:e3:5d:cb:81:f1:8d:83:25:73:45:
                    0c:bd:f3:7e:8a:53:24:05:b8:3c:75:e6:f0:c7:01:
                    e0:c0:97:25:53:ca:10:bb:e5:3a:18:ef:5d:5b:3d:
                    c4:96:a4:89:90:c3:67:26:c3:74:a4:27:eb:00:de:
                    65:bf:b8:b7:b5:52:ae:76:5a:ae:da:4a:b0:a1:c4:
                    d8:a1:f9:de:ed:35:df:a0:22:05:68:dc:7d:79:bb:
                    5a:31:fb:67:13:ae:87:31:3f:a5:da:01:f8:69:f1:
                    49:cd:83:8f:2d:14:7f:4c:31:75:66:32:0c:57:84:
                    51:9f:9a:79:8c:9b:1d:b4:6a:da:d9:fb:81:5a:e3:
                    bc:40:1f:d9:37:6e:86:0c:cd:c3:9a:d8:70:04:ba:
                    67:71:c3:4a:d0:f7:84:16:f1:2f:2c:e8:89:46:8b:
                    d2:d3:ae:9e:65:0e:50:9c:3a:50:da:4b:f8:dd:fd:
                    8f:5c:2d:b8:94:69:ac:d7:9f:f2:d6:73:94:18:14:
                    f8:c7:18:19:69:6a:eb:15:7d:18:d7:d7:2f:ac:da:
                    ae:e6:8d:45:22:e5:d6:1a:a8:76:21:2f:1d:1b:53:
                    cd:33:69:d9:7e:d8:1f:92:e8:e2:48:a2:f7:9e:18:
                    12:01:7a:c7:15:c4:78:3e:ab:04:b9:08:bc:c9:ee:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0E:93:84:58:C3:33:9B:80:A0:0A:D6:2B:64:F3:7F:EB:83:74:E5
            X509v3 Authority Key Identifier:
                keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:22:8f:89:b0:30:7f:6b:1c:6b:0d:7b:3d:f4:6f:c1:d5:4f:
         0a:76:a3:20:4c:ee:84:0a:6d:25:76:5e:cc:75:28:49:10:8f:
         b9:54:b1:7e:c7:9f:d7:69:c6:9e:6f:aa:e4:35:a4:19:54:32:
         a5:e1:fc:4a:b5:bd:ef:56:64:63:a8:eb:22:51:fc:dc:8b:d6:
         2f:66:4a:fc:1a:3c:46:60:df:1c:57:37:06:5f:f7:0f:50:f9:
         e3:d6:30:bf:6d:a2:1d:3a:2c:b5:48:45:69:54:65:26:a1:0a:
         cd:d2:9d:0e:06:3b:e8:7d:56:6c:12:b8:91:a8:1a:de:41:4b:
         d1:6c:1b:4d:4a:7b:0a:a2:fa:8d:0f:42:b5:83:92:40:d0:fd:
         40:8f:6c:b0:6a:12:57:3b:c8:06:86:b6:1e:ad:58:0f:60:83:
         22:58:dc:a1:56:b4:05:5f:f1:7e:86:cc:bc:97:b0:41:6b:27:
         ef:f9:18:42:56:9d:6a:88:bc:56:41:6f:93:da:41:12:03:08:
         2e:4b:bc:f0:c3:05:12:09:77:9f:ec:04:75:92:47:d7:69:bf:
         13:ac:f2:0e:25:7b:18:64:07:72:d9:69:ca:42:40:ce:7d:dd:
         4e:1b:7c:a1:b4:fa:99:20:4a:46:09:e0:a1:a1:ce:a0:e9:b9:
         14:3a:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----