Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File:                     K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier:          ylvDri8vAywF/YVpt9AsBNkQQ4y8uALMLQdTZeyR7Hc=
Subject key identifier:   C1:9F:81:73:D0:A2:70:5C:16:15:FA:DA:0C:C6:8D:24:B5:47:3C:BA
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer:       /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial:       01962F0686078041B57D6ED9612E70FDFBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number:          0522
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: OkgaQmt426BR4EcdWTV4tNA23JfA5AK6jvyXH2fa4WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:86:07:80:41:b5:7d:6e:d9:61:2e:70:fd:fb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=c19f8173d0a2705c1615fada0cc68d24b5473cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:df:af:4a:b9:c4:ad:7e:5d:b2:94:01:12:
                    1d:5b:ea:3b:92:5d:f1:d6:d6:d0:e3:2f:ff:59:f7:
                    65:2f:b6:ea:1d:6c:fd:64:2c:5b:7e:17:15:4d:a7:
                    b7:6d:f8:a9:c7:89:df:6d:78:c4:6b:12:3d:7b:63:
                    67:52:1c:40:d7:67:8e:b7:84:6d:38:a1:61:cb:1a:
                    ef:bb:01:9a:38:b7:d9:32:fd:2e:6f:47:2c:1d:3a:
                    60:da:70:6c:20:c6:79:92:72:22:04:d2:16:4e:da:
                    5e:7b:63:d7:20:40:35:e9:b5:ba:38:f6:e2:f4:ec:
                    24:36:83:5e:db:7b:d8:e1:7a:16:d4:aa:83:c6:eb:
                    9b:20:25:4a:11:6c:00:f2:9f:94:79:14:8f:72:1a:
                    72:82:4e:d9:63:bb:e0:95:24:51:86:24:35:11:33:
                    11:2a:89:ed:86:c4:3e:8c:91:97:ad:94:f5:ed:59:
                    85:50:50:21:38:ad:a8:22:4f:05:03:0c:c8:1d:de:
                    0a:e3:2d:30:4f:b0:ed:89:5c:8e:56:57:b8:94:f0:
                    4f:87:40:bf:55:59:eb:66:d4:70:cf:e3:8b:39:44:
                    7d:06:45:5b:dc:63:cb:45:39:9b:2f:f7:ff:44:be:
                    07:54:f8:8c:d1:bf:a6:f3:26:2b:68:c1:94:1e:b7:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9F:81:73:D0:A2:70:5C:16:15:FA:DA:0C:C6:8D:24:B5:47:3C:BA
            X509v3 Authority Key Identifier:
                keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:5b:27:a9:d5:b0:cd:fd:f5:de:68:71:a9:35:d2:32:65:
         ff:0b:6c:45:5c:ac:55:b5:93:41:6d:b6:46:cb:09:4e:ca:69:
         6f:f3:57:76:31:d5:bd:50:df:3a:f4:59:54:68:5b:dc:93:73:
         9c:40:72:97:72:08:d6:b8:fa:38:49:f3:cb:df:2e:a3:5f:b2:
         83:05:d3:b1:6e:3d:35:52:64:73:22:a8:b9:b2:47:de:26:39:
         fb:14:14:3e:83:c8:d1:d7:58:91:91:07:c9:b7:89:d6:b2:2f:
         c3:d9:a1:7e:c7:31:b3:5e:5f:41:5e:3f:f4:1e:27:8a:f6:0c:
         24:d0:a9:3d:dd:ba:99:f4:82:0e:91:7c:e6:c5:c8:77:fa:27:
         3b:53:cc:1d:27:13:09:a7:1f:e6:b8:4d:6c:9c:65:9a:32:34:
         5f:25:51:0d:f0:38:4e:b2:e9:67:75:77:29:e2:34:9d:11:4d:
         1b:1c:b8:23:36:9d:d2:59:65:12:fc:84:15:d3:49:98:92:50:
         03:01:ac:3c:d9:1e:ae:7b:f2:60:ba:ec:d9:9f:bd:e4:3e:f3:
         c5:e3:6b:a7:fe:ec:b5:5f:39:82:5e:32:92:b4:4d:c7:ba:4d:
         5d:3e:d0:3f:32:c5:4b:1d:62:74:8c:98:9c:19:34:e4:f8:4f:
         30:52:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----