Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File:                     R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier:          KphM0+j4HHcgloFocYBMLFSQnGVC7jdML2Xg+Nik8Fo=
Subject key identifier:   89:20:79:6E:8F:7A:AD:49:0C:B8:28:51:34:89:E9:7E:0E:BF:86:81
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer:       /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial:       01962F74D76CF54F1CB15A45E87C0B578CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number:          0830
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: wLQl0rVsoCJe+kTh/ZyOW8lwUE7T0yJXNPc+6V9umlk=)
                          2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d7:6c:f5:4f:1c:b1:5a:45:e8:7c:0b:57:8c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=8920796e8f7aad490cb828513489e97e0ebf8681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:cf:d0:b3:cf:37:14:79:41:1c:00:ce:3d:
                    23:dd:55:3c:9e:b1:8b:99:4a:da:d9:79:58:ff:1b:
                    67:8c:4c:33:1a:3e:8b:65:7a:f9:e7:cc:ba:da:3a:
                    63:cb:13:6d:06:df:9f:b3:21:98:16:05:eb:97:b6:
                    b8:f3:e0:e8:7c:a9:99:e0:75:5d:ca:da:00:de:50:
                    ce:8b:81:c3:0b:bb:76:57:95:1f:56:45:3b:de:7a:
                    8b:b0:16:d8:65:fc:28:ae:1e:b4:3b:72:26:05:35:
                    83:3e:fd:20:b9:74:78:0c:79:62:75:6f:9e:8b:0f:
                    35:9d:7e:1e:45:7c:5f:76:6c:c1:d5:bc:68:4d:21:
                    34:61:65:0c:e0:8a:ac:e4:a6:cc:ae:83:13:25:ba:
                    f0:ff:74:b1:2d:34:bf:a1:00:b7:82:dc:ae:d4:9c:
                    19:21:70:da:b8:ce:2a:53:e1:56:8c:40:e5:71:f8:
                    1a:bd:39:1e:a7:c0:dd:55:f3:dc:01:d3:f2:65:2b:
                    77:53:df:3b:af:89:2b:10:0e:e6:43:35:bf:65:20:
                    d6:83:a8:f1:0a:bc:1d:07:15:de:97:5e:a2:05:cf:
                    4b:b4:8a:b2:37:b7:2c:28:b1:1b:d4:b5:bf:e8:a2:
                    82:3a:d7:02:28:1b:3a:fa:77:7e:40:1f:fb:45:27:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:20:79:6E:8F:7A:AD:49:0C:B8:28:51:34:89:E9:7E:0E:BF:86:81
            X509v3 Authority Key Identifier:
                keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:7d:aa:79:bb:fb:f2:61:df:cc:ec:0e:30:2e:e5:60:b9:
         6e:4d:a3:5b:a5:d8:37:f1:5f:b2:ac:9b:c6:23:68:a0:ad:f5:
         9f:fd:a7:a0:70:a1:cd:a7:69:e9:7b:24:3c:cf:de:c0:2f:f3:
         02:ed:c6:24:16:41:70:67:b5:30:26:78:ef:ab:0f:4d:9f:91:
         2c:0a:fa:50:c0:0c:fd:22:5d:3f:31:89:2b:5f:f2:48:ec:e9:
         03:d7:88:5b:75:99:51:24:82:e7:07:31:87:fe:c8:2c:c0:c8:
         47:a7:4f:56:41:a4:c8:98:bd:4f:50:b7:f1:12:8e:9d:8b:0c:
         a0:0b:ec:07:b4:fe:3c:89:d8:ad:00:c1:79:3b:cf:e6:66:9b:
         b7:de:9e:be:cf:a8:63:ab:2a:77:c9:23:ea:63:ea:bd:8e:94:
         8a:dc:3b:64:d9:c6:5c:a7:e5:e2:71:d7:68:40:b1:fd:cd:06:
         e4:5e:ba:16:89:85:a7:c7:94:cd:7d:6c:d3:ce:02:e3:38:5b:
         4d:c8:c1:d5:72:ba:3b:4c:9f:94:52:a7:7b:64:91:4b:e3:25:
         82:55:c0:66:5b:f0:6d:ef:dc:db:c5:d8:e3:ee:34:0b:b7:b5:
         29:50:5e:0a:1e:a7:18:1d:5e:b0:b6:b3:6e:6b:be:7c:d6:30:
         68:e9:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----