Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File:                     PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier:          OPYrzjoU0PQFneDyHEvXV75CKaOovFOOPHQA/aaRF4I=
Subject key identifier:   CE:10:EF:22:60:E1:8B:10:55:89:7D:BA:72:43:33:BF:27:CC:DF:29
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer:       /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial:       01962F0686AF67A01057F7E7C469A0C45896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number:          21
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
                          2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: oBqNOWMbksJBic8COOi77cma+obv+ypIZfKtHw3mCHM=)
                          3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:86:af:67:a0:10:57:f7:e7:c4:69:a0:c4:58:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=ce10ef2260e18b1055897dba724333bf27ccdf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:27:79:d9:ae:ea:44:95:e3:da:6f:ac:6b:
                    b2:9f:07:b2:d0:9f:42:93:b4:94:aa:d3:cb:11:00:
                    91:0a:b8:66:56:1a:24:18:c3:5f:55:fd:d3:fb:f9:
                    35:f7:24:db:43:1a:08:1b:a3:5e:2b:0e:a2:44:98:
                    51:fb:06:52:36:39:81:73:3d:fa:19:17:c8:42:7e:
                    c0:d2:8d:e6:d8:e1:2d:fd:c3:bf:90:5f:f0:c1:21:
                    cb:68:bb:9a:27:5f:39:57:6a:55:f4:b9:03:b5:18:
                    bc:a8:89:c9:a4:55:8b:eb:54:f6:e0:f7:60:68:6d:
                    db:81:77:0c:4b:49:e1:e2:ef:3a:f3:f0:97:80:fc:
                    43:40:ac:97:61:87:7a:a6:00:b8:53:95:76:a6:ff:
                    1c:1d:b0:96:e3:22:8d:14:2f:48:76:6a:88:fc:6a:
                    6e:7d:12:95:65:f7:ab:e8:8d:e9:58:d9:25:4a:fc:
                    ab:ef:85:70:47:f4:a0:46:9c:33:90:43:77:0f:c7:
                    df:14:e0:03:39:2b:51:d5:c2:75:b2:de:b7:a4:0f:
                    8b:d2:97:06:ec:34:0e:06:75:4c:b2:ed:b2:5b:8e:
                    46:af:3f:ba:22:96:5f:79:4d:50:53:b6:b6:20:9a:
                    76:b7:e0:ab:43:e2:c2:b4:f1:4d:d1:82:d1:16:ee:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:EF:22:60:E1:8B:10:55:89:7D:BA:72:43:33:BF:27:CC:DF:29
            X509v3 Authority Key Identifier:
                keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:6c:75:2e:c8:ed:05:9f:ef:52:9e:e7:19:e1:f9:0f:00:6a:
         fe:d6:22:05:ef:11:54:5a:9e:5f:a7:39:6f:9a:fb:64:6f:d2:
         27:6a:b2:ee:73:7f:e2:9a:2e:e9:1a:f3:79:1d:5b:49:49:5a:
         f9:a0:80:a3:24:d2:b9:2b:f3:c8:81:e7:80:05:0a:c4:07:3c:
         f3:e9:c9:45:36:14:ab:71:67:99:f7:4c:17:95:0c:fc:78:42:
         e9:01:e5:1b:fa:b2:58:7f:f8:c9:73:22:79:ef:0b:11:3a:49:
         12:ef:10:f2:d0:eb:31:f9:3c:8a:a4:80:0d:a6:65:75:89:1b:
         d8:2f:e8:93:e7:f8:e5:76:e2:c9:5f:65:54:6d:72:74:ce:9e:
         84:ef:7c:05:bb:2b:71:58:0f:3c:2e:c4:39:e4:00:5e:27:11:
         f1:56:41:b0:e0:44:b5:fc:ee:9f:b7:74:f1:ff:1d:45:78:a6:
         7a:04:ff:ba:b1:fd:3f:84:b4:79:50:fe:10:5b:ea:ac:ba:0d:
         9e:c2:bf:04:6e:71:ff:e7:b3:55:63:52:2f:01:32:42:68:e5:
         02:1d:30:54:81:d3:c7:73:ac:47:f7:51:42:46:1b:c4:c6:92:
         0b:30:13:0f:d6:05:78:dc:a6:6e:19:5a:a9:0c:ce:35:db:21:
         9b:ea:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----