Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File:                     1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier:          lYro9mySciNA19tQ2tPKOldK5YPbfiALfT+Wp8zkNEk=
Subject key identifier:   60:11:2C:54:10:A1:35:81:1F:DA:5E:0C:B8:07:73:82:0F:C3:A7:7D
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer:       /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial:       01962E61716CD30BF665673BEF107E18C78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number:          2E
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: 4fMxGkvovaHtXdd6tlNtto5LiQzspvHcS/ZLjM6eqNg=)
                          2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:71:6c:d3:0b:f6:65:67:3b:ef:10:7e:18:c7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=60112c5410a135811fda5e0cb80773820fc3a77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:d1:61:d3:ea:18:ad:69:79:6b:17:5f:1c:
                    9f:7f:53:66:5e:9e:e0:73:28:c4:c4:23:f9:72:a4:
                    09:ce:2a:0e:7b:cf:fd:1d:d8:59:86:ba:12:de:b0:
                    b4:9c:e5:ca:7f:62:03:32:33:28:cd:5d:c5:fe:56:
                    a5:2a:e2:43:64:1c:8e:d4:bd:03:ae:5e:1c:a5:52:
                    8e:82:09:8b:61:6e:35:7c:0f:61:29:f4:43:52:10:
                    0a:6f:e9:51:61:5b:05:b3:97:c3:ce:2f:c6:47:92:
                    8c:c8:5b:05:ff:b8:96:0a:43:ce:02:a7:d5:27:1b:
                    80:02:d4:8d:21:5f:61:fe:60:2a:c5:71:51:14:60:
                    7b:66:40:c6:9b:60:e3:5a:88:1b:70:d3:5b:f4:4e:
                    35:81:71:a9:1f:59:cb:ef:db:2e:96:17:91:4d:f4:
                    8f:49:2c:4c:eb:8d:04:4f:7d:ab:2b:af:78:27:4d:
                    43:a9:62:69:ff:81:6a:52:36:18:90:92:3e:ec:a8:
                    5b:8f:cd:12:77:15:24:98:45:25:49:6f:45:b3:b2:
                    f6:01:9a:82:11:79:07:06:31:b6:31:7e:d8:1b:62:
                    7e:80:7a:a0:70:8a:e5:ac:5a:b3:c5:d5:bb:30:1a:
                    88:a3:21:63:46:3f:01:6d:bd:cf:33:da:ed:b4:53:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:11:2C:54:10:A1:35:81:1F:DA:5E:0C:B8:07:73:82:0F:C3:A7:7D
            X509v3 Authority Key Identifier:
                keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:1a:25:50:75:2d:00:e0:6a:64:94:8a:50:57:83:f9:5a:
         fb:2c:33:ee:fc:3a:25:1f:67:a0:62:b6:17:a2:d7:4a:b4:c1:
         2c:d5:b8:ec:50:1a:b1:fc:ae:d4:83:71:36:65:6f:83:01:5e:
         76:30:b6:8f:95:c9:05:74:08:29:4b:ab:b3:57:30:c7:92:fe:
         9d:28:b1:79:6a:2c:c2:f6:66:b6:ac:0d:96:48:8d:c8:16:25:
         67:ee:c5:45:6b:8a:ff:9c:53:5e:75:f4:5a:c8:1f:64:04:f0:
         87:a3:b6:54:2b:22:5a:75:95:89:6a:1a:c1:f9:78:cd:31:6b:
         ca:9a:b4:a3:d3:05:e0:17:de:40:17:f2:96:e0:12:e2:f1:6b:
         1c:b5:64:23:26:52:80:23:ec:65:22:af:8f:f7:2a:c2:bb:8e:
         cc:34:6d:90:57:99:60:fb:c2:6e:29:b9:8d:33:15:cf:38:b2:
         ed:9e:a5:5f:39:4e:62:27:bc:c7:0b:8c:42:8e:da:37:ed:ae:
         4a:55:82:37:c9:22:17:2c:3d:74:b7:52:29:40:ff:1a:39:f4:
         60:8f:0c:c1:b7:99:82:47:d8:af:8d:1d:ec:55:70:42:4d:b2:
         ae:52:cd:59:fb:d4:ac:78:6d:ed:0f:90:2a:f5:ee:60:3a:6e:
         39:20:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----