Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File:                     g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier:          QT+20SB8I6cmtI7VJjMz7tNvbkQvkYvmrsI6cSpYSUU=
Subject key identifier:   1D:D5:EE:95:B5:CA:58:A4:55:6D:35:AB:B9:E9:04:39:93:45:48:92
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer:       /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial:       01962FAB9675856CF2823253837FB8CE6233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number:          0BC0
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
                          2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: HYpT7SKRyYlbHX672FSPYX1JYBHcDalH7zpIYuW6Oqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:75:85:6c:f2:82:32:53:83:7f:b8:ce:62:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=1dd5ee95b5ca58a4556d35abb9e9043993454892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d4:53:bd:c5:5d:6a:03:a1:ea:25:94:1e:38:
                    1f:a9:47:de:67:df:8d:81:a9:34:5d:33:b3:42:b4:
                    bf:80:3b:79:df:58:c7:b0:3e:6b:71:d1:ea:12:fd:
                    76:cf:37:ec:fb:34:b3:57:ba:2b:80:40:5b:9c:f8:
                    47:b8:0c:63:4a:61:95:d6:33:95:54:f8:57:cb:95:
                    cc:a9:88:41:30:1c:90:7b:a3:bb:96:6c:6c:cd:b5:
                    a0:35:d4:e3:57:db:97:17:a1:7f:65:fb:8e:ca:25:
                    22:e3:ae:0d:0d:6f:1f:09:ba:81:4e:a9:00:8d:aa:
                    29:ad:a2:4c:8b:93:f2:c4:77:7a:d5:45:e2:e5:a8:
                    87:21:27:4d:9b:d2:3f:8c:43:6c:08:42:14:53:d8:
                    6e:fd:6c:f8:44:84:bd:67:c9:7e:99:6a:1a:86:45:
                    46:06:72:18:3e:2b:c6:96:14:62:c7:1a:9f:89:01:
                    ef:06:c8:97:2a:51:b2:bb:a8:77:0a:42:46:fd:0a:
                    37:aa:ca:82:ed:a4:a6:71:b6:6d:a0:96:91:6d:c4:
                    3e:ae:ed:3b:a3:b8:67:3d:66:60:f4:82:9d:7f:98:
                    de:e0:93:80:e0:33:aa:df:53:c2:65:d6:58:d3:8d:
                    6f:e5:ee:25:79:79:6e:4a:d2:56:3f:20:34:9b:93:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:EE:95:B5:CA:58:A4:55:6D:35:AB:B9:E9:04:39:93:45:48:92
            X509v3 Authority Key Identifier:
                keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:57:15:91:f0:99:74:cf:a2:eb:f6:e5:e1:c3:bd:62:6c:
         c5:3f:82:63:2c:09:91:2d:4c:79:56:58:b9:5e:87:b8:06:5e:
         a8:92:62:f5:c4:6e:c0:f0:b9:03:b0:36:4c:37:d0:a3:c4:9f:
         6d:02:68:0a:a0:ca:8d:dc:1c:f0:e0:b4:11:36:13:62:28:68:
         0f:02:17:36:44:2e:a7:ef:61:18:74:ea:ac:db:7b:75:51:76:
         6e:65:89:07:d7:ae:b9:77:b2:73:97:3d:7a:c0:c0:76:fc:1d:
         e3:46:96:b2:75:3e:1f:bb:e5:3c:86:f4:33:ee:e2:13:f6:39:
         c4:05:de:0d:fd:20:9a:53:36:a9:27:d0:15:6b:1b:7c:48:08:
         55:7e:6d:41:ed:f1:97:78:52:2b:42:97:49:52:2f:84:3a:2a:
         d1:db:a0:68:04:07:30:1d:56:9e:cf:08:55:0f:89:2c:2e:83:
         01:85:a7:0b:9f:a3:de:b4:ec:1e:1e:27:2d:96:78:e8:bc:d1:
         e4:d9:1c:d7:cc:69:ac:8c:f7:de:a5:e8:9c:12:65:9d:83:5e:
         e6:24:cd:d8:28:ac:5f:ef:35:5b:d1:85:00:73:f3:89:96:5f:
         17:bc:e3:e7:fb:74:c4:cc:6a:43:a5:b0:20:58:7a:d6:4f:af:
         ea:f9:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----