Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          k3cgf0wtjbhW0FBITxU+XvJK36JmcBaHU1mj1Z3dpX0=
Subject key identifier:   CE:C0:B9:60:82:A0:53:F7:04:3A:76:D5:CB:6E:6C:0A:7C:9C:E5:9C
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       01962ECFB45D1E871ADA474830FA927FC8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          13D6
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: jjTOOkxF5sVVYdgpw25KUCLAM1OXz7pJtnSOyOugAOU=)
                          2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=)
                          3: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=)
                          4: iWkENaumrn_VqAXGYeFWSy8pOdc.roa (hash: BifAs92ML2XP6L2w5bLWRZw5RDndqu7o+E6QeoQC5zA=)
                          5: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:5d:1e:87:1a:da:47:48:30:fa:92:7f:c8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=cec0b96082a053f7043a76d5cb6e6c0a7c9ce59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:ef:16:9a:ae:49:f2:00:1c:4c:64:cc:cc:
                    2d:5f:34:c2:4d:40:c8:99:33:70:ac:71:e1:d9:9c:
                    72:ca:39:69:3f:8d:59:4c:12:9b:25:26:39:4c:c8:
                    6c:0b:a5:51:da:0b:35:dc:31:aa:74:14:4f:5c:a1:
                    4b:29:07:d2:4f:d0:6e:ef:71:c8:d7:82:c3:c7:b1:
                    8c:dc:a5:df:8e:a5:2a:74:5b:13:67:f8:25:c9:87:
                    53:d1:10:83:ca:26:5b:10:05:f7:60:3c:ed:e2:fc:
                    05:55:50:ee:53:6d:45:ca:d9:b6:b6:b5:dc:78:a9:
                    bf:3e:6f:6c:fc:8a:c3:62:cb:25:7e:ea:b0:77:d3:
                    aa:93:6d:e3:57:62:d7:01:06:e3:96:ed:c5:35:ae:
                    03:dd:dd:c3:54:62:6b:25:6e:c1:d5:77:76:4d:68:
                    1e:7a:6b:7e:a6:13:3d:22:80:55:58:56:0e:87:ae:
                    37:07:27:06:a8:ce:97:cb:01:ec:4e:17:1d:3e:b0:
                    33:11:c6:03:15:66:d5:57:90:85:d1:2c:e4:b3:c5:
                    be:49:93:17:04:21:72:ed:94:96:c6:73:5e:84:95:
                    70:16:31:c1:3b:b7:78:6a:26:bb:89:92:0b:79:1b:
                    90:05:fe:f5:94:c0:35:39:1a:b3:f9:07:7f:c6:dd:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:B9:60:82:A0:53:F7:04:3A:76:D5:CB:6E:6C:0A:7C:9C:E5:9C
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7c:d9:0a:86:99:46:1b:78:33:34:fe:40:92:60:cb:c8:3c:
         46:07:0b:18:0f:57:fd:df:16:00:c5:5d:80:29:52:85:7f:c9:
         68:2d:d4:94:a7:b5:10:10:d8:01:b2:fe:62:80:8f:97:27:a5:
         df:8f:c4:7a:5a:e1:c8:61:2f:84:91:38:4c:b6:f8:3f:40:27:
         18:7a:9e:aa:b6:8d:cf:08:0a:15:a6:0c:1e:f5:fc:11:70:e7:
         4b:e6:13:97:03:a2:19:e2:5b:f1:0e:b1:99:85:43:56:96:7b:
         b0:41:b7:eb:47:81:27:7a:b5:8e:8a:5f:e9:98:e2:77:1e:fe:
         55:dc:24:8a:0b:c2:33:9a:8c:1d:e1:5d:c3:6c:f8:71:77:47:
         37:3d:95:34:61:69:ba:98:40:4f:3d:8f:1a:c8:f3:3e:52:44:
         68:cd:6a:3c:9e:49:33:ef:02:2d:3b:30:8c:41:a9:33:31:d5:
         bf:26:eb:6e:bc:6e:04:33:eb:75:39:fc:2c:85:d9:08:fe:15:
         d1:65:6b:27:a3:eb:ce:bd:58:5d:7e:35:45:b5:bb:8a:c3:fc:
         a8:83:fd:fc:44:d7:f1:48:07:13:39:b9:6f:5a:f7:5d:93:16:
         a9:d7:dd:33:38:2a:a5:9c:7a:9f:cd:c7:25:8f:71:93:d5:d9:
         14:b1:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----