Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File:                     2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier:          q0Xkat3f/Da6g65rra9ryqEhEGUnF5NJ69PQKb8w6WI=
Subject key identifier:   67:C7:53:B9:4F:B3:6B:E1:AE:1F:D4:E2:10:B4:45:A5:8B:28:A3:D8
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer:       /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial:       01962F06FB3C6D58DF7AAA3558F783AF55AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number:          1377
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: EhNwQ86bm6P4zy9cSdOqMIPQU2ddIraki1PPAixw6wQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:3c:6d:58:df:7a:aa:35:58:f7:83:af:55:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=67c753b94fb36be1ae1fd4e210b445a58b28a3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:16:2c:2d:34:43:82:32:71:8a:f4:5a:c6:
                    02:42:09:a5:56:63:bc:fb:a8:2c:b6:a5:d4:a9:42:
                    87:ec:d7:3e:a3:37:5b:af:f8:53:c9:45:c8:ce:59:
                    05:02:63:16:79:9c:04:05:87:03:56:36:83:0c:8f:
                    d4:c2:3c:68:de:fb:d0:22:43:5a:32:9c:df:17:5a:
                    46:4f:a8:bf:41:62:8b:d6:d3:34:e1:bc:ee:4a:56:
                    bb:84:0d:ab:86:35:f8:b2:4e:b0:eb:59:f7:5b:8e:
                    f2:c1:c8:0c:e3:6d:1e:7b:e3:95:a1:97:68:a8:dd:
                    71:d6:a5:a8:97:fe:b7:72:7a:c9:79:4b:12:6a:49:
                    fe:6f:27:08:78:39:e2:8d:16:b3:1b:94:eb:5e:d5:
                    cc:c2:36:79:0b:46:0b:7d:6f:7e:8c:5e:b0:f6:87:
                    02:c6:f5:cc:21:e4:1e:1f:d5:e3:41:bc:77:5c:53:
                    83:50:70:70:a7:ca:36:e7:75:3a:99:42:61:a5:3b:
                    60:6c:ed:8f:30:de:af:34:16:76:bd:84:c5:89:8b:
                    1a:97:1b:5f:56:80:19:ef:8f:b8:63:65:ca:14:df:
                    e2:ef:00:55:2c:f2:cb:28:8d:45:f4:f7:b4:9f:ae:
                    e1:6b:9c:c8:4a:ad:de:4f:65:98:38:19:62:df:af:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C7:53:B9:4F:B3:6B:E1:AE:1F:D4:E2:10:B4:45:A5:8B:28:A3:D8
            X509v3 Authority Key Identifier:
                keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:77:b6:f1:08:f8:c4:79:38:98:95:5d:0f:fa:12:de:4b:ad:
         83:c1:ab:c0:45:09:95:8a:13:23:12:6f:bf:3f:c6:1b:0e:e5:
         9e:41:ab:51:e5:4b:1c:52:64:0f:13:5e:0e:b4:92:82:a4:3c:
         53:a5:83:73:d3:c7:4a:0c:f4:57:db:4d:9f:ff:18:da:c8:49:
         aa:46:70:17:0c:8e:92:c7:d3:f8:6f:6f:06:5e:de:5b:90:c5:
         6c:c8:19:c6:a4:c4:1b:32:dc:91:d3:78:dd:fb:bb:44:3b:a8:
         b8:a9:89:1f:3d:1c:6c:07:8a:80:18:76:5a:55:36:e9:23:72:
         64:de:df:d4:e0:c6:47:7a:4b:6f:2d:53:1c:c9:db:85:9b:41:
         ac:05:db:af:57:fa:a1:4e:7d:c1:ce:b3:a8:85:fe:f0:2f:cc:
         ad:8f:99:b4:d3:ba:95:aa:f7:0b:4a:c6:f8:29:83:ed:db:ce:
         95:13:af:0e:49:58:b0:f0:63:9f:54:18:f1:85:0e:24:ab:86:
         d3:68:78:c2:da:fe:bf:1a:7a:45:6e:08:59:79:66:cc:cb:4b:
         6d:30:51:4b:37:11:be:ec:b6:05:1c:42:b8:2b:85:62:62:f0:
         2a:2b:20:08:2d:0b:69:96:2e:2b:e0:ce:b8:77:2b:9a:13:8b:
         0a:41:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----