Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File:                     Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier:          iaGShD0Ed8kLBgNO2b38zi9MiJ7nOiVwGjPxPKjuC+U=
Subject key identifier:   CA:49:52:FF:41:1D:FF:BB:37:90:E1:11:03:71:AD:75:5E:92:DB:F0
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer:       /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial:       01962F065E0F195BBFCE6ECD2B88E761F918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number:          1098
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: VfyKOTDhug4fDklid+ikyb+XuP8n1NA3ujg0BJ9NW5s=)
                          2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:0f:19:5b:bf:ce:6e:cd:2b:88:e7:61:f9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=ca4952ff411dffbb3790e1110371ad755e92dbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:58:2e:9d:74:0c:59:11:43:11:81:35:79:
                    30:11:7b:4c:65:12:e5:f6:61:73:4f:75:fd:7d:be:
                    79:65:8f:a3:86:41:f8:5b:4f:91:00:bb:da:6b:c5:
                    1b:cc:3e:ad:29:d4:d6:0c:9c:06:79:9b:6a:a3:27:
                    46:eb:34:5c:e9:ad:14:ea:93:fa:17:82:56:31:9a:
                    8a:a9:28:88:a4:23:c5:ed:1a:d7:3f:7b:25:ad:21:
                    08:5e:00:b5:8e:32:3e:db:5b:8d:c6:19:b8:bb:3e:
                    49:60:9a:0b:be:af:05:26:bc:d8:84:ca:4b:03:a8:
                    55:77:4c:97:d4:a7:26:96:a2:24:a1:99:21:7b:45:
                    d4:58:d3:9f:b8:bf:c6:3d:c3:c1:fd:fe:a4:b1:80:
                    9c:fa:bf:ac:30:f1:45:21:53:e3:c3:46:8f:c3:c8:
                    27:39:8c:83:8f:a4:e2:d9:8a:8b:5c:c6:81:6d:d6:
                    26:12:1c:9e:ac:c4:b9:74:89:c9:53:f2:24:64:fa:
                    cd:79:87:c5:ce:fe:f1:a0:1b:d7:ce:de:ac:e4:05:
                    b1:37:dc:0d:a4:b8:d0:2f:5a:06:54:3c:a2:07:72:
                    02:43:bc:f2:e9:8f:16:04:3b:fc:41:49:06:b8:94:
                    09:7d:88:39:f2:d0:15:af:4e:8b:e0:9d:96:2a:04:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:49:52:FF:41:1D:FF:BB:37:90:E1:11:03:71:AD:75:5E:92:DB:F0
            X509v3 Authority Key Identifier:
                keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:9f:bc:64:fe:86:00:65:14:d5:05:71:e2:8b:30:c8:8a:
         3c:81:96:20:37:c0:69:ca:f7:9f:51:36:b9:f4:58:4a:5a:7f:
         be:62:10:43:c2:4a:ac:88:9e:1f:1b:75:c7:77:c4:c6:e1:38:
         31:62:b5:8c:1f:7f:71:33:5c:20:dd:16:f9:94:0d:e8:ed:33:
         78:51:f8:37:ff:dd:ca:2a:17:5b:6e:76:45:69:fb:2f:a1:09:
         23:13:5d:b2:d0:c0:0d:f2:0b:16:7f:91:35:be:09:ec:a1:86:
         88:35:cf:12:16:01:4a:eb:e9:f5:37:17:3c:a0:2c:69:19:14:
         8a:e4:e4:5d:41:bb:ec:99:d9:a0:c8:0b:8e:3c:b9:48:29:4b:
         34:5a:d1:20:c5:53:95:31:27:e7:82:0a:ff:1a:4f:ac:48:8e:
         3f:d4:0b:4b:0d:0f:ad:8e:eb:95:53:e5:f3:6f:4c:ab:3f:1c:
         8c:b4:af:d7:81:ff:30:70:0d:80:32:38:43:c3:87:e8:03:0f:
         37:bb:49:76:36:cd:f9:17:f5:d5:b1:ea:4a:eb:c2:08:ca:37:
         ce:16:5f:82:6b:bd:83:f1:88:51:61:f1:ac:bb:21:d6:98:eb:
         46:9a:f5:9b:ea:61:d2:fd:dd:eb:2d:39:77:1d:ba:73:22:f9:
         cd:85:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----