Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File:                     2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier:          y2S33iEA5wLD1qHR7denoMqNXfLL3MusF5KVT6bsOAI=
Subject key identifier:   3C:00:D6:FD:01:F9:E9:14:E8:8B:08:7D:FB:B7:BF:D4:8C:41:E9:17
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer:       /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial:       01962F06DA4F40163DE22F0F079BF5CD738D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number:          0585
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 8DiISKXucYzbHhzU4Cu+UBLFEazCIiuwjF5ani1+9Z0=)
                          2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:da:4f:40:16:3d:e2:2f:0f:07:9b:f5:cd:73:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=3c00d6fd01f9e914e88b087dfbb7bfd48c41e917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:3f:d1:85:c9:9f:f1:5a:09:79:13:1b:64:
                    10:85:34:59:97:a9:c7:b1:2a:c0:19:bd:b7:93:30:
                    e3:76:00:a2:5d:87:7b:5e:e8:d4:e7:8c:7b:51:bc:
                    dd:91:b9:65:bb:fe:4d:3d:37:a5:56:f9:58:d7:44:
                    0a:b3:63:5b:c2:be:5d:69:cc:bf:82:36:cd:00:6d:
                    28:75:14:43:8b:e2:92:07:b7:34:c5:8f:93:3a:17:
                    b5:8a:b7:1c:9c:07:d2:91:72:cf:76:cf:60:c4:49:
                    e9:25:1a:ba:41:b7:13:63:7a:5a:79:29:a1:5e:28:
                    34:36:9f:9f:dd:5b:31:0b:62:f8:ac:0c:e9:e6:c9:
                    86:c6:f7:0f:79:7e:f7:60:65:b9:b2:8e:53:e2:25:
                    db:97:ad:84:f5:04:ee:58:df:71:59:eb:f1:a8:4d:
                    45:db:c8:14:86:07:75:ef:4e:4b:74:c4:4c:83:c9:
                    18:70:78:cb:39:96:94:55:68:35:9a:bd:31:5b:aa:
                    11:00:ea:de:b7:3d:79:dd:3d:97:a4:9a:78:2e:61:
                    92:49:ad:07:d4:57:65:d5:b5:9e:f1:be:85:61:b1:
                    1c:7c:a0:d3:08:b2:59:8d:3d:3b:c8:53:fb:6a:1c:
                    16:95:96:76:79:66:84:e2:da:f0:da:a8:0f:fa:4d:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:D6:FD:01:F9:E9:14:E8:8B:08:7D:FB:B7:BF:D4:8C:41:E9:17
            X509v3 Authority Key Identifier:
                keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:2a:5e:a4:11:32:f7:e2:92:c0:cb:b2:be:b7:33:2b:0c:
         b2:83:ee:cc:8e:28:5f:71:95:4f:5d:15:04:9b:77:28:56:e2:
         f5:a3:00:e9:55:8a:d9:38:48:ac:98:b1:37:ba:eb:1a:87:2f:
         48:53:c2:95:29:f6:a8:e3:e4:89:a8:8f:f9:f9:e9:fb:5c:fb:
         eb:eb:15:0b:0d:71:dd:11:7f:04:61:d4:14:40:bf:b4:89:a0:
         58:c6:54:25:09:e5:c7:17:8e:38:8f:3e:32:aa:8a:05:02:1c:
         c2:73:75:df:dd:38:d0:b5:d2:04:5c:9c:7c:22:8f:30:6c:0d:
         3f:ab:8c:85:31:55:ea:16:77:2f:2a:3e:4b:fb:c3:a9:b1:a8:
         66:f6:a6:56:db:ae:47:6f:2b:60:44:57:93:52:50:1b:e5:9e:
         9b:d7:81:42:9a:07:7c:1e:79:78:9e:6d:53:9d:e6:25:58:51:
         a5:29:06:6f:b6:ab:c1:f7:bc:97:38:b5:ce:a4:53:d9:c9:b0:
         e5:7d:70:46:d7:ad:d5:e7:f6:b7:67:b4:a3:dd:52:25:f2:48:
         8d:ed:d2:3a:55:89:9a:08:07:a1:80:11:5f:bf:cb:3c:f6:86:
         10:b3:07:88:57:8c:78:bd:fd:59:c0:8e:c4:cb:ae:8a:16:1e:
         a9:fc:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----