Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File:                     K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier:          /prgmZcBsInH8am2uwMa9GqxFYHZjC6Cytvlehhwu9o=
Subject key identifier:   22:5B:B3:B4:A1:61:3C:29:48:14:A5:50:0A:5F:45:A8:7C:85:7A:53
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer:       /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial:       01962E6203EC1EBFEEB1385CFE46619F6A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number:          02BF
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
                          2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: gI8n4a3SNi/EFm04XY+9wCTyAXjgVTuJ/SKTdzoPNcg=)
                          3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:03:ec:1e:bf:ee:b1:38:5c:fe:46:61:9f:6a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=225bb3b4a1613c294814a5500a5f45a87c857a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:cf:1f:4a:9b:df:72:00:ff:35:d0:48:83:
                    32:6e:d4:3a:eb:6b:59:26:4e:1d:57:cd:af:fb:b6:
                    33:bc:c1:a4:31:ec:de:57:39:69:03:f1:fe:1a:29:
                    17:6b:e0:72:25:d6:bc:3d:d6:17:df:60:f2:3d:9b:
                    62:e6:eb:fe:eb:a6:bf:fb:13:9f:a7:d4:6a:37:10:
                    95:ec:ec:b0:5c:30:84:5b:60:51:5a:d1:e8:70:c0:
                    35:4f:46:51:3f:4f:df:ce:6d:39:0d:15:75:e9:6c:
                    85:30:a7:1d:dd:59:74:6d:6e:d8:6b:c9:aa:9b:8c:
                    dd:65:16:09:46:ab:1c:bd:68:f7:3c:c8:a3:9f:65:
                    0a:9f:8e:da:a1:0e:ed:56:88:d3:ad:bc:3a:94:53:
                    8c:ac:4b:b3:f6:52:d4:78:29:48:9e:00:59:06:af:
                    8e:76:a6:ad:68:77:e2:d0:87:17:ef:6d:85:da:73:
                    e4:14:66:79:ad:bd:31:18:4f:cf:5b:1a:2a:c9:7c:
                    e7:3d:e5:6c:ab:f7:ae:df:8c:61:e5:b2:62:6a:17:
                    51:e5:b1:a0:e9:3a:6c:d4:e5:79:c3:25:22:ff:cd:
                    0f:64:47:fd:97:30:5a:93:81:92:74:54:40:ec:ad:
                    06:5e:39:81:93:80:32:f7:e0:70:5e:c6:1e:ba:09:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5B:B3:B4:A1:61:3C:29:48:14:A5:50:0A:5F:45:A8:7C:85:7A:53
            X509v3 Authority Key Identifier:
                keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:4f:69:3b:82:c1:98:07:47:65:7c:86:3c:89:ff:6b:57:
         04:b8:c1:b2:6d:ec:de:9a:72:ef:56:e3:b3:3d:d7:23:84:65:
         44:54:52:4b:f8:b7:d4:89:fe:bb:8a:2f:50:4b:c1:96:ce:b4:
         3e:7e:4c:22:b0:ea:6a:c4:9a:94:23:b4:f1:cb:80:6f:b2:38:
         41:8d:99:dd:18:32:13:33:ac:52:39:2d:14:6e:05:38:07:4c:
         e6:33:b9:36:16:d4:4f:12:85:b0:24:63:16:b9:67:0e:4e:ca:
         de:58:46:5c:6c:62:25:1f:e1:99:fd:9f:d8:72:85:b3:90:e2:
         8c:49:b2:d6:c9:f3:72:81:47:83:7c:81:b3:97:67:9b:be:0a:
         dd:e8:c9:de:88:93:19:4a:2b:13:20:b7:7b:58:cb:4d:ff:d0:
         00:b9:5d:13:7f:bb:70:51:ec:0a:77:c7:b5:f1:00:c1:68:a9:
         4b:00:87:7e:bf:cb:17:3f:f2:54:34:0d:c0:c0:a3:96:bb:6c:
         7a:03:53:da:50:0f:63:d9:ee:30:ac:b4:72:77:cf:f7:2b:f4:
         bd:89:57:2a:ec:0e:e1:8a:78:ec:ec:1b:32:f9:7b:b2:30:04:
         06:2c:9a:02:b1:97:63:78:8f:c2:86:b9:ef:f9:b7:50:06:88:
         42:83:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----