Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File:                     2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier:          1RDjyWawLNvImtDgJRGu0b1iuxDd/dApESgNjNfLJno=
Subject key identifier:   DC:2B:5B:F1:06:EC:47:FB:51:50:48:CC:7F:E9:A0:A2:70:F4:99:70
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer:       /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial:       01962DF446AB2952F6D12B42262F00EDC4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number:          CB
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: B3Yvx6wXgyAUe/x3vurWrRnbKuRhsWFIVh9aYBasShw=)
                          2: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
                          3: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:46:ab:29:52:f6:d1:2b:42:26:2f:00:ed:c4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=dc2b5bf106ec47fb515048cc7fe9a0a270f49970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ac:4d:56:dc:5d:6b:d5:5f:45:de:19:26:2b:
                    17:b0:06:8c:eb:f4:10:88:41:5d:85:dd:8e:a3:23:
                    22:24:6f:43:f5:f1:0f:c7:2a:41:14:78:fe:7a:84:
                    a9:47:ae:f2:78:b4:a1:ce:dd:8d:bc:4d:9e:ce:d9:
                    89:0c:27:9b:67:9e:9a:4d:98:06:7e:68:27:8f:c0:
                    44:80:bf:b2:5c:fc:e6:36:78:59:cb:06:23:ff:92:
                    f2:0d:8a:4b:4d:2b:d1:d7:83:4e:3a:c6:58:08:7d:
                    fd:33:06:26:94:15:92:0e:93:58:bd:09:35:b9:bf:
                    ae:2f:23:dc:27:48:41:1e:de:ef:6e:ad:fd:f5:5b:
                    d8:d5:65:23:ce:a0:a9:11:96:77:eb:43:64:70:63:
                    19:c2:74:45:22:1e:39:79:db:1a:3f:0c:d4:2d:ba:
                    17:c2:3c:44:7c:5b:fa:38:87:df:5e:9d:67:d2:45:
                    4b:76:9f:76:37:c3:ea:3d:00:ed:6f:0d:d3:79:16:
                    37:51:51:ce:a8:fa:14:1a:d5:55:dc:90:89:31:a2:
                    b9:af:af:b3:5f:eb:03:31:71:e0:19:89:19:ec:d4:
                    25:55:10:3c:b3:e3:4f:5a:28:a7:b9:8b:45:b0:86:
                    08:2c:12:ea:c4:9a:ca:83:d9:c9:55:d5:80:f0:eb:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:5B:F1:06:EC:47:FB:51:50:48:CC:7F:E9:A0:A2:70:F4:99:70
            X509v3 Authority Key Identifier:
                keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:71:63:a8:65:e7:12:fb:42:4d:5c:b3:b5:c6:b0:78:b3:
         27:13:cc:a4:e3:cc:ef:42:c2:13:6d:10:69:58:79:95:c3:52:
         1f:4b:9d:e6:4c:82:3e:99:e8:79:98:bf:bd:91:db:48:6e:17:
         3c:23:ae:b6:74:52:eb:19:d1:bf:7f:ed:7f:6d:12:56:4f:0e:
         cd:7f:1a:34:ac:10:f5:c3:91:35:06:e1:59:54:ed:b0:11:22:
         1d:30:ab:06:14:62:55:16:c9:d1:a0:87:b2:35:be:6f:c9:b3:
         cc:3c:03:c0:34:8c:0a:24:63:89:3d:22:a7:c6:eb:c9:6d:ae:
         02:fa:50:11:41:16:b1:c8:a8:b7:8b:e2:92:a0:99:62:53:c7:
         9a:d6:44:54:95:15:9a:0c:5f:bb:11:a5:ba:52:9b:c6:55:12:
         5c:8c:7f:31:d8:52:53:82:18:9e:3a:b1:5d:50:92:d6:a9:cc:
         9b:0e:c2:21:a6:f2:20:cd:6e:da:f2:8e:fd:49:da:48:8a:c4:
         c1:fd:7d:14:3a:26:f2:ec:61:26:97:e9:8b:0b:c7:da:76:29:
         b6:80:8a:65:65:c8:1a:15:b4:b4:03:a8:76:fb:f2:47:f4:9a:
         70:45:35:d4:6e:2e:6b:c6:89:e6:69:c2:c2:16:0a:55:8f:39:
         78:7e:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----