Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File:                     pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier:          r/oWzibn4gVSX18KRWLpL9AXW4uq38W1F6y/p7WoUWQ=
Subject key identifier:   06:0B:7C:60:4A:86:96:56:3B:3D:92:CA:A8:71:D3:83:7F:CF:11:A6
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer:       /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial:       01962F74A217A3EC2595BB8A08DC9143E633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number:          0255
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: w8LyBv46iHiTU+RMvVYgtixZWjvpY9u0o45wMHIazcQ=)
                          2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:17:a3:ec:25:95:bb:8a:08:dc:91:43:e6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=060b7c604a8696563b3d92caa871d3837fcf11a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:2a:3b:e4:eb:cb:fe:7d:3e:69:58:1a:0a:
                    f8:99:64:dd:0e:65:f8:f9:6b:d5:0f:54:d4:d9:b7:
                    a2:13:89:00:75:ba:53:39:6e:28:14:26:b8:c0:e6:
                    45:12:51:94:50:a1:28:de:e1:af:7f:a7:5d:d2:06:
                    ef:44:c4:88:56:a4:d3:b9:46:8a:bf:a3:25:be:31:
                    e5:f3:8d:30:74:55:b7:98:91:32:96:ad:92:5d:c2:
                    a2:85:12:fe:3b:11:75:2c:42:84:65:92:0f:92:7d:
                    a1:fd:1b:4a:a9:25:4b:32:f7:71:cb:b7:53:a8:3f:
                    1f:ae:09:36:63:87:de:9f:89:16:b1:c1:0c:7a:4e:
                    f7:16:5c:ee:54:54:6d:0a:ad:31:7f:60:26:74:a6:
                    da:26:83:e0:2a:81:5d:81:b0:6d:da:6f:27:26:d4:
                    e4:c2:e8:a0:71:1f:97:61:5d:00:3d:46:ba:7e:23:
                    7d:da:32:6b:3c:09:f2:ac:a6:0a:4b:3b:04:ad:f9:
                    f7:63:8a:39:15:0b:c5:9f:0d:72:86:4d:2f:4b:f1:
                    00:bd:88:a2:29:9f:64:cd:c2:5f:37:1f:a6:8b:d2:
                    09:27:75:c7:04:d8:9e:14:ba:cd:3d:e1:bb:e1:58:
                    f4:d4:42:56:80:6a:7a:3a:9f:97:d8:07:db:61:a1:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:7C:60:4A:86:96:56:3B:3D:92:CA:A8:71:D3:83:7F:CF:11:A6
            X509v3 Authority Key Identifier:
                keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:89:8e:3a:89:9b:61:b1:8a:6b:ec:af:71:0c:9d:b7:8c:
         6a:90:21:9d:9a:76:37:f1:f6:a9:07:d3:92:f4:3d:88:38:46:
         fb:0c:01:0d:c5:22:e5:5e:3f:89:a2:c9:5e:d6:3a:76:a3:20:
         8d:07:ed:96:78:ec:24:af:d8:14:9f:be:ae:ff:e2:28:7c:15:
         0c:1a:82:d9:56:1c:60:f4:ce:97:1e:e8:b1:d0:ee:7f:3a:ea:
         91:bc:8b:51:19:e8:31:42:39:17:98:2b:6a:4a:44:aa:4f:66:
         56:20:bc:98:d9:02:e3:7d:88:52:c0:60:cd:f0:1d:49:70:a1:
         e6:e2:57:2d:e8:9d:32:9a:52:b9:40:c1:68:84:ed:25:0d:90:
         79:c7:b6:16:63:04:44:68:99:0a:31:52:91:60:f2:b9:d4:a3:
         13:39:42:5d:a4:3b:69:59:4d:d4:70:55:43:17:19:35:48:5a:
         96:d5:15:ed:d4:12:6b:5c:53:6b:92:ac:47:d0:6a:2a:5b:ab:
         d5:36:e9:1a:59:31:57:ea:24:63:50:28:02:0c:60:25:9c:1a:
         52:54:16:e8:f8:2d:c9:9d:00:79:60:19:95:51:51:cd:32:e0:
         53:23:d5:d9:8a:db:1c:b8:0a:d7:17:6f:35:d7:dc:90:98:86:
         89:df:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----