Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File:                     RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier:          3ldtwXlpao4/XisMQrVhV1YW3bnqsq+I/fyRiNHzLgk=
Subject key identifier:   70:B4:54:4F:AE:10:D2:EA:24:D3:A7:04:37:C5:B1:59:11:4C:A2:C3
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer:       /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial:       01962F064E19987A58ACB3720BFA1912A8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number:          061A
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
                          2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: TIbRJRo1wxpu0VotWsDwKu2kbgVHblRHp9DWD8da03g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4e:19:98:7a:58:ac:b3:72:0b:fa:19:12:a8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=70b4544fae10d2ea24d3a70437c5b159114ca2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:df:0f:dd:4d:61:26:93:4f:42:ae:d8:8a:b4:
                    22:36:82:cb:07:df:53:7e:16:5f:9a:fa:8c:fb:49:
                    e1:83:64:49:8a:dd:d0:5a:d3:81:a8:fc:9f:c6:ca:
                    ee:e3:2b:41:f0:b2:60:ca:b8:af:4d:d1:8a:eb:c5:
                    f8:c8:df:9a:5d:d5:23:9d:99:cf:3d:b0:b5:f7:4e:
                    0e:de:9d:f0:c0:bc:0f:80:b6:81:99:84:3f:a6:64:
                    df:0b:96:ce:77:b7:23:a2:a6:f9:b7:2e:15:4f:bc:
                    c2:f2:27:53:ea:13:40:0b:3a:6a:d4:13:d2:62:f6:
                    17:81:91:7c:d6:5f:78:ee:eb:d6:54:bb:78:e8:2f:
                    c7:3f:9e:e0:9a:21:58:20:a0:cb:10:0b:48:25:80:
                    24:49:69:9c:4b:be:f0:21:55:4a:b3:af:61:cc:39:
                    14:b9:bc:0f:ba:e2:29:e4:17:1e:ec:d8:54:7d:c9:
                    74:ae:8c:1a:18:b1:70:f4:aa:b3:6d:c2:e1:db:74:
                    5b:7a:ba:6d:d1:e4:1e:3a:48:e1:72:e3:80:6a:55:
                    58:29:61:5c:db:37:b5:8a:c8:c2:cc:b7:7c:98:35:
                    ea:4c:43:89:03:33:19:2d:05:0b:9d:68:28:bf:2d:
                    44:e3:da:da:c0:23:bd:ed:a8:c6:e5:7d:cc:63:94:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B4:54:4F:AE:10:D2:EA:24:D3:A7:04:37:C5:B1:59:11:4C:A2:C3
            X509v3 Authority Key Identifier:
                keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:d6:84:fe:be:fb:22:ba:19:f4:74:31:30:c5:d8:b2:7f:
         33:91:8b:ef:eb:b9:0f:92:7a:12:a8:b5:48:95:f3:21:5e:26:
         f4:58:95:0b:0e:40:2e:7a:d2:23:1c:0a:ff:23:2d:75:9e:94:
         41:c1:53:e0:b6:6a:86:49:ab:c1:c2:56:90:48:7d:64:77:d7:
         3b:90:9e:b1:5a:72:69:c8:d9:82:fd:6c:05:c2:d2:3b:e8:cd:
         21:88:52:01:3c:5b:6b:6c:90:01:b7:c2:b3:1f:83:49:7d:bf:
         df:c5:24:6d:1a:de:03:83:b6:11:9b:9b:f4:c1:de:34:b0:1a:
         cf:b7:da:d9:f9:9b:e3:c7:4e:3b:f7:b4:ff:36:c6:74:b9:96:
         56:50:80:4f:a7:8a:1f:d5:1d:eb:94:40:2f:44:72:12:ce:33:
         68:ef:2d:f6:9c:d1:2e:fb:da:57:ce:5e:01:b2:be:60:8e:94:
         3a:6b:6e:87:3e:54:a7:da:5f:1e:0d:b9:e0:c6:9b:a7:e4:cf:
         7c:b5:be:69:3f:d0:66:8d:eb:66:87:eb:ec:d5:9c:7d:5f:d0:
         c3:98:e7:df:d2:17:55:f3:16:9f:05:d9:11:9c:5e:e0:dd:0a:
         ac:c1:f6:24:bf:4f:fc:94:52:87:c6:d4:fe:b1:c3:42:1e:c9:
         bd:a2:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----